The Elsmar Cove Forum and Site Map The Elsmar Cove Wiki More Free Files The Elsmar Cove Forums Discussion Thread Index Post Attachments Listing Failure Modes Services and Solutions to Problems Elsmar cove Forums Main Page Elsmar Cove Home Page

Go Back   The Elsmar Cove Forum > Elsmar Cove Forum Essentials > Forum News and General Information > Old Forum News and Issues Threads Archive
Reload This Page Attempted Break-ins Resumed
Register Photo AlbumsBlogs FAQ Registered Visitors Social Groups Calendar Search Today's Posts Mark Forums Read


The Elsmar Cove Forum SideBar!
Monitor the Forum
Monitor New Forum Posts
New Threads Feeds
RSS FeedRSS Feed
Sponsor Link










$ Contributor Forum Access
Courtesy Quick Links

Links that Elsmar Cove visitors will find useful in your quest for knowledge:

Howard's International Quality Services

Atul's Symphony Technologies

Dave Scott's Scott Quality Solutions

Praxiom Research Group

NIST's Engineering Statistics Handbook

IRCA - International Register of Certified Auditors

SAE - Society of Automotive Engineers

Quality Digest Portal

IEST - Institute of Environmental Sciences and Technology

ASQ - American Society for Quality

All the Important Standards and Related Web Sites in the World
Reply
Page 1 of 2 1 2
 
Thread Tools Search this Thread Rate Thread Content Display Modes
  #1  
Old 16th September 2003, 06:16 AM
Marc's Avatar
Marc Marc is offline
Your Elsmar Cove Host

Registration Date: Jan 1996
Location: West Chester, Ohio - USA
Age: 59
  
Posts: 15,857
Thanks Given to Others: 1,895
Thanked 1,566 Times in 1,018 Posts
Blog Entries: 4
Karma Power: 605
Karma: 11559
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Send a message via AIM to Marc Send a message via Skype™ to Marc
Read This! Attempted Break-ins Resumed
Yesterday came another round of break-in attempts (all from the same person). Reported to the FBI:

elsmar.com login failures:
Sep 15 17:04:38 elsmar proftpd[24255]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:04:49 elsmar proftpd[24311]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:05:04 elsmar proftpd[24419]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:05:10 elsmar proftpd[24716]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:05:25 elsmar proftpd[24791]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:05:37 elsmar proftpd[24936]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:05:40 elsmar proftpd[24954]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:05:52 elsmar proftpd[25067]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:06:24 elsmar proftpd[25324]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:06:29 elsmar proftpd[25346]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:06:42 elsmar proftpd[25404]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:06:51 elsmar proftpd[25521]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:06:53 elsmar proftpd[25545]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:03 elsmar proftpd[25605]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:07 elsmar proftpd[25668]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:18 elsmar proftpd[25711]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:22 elsmar proftpd[25762]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:27 elsmar proftpd[25836]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:33 elsmar proftpd[25868]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:38 elsmar proftpd[25909]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:07:55 elsmar proftpd[26003]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.
Sep 15 17:08:01 elsmar proftpd[26147]: elsmar.com (212.202.36.38[212.202.36.38]) - USER www (Login failed): Incorrect password.

-- End of security output --

Identified as:

domain: qsc.de
descr: QSC AG
descr: Mathias-Brueggen-Str. 55
descr: D-50829 Koeln
descr: Germany
nserver: ns01.qsc.de 213.148.129.11
nserver: ns02.qsc.de 213.148.130.11
status: connect
changed: 20030210 165502
source: DENIC

[admin-c]
Type: PERSON
Name: Christian Ebert
Address: QSC AG
Address: Mathias-Brueggen-Str. 55
City: Koeln
Pcode: 50829
Country: DE
Changed: 20020228 093428
Source: DENIC

[tech-c][zone-c]
Type: ROLE
Name: QSC Hostmaster
Address: QSC AG
Address: Mathias-Brueggen-Str. 55
City: Koeln
Pcode: 50829
Country: DE
Phone: +49 221 66 98 000
Fax: +49 221 66 98 009
Email: kontakt@qsc.de
Changed: 20020228 094104
Source: DENIC
Attached Thumbnails
20030916-break-ina.jpg  
__________________
A Search is a terrible thing to waste!
One Test is Worth 1000 Expert Opinions - The plural of anecdote is not data.
We can't solve problems by using the same kind of thinking we used when we created them. - Unknown
Reply With Quote

Sponsored Links
  #2  
Old 16th September 2003, 06:45 AM
Atul Khandekar's Avatar
Atul Khandekar Atul Khandekar is offline
Forum Administrator

