So we caught some computers trying to download a ton of files from our webserver, and we stopped them before they got much (used iptables to drop their IPs). These were not web crawlers, but scripts that had been written to target a specific data set on our servers.
Has anyone had success in actually tracking down and getting authorities or ISPs to do anything about this kind of thing? If so, please post your suggestions.
Basically I have these IP addresses of the computers that were accessing our servers, they are owned by, surprisingly, a very very large Software company in Washington state. So maybe a rogue worker there or maybe somebody just on their network. I've tried to contact this company, but haven't gotten very far there. Maybe they'll get back to me.
What is the best course of action? Contact the local police where the source IPs are from? Somehow I doubt that will be very effective. But I'm open to advice. What about the FBI, I mean this might be small potatoes for them, but it does involve a large US corp. Anyone try this route?
EDIT: Please assume for sake of argument, that they Hacked into our servers. Let's not get into the whole discussion of "Well you had the data out there, so they didn't steal it", that really misses the point. You can even imagine it was a denial of service attack. You have their IP addresses, they are from a US corp. What do you do??