The WOMBAT Attack Attribution method: some results