Re: two attempted break-ins from Hong Kong & Italy

From: Quaoar (quaoar_at_tenthplanet.net)
Date: 07/05/05 

Date: Tue, 5 Jul 2005 09:16:04 -0600

yarmfelder@yahoo.com wrote:
> Hello,
>
> I would like to announce two attempted but failed
> break-in attempts to a computer that I have locally.
>
> The first was someone from Italy, ip address
> 80.17.93.150 who attempted to break in via ssh,
> using random user names and passwords.
>
> inetnum: 80.17.93.128 - 80.17.93.159
> netname: CONSORZIO-AGRARIO-PICENO
> descr: CONSORZIO AGRARIO PICENO
> country: IT
> admin-c: FP27-RIPE
> tech-c: FP27-RIPE
> status: ASSIGNED PA "status:" definitions
> mnt-by: INTERB-MNT
> source: RIPE # Filtered
> address: CONSORZIO AGRARIO PICENO
> address: viale Indipendenza 2
> address: I- 63100 Ascoli Piceno AP
> address: Italy
> nic-hdl: FP27-RIPE
> source: RIPE # Filtered
>
> The second from Hong Kong had the IP 210.17.180.83,
> who wanted to log in via ssh as root.
>
> Here is their info:
>
> inetnum: 210.17.180.80 - 210.17.180.95
> netname: SPORT_FIELD
> descr: Sport Field Limited
> person: PSN NOC
> nic-hdl: PN2-AP
> e-mail: noc@pacific.net.hk
> address: 574, 1 TradeMart Drive,
> address: HITEC, Kowloon Bay,
> address: Hong Kong
> phone: +85-226-201880
> fax-no: +85-223-354520
> country: HK
> changed: noc@pacific.net.hk 20030825
> mnt-by: MAINT-HKSUPER-AP
> source: APNIC
>
> I shall certainly be reporting this to the appropriate
> authorities :)
>
> YF

FWIW, you shall be shouting into the darkness. Practically, no one
cares and that's the reason for establishing personal computer security.

Q

Relevant Pages