Today, someone from a large organisation (I have their static IP address) has conducted a series of cross site script attacks (XSS), albeit unsuccessfully.
Also, other individuals have repeatedly attempted a series of different SQL injection and XSS attacks over the last year or so; again unsuccessfully.
Following security best practices, along with monitoirng and logging is one thing, but what do you actually do when your site is subject to hacking attempts?
Do you advise them via their ISP (which they will probably deny) or do you notify a government agency?
Any suggestions from someone that has been through this would be appreciated ...
...
Go to the complete details ...