Re: [cobalt-users] script kiddies are a pain RaQ4

["Carrie Bartkowiak" <ravencarrie@xxxxxxxx>]

>I have noticed that some stupid little pain is trying for
>many hours now to get into a password protected directory on our
>server. The logs show that they are trying to get access by brute
>force. But, the IP address is different for every single attempt!

You know what? This looks more like the effects of a newsgroup posting than
one person trying different IPs. The IPs are just so widely varied from
attempt to attempt, seems to me that it's a group of people.
Anyhow, you can WHOIS the IP addies and contact the owners, just in case
they aren't forged. Send along the logs as proof when you write them. Some
of these might be compromised boxes. Even if they're not, the forging itself
will get the true IP owners interested, because that could get them into a
heap of trouble. You might be able to get some help in dealing with this
buttwipe.

Best of luck - and patience.  ;)

CarrieB