Crack attempt

[Dustin Decker]

> -----Original Message-----
> From: kclug-bounces at kclug.org [mailto:kclug-bounces at kclug.org] On Behalf
> Of Brian Densmore
> Sent: Friday, October 29, 2004 10:17 AM
> To: KCLUG (E-mail)
> Subject: Crack attempt
> 
> FYI.
> This guy spent two hours Thursday, 3am-5am,
> trying to break into my server's root account.
> 
[snip]
> ARIN says:
> 
> OrgName:    USDA Office of Operations
> OrgID:      UOO-2
> Address:    Suite 133, Building A
> Address:    2150 Centre Ave
> City:       Fort Collins
> StateProv:  CO
> PostalCode: 80526
> Country:    US
[snip]
> OrgAbuseHandle: ZU20-ARIN
> OrgAbuseName:   USDA - Office of the ChiefInformation Officer
> OrgAbusePhone:  +1-970-295-5277
> OrgAbuseEmail:  Network.Operations at usda.gov
> 
> OrgNOCHandle: ZU20-ARIN
> OrgNOCName:   USDA - Office of the ChiefInformation Officer
> OrgNOCPhone:  +1-970-295-5277
> OrgNOCEmail:  Network.Operations at usda.gov
> 
> OrgTechHandle: ZU20-ARIN
> OrgTechName:   USDA - Office of the ChiefInformation Officer
> OrgTechPhone:  +1-970-295-5277
> OrgTechEmail:  Network.Operations at usda.gov

Brian,
I would highly recommend sending a copy of your logs to the address listed
above.  They likely do not know this is happening (yet), and could use the
info I'm sure.

Dustin