[ILUG] reporting hacking

[John Madden]

On (02/11/04 23:22), Liam McDermott didst pronounce:
> =

> my brother is running a linux box connected to adsl 24/7 and has hag
> several attempted ssh connections from the same ip address.
> =

> who should he contact? , the gardai?, or is there another specialist depa=
rtment.
> =

I wouldn't think you have any grounds to contact the police. First thing
to do would be to firewall off access from that machine, and log all
attempts. There was a worm travelling around that tried to guess at
passwords for common accounts on linux systems, and there was a thread
on this list about it a couple of months back.

-- =

Chat ya later,

John.
--
BOFH excuse #138: BNC (brain not (user brain not connected)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://mail.linux.ie/pipermail/ilug/attachments/20041102/23acf038/att=
achment.pgp