-----Original Message----- From: kclug-bounces@kclug.org [mailto:kclug-bounces@kclug.org] On Behalf Of Brian Densmore Sent: Friday, October 29, 2004 10:17 AM To: KCLUG (E-mail) Subject: Crack attempt
FYI. This guy spent two hours Thursday, 3am-5am, trying to break into my server's root account.
[snip]
ARIN says:
OrgName: USDA Office of Operations OrgID: UOO-2 Address: Suite 133, Building A Address: 2150 Centre Ave City: Fort Collins StateProv: CO PostalCode: 80526 Country: US
[snip]
OrgAbuseHandle: ZU20-ARIN OrgAbuseName: USDA - Office of the ChiefInformation Officer OrgAbusePhone: +1-970-295-5277 OrgAbuseEmail: Network.Operations@usda.gov
OrgNOCHandle: ZU20-ARIN OrgNOCName: USDA - Office of the ChiefInformation Officer OrgNOCPhone: +1-970-295-5277 OrgNOCEmail: Network.Operations@usda.gov
OrgTechHandle: ZU20-ARIN OrgTechName: USDA - Office of the ChiefInformation Officer OrgTechPhone: +1-970-295-5277 OrgTechEmail: Network.Operations@usda.gov
Brian, I would highly recommend sending a copy of your logs to the address listed above. They likely do not know this is happening (yet), and could use the info I'm sure.
Dustin