Gentoo Archives: gentoo-security

From: Jochen Maes <sejo@g.o>
To: gentoo-security@l.g.o
Subject: [gentoo-security] hackers
Date: Mon, 10 Oct 2005 09:59:13
Message-Id: 434A39D9.30509@gentoo.org
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Hey all,
5
6
7 ok one off my servers i keep on getting one iprange that tries to
8 login through ssh (200-300) attemps with other usernames.
9 This is probably a script that's being ran all the time, but the isp
10 doesn't mind, i allready sent my logs and my complaints and i don't
11 get any response.
12 Is there something like hackerwatch that i can send those logs to
13 (preferrably automatically) when happening?
14 I've blocked the range now so isn't a problem but hate it that the isp
15 doesn nothing against it.
16
17 greetings,
18
19 SeJo
20
21 - --
22 "Defer no time, delays have dangerous ends"
23
24 Jochen Maes
25 Gentoo Linux
26 Gentoo Belgium
27 http://sejo.be
28 http://gentoo.be
29 http://gentoo.org
30 -----BEGIN PGP SIGNATURE-----
31 Version: GnuPG v1.4.2 (GNU/Linux)
32 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
33
34 iD8DBQFDSjnYMXMsRNMHhmARAoXVAJ92bRcBAO04hIUk2VgBOcpm1gm9cgCgmNHe
35 ZPNqAHab5fXLdx11vdod5rc=
36 =35Kg
37 -----END PGP SIGNATURE-----
38
39 --
40 gentoo-security@g.o mailing list

Replies

Subject Author
Re: [gentoo-security] hackers Christophe Garault <christophe@×××××××.org>
Re: [gentoo-security] hackers APerez@×××.ca
Re: [gentoo-security] hackers woody <cyril@×××××××.org>