[cobalt-users] script kiddies are a pain RaQ4

[James Riordon <outofcontrol@xxxxxxxxxxxx>]

Hi,

	I have noticed that some stupid little pain is trying for 
many hours now to get into a password protected directory on our 
server. The logs show that they are trying to get access by brute 
force. But, the IP address is different for every single attempt! I 
know it is the same person because it is a sequential alpha numeric 
user name used over nad over and over and over. They try once every 
minute or so. Not as bad as 10 times per second as some of those 
scripts do.

Any how. I have tried to search the archives but came up empty 
handed. Perhaps I am searching the wrong thing. If any one has any 
suggestions, I am all ears. Is there a way to track the person down?

Here is a sample log just in case it helps.

[Thu Mar  8 22:13:17 2001] [error] [client 200.210.150.3] user jimi 
not found: /members/
[Thu Mar  8 22:14:22 2001] [error] [client 210.226.44.105] Client 
sent malformed Host header
[Thu Mar  8 22:15:22 2001] [error] [client 63.194.198.214] user jimmy 
not found: /members/
[Thu Mar  8 22:16:32 2001] [error] [client 195.92.22.69] user jimmyb 
not found: /members/
[Thu Mar  8 22:17:17 2001] [error] [client 12.4.163.96] user jimvann 
not found: /members/
[Thu Mar  8 22:17:59 2001] [error] [client 195.101.120.45] user 
jjhelito not found: /members/
[Thu Mar  8 22:20:22 2001] [error] [client 208.200.172.240] user joey 
not found: /members/
[Thu Mar  8 22:21:11 2001] [error] [client 212.93.133.210] user joey 
not found: /members/
[Thu Mar  8 22:22:15 2001] [error] [client 62.81.12.12] user jofranca 
not found: /members/
[Thu Mar  8 22:23:49 2001] [error] [client 12.3.51.140] user john not 
found: /members/
[Thu Mar  8 22:24:41 2001] [error] [client 194.20.179.222] user john 
not found: /members/
[Thu Mar  8 22:25:07 2001] [error] [client 195.103.248.2] user john 
not found: /members/
[Thu Mar  8 22:26:36 2001] [error] [client 195.31.252.163] user 
johnny not found: /members/
[Thu Mar  8 22:27:39 2001] [error] [client 202.44.245.30] user johnny 
not found: /members/
[Thu Mar  8 22:28:57 2001] [error] [client 210.241.224.234] user 
johnny not found: /members/
[Thu Mar  8 22:29:55 2001] [error] [client 195.159.99.52] user 
johnson not found: /members/
[Thu Mar  8 22:31:06 2001] [error] [client 207.35.44.34] user josh 
not found: /members/
[Thu Mar  8 22:31:55 2001] [error] [client 194.100.74.61] user 
joshman not found: /members/
[Thu Mar  8 22:32:34 2001] [error] [client 195.101.120.45] user 
joshua1 not found: /members/
[Thu Mar  8 22:33:26 2001] [error] [client 195.21.146.2] user joshwil 
not found: /members/
[Thu Mar  8 22:33:59 2001] [error] [client 200.210.150.3] user 
JTMartin not found: /members/
[Thu Mar  8 22:35:03 2001] [error] [client 209.36.254.10] user juggs 
not found: /members/
[Thu Mar  8 22:36:01 2001] [error] [client 24.226.143.181] user juicy 
not found: /members/
[Thu Mar  8 22:37:03 2001] [error] [client 195.171.151.195] user 
julia not found: /members/
[Thu Mar  8 22:38:02 2001] [error] [client 12.4.163.30] user jumped 
not found: /members/
[Thu Mar  8 22:39:09 2001] [error] [client 194.20.179.222] user 
jumpsuit not found: /members/
[Thu Mar  8 22:40:01 2001] [error] [client 195.136.255.242] user 
jungle not found: /members/
[Thu Mar  8 22:40:52 2001] [error] [client 194.209.195.4] user just 
not found: /members/
--
James Riordon
President of Riordon Digital Imaging
System Administrator for Amigo-3 Interactive Inc.
1515 Carson Ave., Dorval Quebec   H9S 1N1
Tel. 514.422.9905  -  Fax. 514.422.9906

For unbeatable prices on toner, inkjet and ribbon 
supplies...http://www.riordon.ca/
For your all your hosting and domain registrations...http://www.amigo-3.com/