Tracking down intruders

From: Ergo Sum (google_at_home.com)
Date: 07/29/03


Date: Tue, 29 Jul 2003 20:26:05 GMT

Hello,

I would like to know how to track down an offending IP that seems to be
trying to enter into my Apache server through some kind of SSL bug. I have
the IP number in the logs, but the *whois* and *host* commands don't give
me sufficient information on the network originating the suspicious
attempts.

Are there any more precise tools, so I can trace this IP down and eventually
warn the originating network of the abuse?

Thanks

-- 
Cogito ergo sum

Quantcast