Re: [cobalt-users] Hacker attack on a RaQ - please help

[Diana Brake <diana@xxxxxxxxxxxxx>]

Hi James,

I sympathize. Seems I spend inordinant amounts of time reporting these 
attempts. Truly though, I get good responses from most ISPs that I've 
reported attacks to. Even had a French ISP e-mail me that they found the 
person and were investigating. The situation was resolved very quickly..on 
a weekend no less.

But in the short run, install Portsentry and LogCheck. These two programs 
together will block, log and e-mail you any suspicious activity. You can 
set how often you want to know. These programs don't constitute a firewall, 
but the notifications they provide are very helpful.

Logcheck installation directions are in the archive. PortSentry directions 
are harder to find, but I installed it myself without trouble. Go to

http://www.psionic.com/

and download and read directions.

HTP,
Diana

At 06:01 PM 11/5/2000 -0500, you wrote:
> We were attacked tonight from a hacker who appeared not to get in. They 
> attempted to use a script to use brute force at getting into an 
> authentication directory. Their IP address is 152.34.63.8, a high school 
> in Person Count NC USA.
>
> Is there anything that I can do to prevent such an attack, or to be able 
> to be notified by email of the attack or to stop the IP number from 
> attempting a second time.
>
> Thanks
>
> James Riordon
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

Crest Communications, Inc.		diana@xxxxxxxxxxxxx
Beautiful Sunny Florida		http://crestcommunications.com/
352-495-9359, 425-732-9785 fax