Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Feb 2009 19:03:42 +0100 (CET)
From:      Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
To:        Andrew Gould <andrewlylegould@gmail.com>
Cc:        FreeBSD Questions Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: off topic: reporting attempts to access computers
Message-ID:  <20090219190217.K47219@wojtek.tensor.gdynia.pl>
In-Reply-To: <d356c5630902191000n16c3d3a0md98c4246a5ff2c79@mail.gmail.com>
References:  <d356c5630902191000n16c3d3a0md98c4246a5ff2c79@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> My logs show a dictionary attack of invalid user names against port 22.  I
> obtained an abuse@* email address using 'whois' and reported the beginning
> and ending date/times and the originating IP address.
>
> Is there any other information I need to send?

i don't think so.
anyway - if all password are well made still there is no problem.

  Is there someone else I
> should notify?

i don't think so.

> Most of the attacks I receive are from other continents, so I just block the
> network range found via 'whois'.

it's good solution, mostly because those in abuse@* often simply ignore 
such mails.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090219190217.K47219>