[ILUG] reporting hacking

[FRLinux]

On Tue, 2 Nov 2004 23:22:43 +0000, Liam McDermott
<theirishmole at gmail.com> wrote:
> my brother is running a linux box connected to adsl 24/7 and has hag
> several attempted ssh connections from the same ip address.

Those do not show a successful hack (or i think crack would be more
correct here).
I get plenty of these and various other attacks on my DSL line (static IP).

> who should he contact? , the gardai?, or is there another specialist department.

Nobody until you get a cracked box. Keep your firewall tight and log
important attacks (i decided not to log anymore calls to 13{7,8,9},
445 as they were seriously crapping out my logs.

Steph
-- 
"Step by step, penguins are taking my sanity apart ..."