Registration Date: Mar 2000
Location: Pune, India
Age: 47
  
Posts: 1,073
Thanks Given to Others: 83
Thanked 84 Times in 55 Posts
Karma Power: 90
Atul Khandekar has disabled his/her Karma.
Send a message via Skype™ to Atul Khandekar
Default
Could this be someone who's forgotten his/her correct password and trying different variations???
__________________
You are never given a wish without also being given the power to make it true. You may have to work for it, however. ~Richard Bach
Reply With Quote
Sponsored Links

  #3  
Old 16th September 2003, 07:08 AM
Marc's Avatar
Marc Marc is offline
Your Elsmar Cove Host

Registration Date: Jan 1996
Location: West Chester, Ohio - USA
Age: 59
  
Posts: 15,857
Thanks Given to Others: 1,895
Thanked 1,566 Times in 1,018 Posts
Blog Entries: 4
Karma Power: 605
Karma: 11559
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Send a message via AIM to Marc Send a message via Skype™ to Marc
Default
Trying to get root access to the server is NOT someone trying to log into the forums who forgot their password. Those attempts are logged separately.

Nope - the above is typical of someone attempting to get root access. It is an attempt to access the server as ROOT via telnet - not http.
__________________
A Search is a terrible thing to waste!
One Test is Worth 1000 Expert Opinions - The plural of anecdote is not data.
We can't solve problems by using the same kind of thinking we used when we created them. - Unknown
Reply With Quote
  #4  
Old 16th September 2003, 07:18 AM
Atul Khandekar's Avatar
Atul Khandekar Atul Khandekar is offline
Forum Administrator

Registration Date: Mar 2000
Location: Pune, India
Age: 47
  
Posts: 1,073
Thanks Given to Others: 83
Thanked 84 Times in 55 Posts
Karma Power: 90
Atul Khandekar has disabled his/her Karma.
Send a message via Skype™ to Atul Khandekar
Default
Right. (I must be dreaming...) User www and it looks like FTP login attempt!
__________________
You are never given a wish without also being given the power to make it true. You may have to work for it, however. ~Richard Bach
Reply With Quote
  #5  
Old 16th September 2003, 07:40 AM
Marc's Avatar
Marc Marc is offline
Your Elsmar Cove Host

Registration Date: Jan 1996
Location: West Chester, Ohio - USA
Age: 59
  
Posts: 15,857
Thanks Given to Others: 1,895
Thanked 1,566 Times in 1,018 Posts
Blog Entries: 4
Karma Power: 605
Karma: 11559
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Send a message via AIM to Marc Send a message via Skype™ to Marc
Default
If it was ftp failures, I *think* (I'm still learning) it would read sftp-server rather than proftpd. As I understand it, this log (it's a daily log) only records failures of telnet login attempts.

tcsh and sshd are user telnet (unsecure) logins which cannot gain root access.
__________________
A Search is a terrible thing to waste!
One Test is Worth 1000 Expert Opinions - The plural of anecdote is not data.
We can't solve problems by using the same kind of thinking we used when we created them. - Unknown
Reply With Quote
  #6  
Old 16th September 2003, 09:35 AM
energy
Unregistered Guest

  
Posts: n/a
Default
Schuhmachers AG für Finanzmarketing
Investor-Relations-Partner of QSC AG QSC AG
Investor Relations
qsc@schumachers.net invest@qsc.de
Prinzregentenstraße 68 Mathias-Brüggen-Straße 55
D-81675 Munich D-50829 Cologne
Tel.: +49 (0) 89 - 48 92 72 -0 Tel.: +49 (0) 221 - 66 98 -1 12
Fax: +49 (0) 89 - 48 92 72 -12 Fax: +49 (0) 221 - 66 98 -0 09

This is the link to their website. The name in bold is the same as listed in Marc's report. Maybe they want to see how profitable the Cove is.
Reply With Quote
  #7  
Old 16th September 2003, 09:52 AM
Marc's Avatar
Marc Marc is offline
Your Elsmar Cove Host

Registration Date: Jan 1996
Location: West Chester, Ohio - USA
Age: 59
  
Posts: 15,857
Thanks Given to Others: 1,895
Thanked 1,566 Times in 1,018 Posts
Blog Entries: 4
Karma Power: 605
Karma: 11559
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.Marc is appreciated, and has over 1700 Karma points.
Send a message via AIM to Marc Send a message via Skype™ to Marc
Default
Probably a script kiddy who routed him/her self through an open proxy on their network. But I don't know enough about cracking servers to spit at - I'm guessing.

