|
Also (although again, it's probably a bit academic), see what whois returns for that IP address. If the IP address belongs to a reputable company in a country with a legal system, then there'll be a place to report abuse, and maaaybe you might be able to get somebody to do something about it. Although then then, if you're not a big company with connections to the government, the sad fact is it's probably going to be difficult to persuade anyone to take it seriously.
If if belongs to a Nigerian money launderer or an Iranian Internet cafe, then I'd just take a deep breath and spend your time mopping up the damage and securing your system.
Incidentally, bear in mind that if the attacker had moderate resources, then the IP address may be spoofed anyway.
A final thought, without wishing to give you any false hopes, you maay want to check out O'Reilly, "Internet Forensics". Good luck...
Last edited by neilcoffey; 05-08-2009 at 03:45 PM.
Reason: added book ref
|