noncooperation in tracing an attack

Sat Jan 31 22:21:48 UTC 1998

	I'm very unhappy to have to post a message here to get someone at
globalcenter.net to help in tracing an attack that has been going on for
several hours now.  Their NOC notified our NOC that they would not be able
to get security involved in this attack until monday, which is completely
unacceptable.

	If anyone cares, the target for the attack is a single IP address of
207.227.138.15 and it has been spoofed to be coming from several different
IP addresses over the past few hours.  The first few addresses used were
1.1.1.1 and 2.2.2.2, now the current traffic flow is said to be coming from
207.227.138.15.

	I personally have no problem with blocking this attack to stop it, but it
sure would be nice to actually nab one of these people once in awhile.

	Thanks for the lack of help,

	Brian