Thread: intrusion?
View Single Post

  #10  
Old 07-19-2008, 06:41 AM
Default Re: intrusion?
Unruh writes:


>>what is it? I need to write to something like abuse@72.3.243.92 ?
>
> You can try. It probably will not do any good. I now have 140 IP addresses
> in my hosts.allow file who are banned from my site for behaviour like this.

I had a 12-minute long brute-force attack once. It filled my logs. I
was pissed. I wrote the ISP in question. They wrote back and said they
term'ed the guy's account.

Writing a level-headed, relevent-info-containing abuse report with GMT
timestamps and actual log files will many times yield results. Many
times they won't report back that they did something, so you can't
take no response back as a solid indicator that nothing was done. Keep
the language simple and sweet, as you might be dealing with someone
that doesn't speak your language.

With ssh keys and really cheap USB storage units these days, there are
really few reasons to use any remote password logins to your
system. They can't guess at passwords if you're not taking passwords



--
[** America Is A Police State **]
http://www.hermes-press.com/police_state.htm
http://www.theregister.co.uk/2008/01..._nsa_internal/
http://www.wired.com/politics/securi...007/08/wiretap
http://www.privacyinternational.org/...D=x-347-559597
AT&T Betrays America: http://www.eff.org/nsa/hepting
Reply With Quote