Profitable - um, not. More on that later in another thread.
__________________
A Search is a terrible thing to waste!
One Test is Worth 1000 Expert Opinions - The plural of anecdote is not data.
We can't solve problems by using the same kind of thinking we used when we created them. - Unknown
Reply With Quote
  #8  
Old 16th September 2003, 04:42 PM
Claes Gefvenberg's Avatar
Claes Gefvenberg Claes Gefvenberg is offline
Forum Administrator

Registration Date: May 2000
Location: Eskilstuna, Sweden
Age: 49
  
Posts: 3,771
Thanks Given to Others: 246
Thanked 244 Times in 172 Posts
Blog Entries: 13
Karma Power: 213
Karma: 4951
Claes Gefvenberg is appreciated, and has over 1700 Karma points.
Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.Claes Gefvenberg is appreciated, and has over 1700 Karma points.
Default Have a look at QSC AG....
I think it would be a good idea to have a look at QSC AG. Considering what they do for a living they ought to be able to take prompt action...

More info here: http://www.ripe.net/perl/whois?searc...rm_type=simple . Even a request to report hacks...:

role: QSC Internet Services
address: QSC AG
address: Mathias-Brueggen-Str. 55
address: D-50829 Koeln
address: Germany
phone: +49 221 66 98 000
fax-no: +49 221 66 98 009
e-mail: abuse@qsc.de
remarks: ********************************************
remarks: QSC AG - Internet Services Department
remarks: To report SPAM/UCE/Portscans/Hacks please
remarks: contact abuse@qsc.de.
remarks: For peering requests, BGP policy changes
remarks: etc. contact peering@NOSPAM.qsc.de. For
remarks: Routing issues id-ip@NOSPAM.qsc.de. Please
remarks: remove NOSPAM. from email address.
remarks: ********************************************
....


/Claes
__________________
Hanlon's Razor.
Never attribute to malice that which can be adequately explained by stupidity.
User Groups: Elsmar Cove Cycling Enthusiasts Formula 1 fanatics Photo freaks Readers Corner
Reply With Quote
Reply
Page 1 of 2 1 2

Lower Navigation Bar
Go Back   The Elsmar Cove Forum > Elsmar Cove Forum Essentials > Forum News and General Information > Old Forum News and Issues Threads Archive
Reload This Page Attempted Break-ins Resumed

Bookmarks

« Previous Thread | Next Thread »

Visitors Currently Viewing this Thread: 1 (0 Registered Visitors and 1 Unregistered Guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Forum Search
Display Modes Rate Thread Content
Linear Mode Linear Mode
Rate Thread Content:

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Discussion Threads
Discussion Thread Title Thread Starter Forum Replies Last Post or Poll Vote
Bathroom break... Stijloor YouTube and Videos Forum 5 3rd April 2009 05:19 PM
Minitab QC2 add ins Michael Walmsley Using Minitab Software 1 17th October 2006 08:39 AM



The time now is 05:31 AM. All times are GMT -4.
The time zone can be changed in your UserCP --> Options.

Contact Marc - Elsmar Cove Site Home Page - Elsmar Cove Index (Ar) - Privacy Statement - Top


   

All Y'All Come Back Now, Y' Hear?

Made With A Mac! FreeBSD OS Powered by Apache!
Using php4 Forums provided and maintained by Marc Smith Database by MySQL

FAIR USE and CORRECTNESS NOTICE: This site contains copyrighted material the use of which has not always been specifically authorized by the copyright owner. We are making such material available in our efforts to advance understanding of environmental, political, human rights, economic, democracy, scientific, and social justice issues, etc. We believe herein constitutes a 'fair use' of any such copyrighted material as provided for in section 107 of the US Copyright Law. In accordance with Title 17 U.S.C. Section 107, the material on this site is distributed without profit to those who have expressed a prior interest in receiving the included information for research and educational purposes. For more information go to: http://www.law.cornell.edu/uscode/17/ If you wish to use copyrighted material from this site for purposes of your own that go beyond 'fair use', you must obtain permission from the copyright owner. In addition, I do not guarantee the correctness of the content. The risk of using content from the Elsmar Cove web site and forums remains with the user/visitor.

Responsibility Statement: Each person is responsible for anything they post in the Elsmar Cove forum. Neither I, Marc Timothy Smith, nor any of the forum Moderators, are responsible for the content of posts people make. Liability for post content resides with the poster as does interpretation and/or acceptance and/or use of advice by the reader.

Complaints: If you have a complaint with a post in a forum discussion thread, including Content in general, fighting, flaming, copyright infringement, defamation and/or 'slander', please use the 'Report This Post Report This Post Button button which appears at the top of every post in every thread.
Site courtesy of:
Marc Timothy Smith - Cayman Business Systems, 8466 Lesourdsville-West Chester Road, West Chester, Ohio 45069-1929 - USA
(513) 341-6272

To contact me, click the Google Voice link below, enter Your Name and Your Phone Number and Google will ring your phone and connect you for free!
The Elsmar Cove Web Site is *CopyFree*
no new posts