RE: Proper ISP Reporting

["Lyal Collins" <lyal.collins () key2it com au>]

Ive had useful outcomes by:
Sending them an email - include the security@, abuse@, sales@, technical@
and info@ addresses (someone should read it from that list)
Include in the email some log extracts - IP address, dates, times and an
assessment of severity (critical, nuisance value etc) - but not too much -
they only need little detail to identify the miscreants, in my experience.
Thanks them for their time and assistance.
The next issue is how does the service provider react, or if they have a
reaction/incident management process at all....

Lyal

-----Original Message-----
From: Jason Burton [mailto:jab () leximedia net] 
Sent: Wednesday, 17 August 2005 12:02 PM
To: incidents () securityfocus com
Subject: Proper ISP Reporting


Anyone have samples of how to properly report to ISP's regarding abuse?
 
ie. What format the email should be in, sample phrases, or sentences that
might help. I've been doing this for a while and while some work, some have
not. Im wondering if anyone has examples.
 
Thanks
 
Jason Burton
Leximedia LLC
jab () leximedia net