RE: [cobalt-users] Acitive System Attack from Mexico ?

[John M Troher <admin@xxxxxxxx>]

I bet if you complain to prodigy they wont do anything.

I sent reports to Road Runner and they basically told me
that they are not going to do anything UNLESS DAMAGE is caused.

I wonder how much damage we would cause them if we ALL blocked ALL
of their IPs?



-----Original Message-----
From: johnm@xxxxxxxxxxxxxxxxxxxx [mailto:johnm@xxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, March 06, 2001 2:26 PM
To: admin@xxxxxxxxxxxxxxxxx
Subject: [cobalt-users] Acitive System Attack from Mexico ?


Hi there, almost every day I get a variation of these messages - is anyone 
else being hit by the same ###@@## ?

Cheers

John


Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Mar  6 18:20:09 ns portsentry[760]: attackalert: UDP scan from host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 to UDP port: 22
Mar  6 18:20:09 ns portsentry[760]: attackalert: Host 148.233.197.78 has 
been blocked via wrappers with string: "ALL: 148.233.197.78"
Mar  6 18:20:09 ns portsentry[760]: attackalert: UDP scan from host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 to UDP port: 22
Mar  6 18:20:09 ns portsentry[760]: attackalert: Host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 is already blocked 
Ignoring
Mar  6 18:22:25 ns portsentry[760]: attackalert: UDP scan from host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 to UDP port: 22
Mar  6 18:22:25 ns portsentry[760]: attackalert: Host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 is already blocked 
Ignoring
Mar  6 18:22:25 ns portsentry[760]: attackalert: UDP scan from host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 to UDP port: 22
Mar  6 18:22:25 ns portsentry[760]: attackalert: Host: 
du-148-233-197-78.prodigy.net.mx/148.233.197.78 is already blocked 
Ignoring

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users