Hack attempt originating on MTN data network!

[Laura Buckley]

Over the weekend some misguided individual attempted to gain unauthorised access to our network.

The originating IP address is 41.208.50.160 and an NSLOOKUP reveals that "41-208-50-160.mtnns.net" is where the IP address is registered. Hmmm... look closely... would appear to be on MTN's data network. Trust me, this attempt was so amateur that I doubt the IP address was spoofed.

Now, the question is... how do I get MTN to work with me on tracking down this individual?

 

[ZA_medic]

I work for a large bank, and for us its difficult - we get the scorpions involved. The problem with MTN is that every customer comes in with the same IP address as if they are behind a proxy.

If damage was done a case should be logged with the SAPS.

 

[gpe]

That's just MTN server .. Microsoft_DS as a port I'm willing to bet.

If it was a hack attempt would have said 172.* as an IP.

 

[Laura Buckley]

They could not get in therefore no damage was done!