Don't Mess With ORSMHosting.com -
An email I recieved after complaining to an ISP in Japan that one of their users was trying to bruteforce ssh on one of my servers.
-Jonesy
---------------------------
Dear Mr.Andrew Jones
Thank you very much for log.
We found the costomer with this incident.
We will brake the contract about this customer
or stop connection acount next week.
Best regards,

> Here it is again...
> Thanks,
> Andrew Jones
>
> > ----- Original Message -----
> > Subject: Re: Attempt to brutefoce SSH from your network
> > From: andrew@jonesy.com.au
> > To: "繧、繝ウ繧ソ繝シ繝ェ繝ウ繧ッabuse"
> > Date: 22-08-2005 10:16
> >
> >
> > Thank you for your cooperation, here is the log as requested.
> > Please note that all times are in AEST (GMT +10)
> > Regards,
> > Andrew Jones
> > ORSM Hosting
> >
> > > ----- Original Message -----
> > > Subject: Re: Attempt to brutefoce SSH from your network
> > > From: "繧、繝ウ繧ソ繝シ繝ェ繝ウ繧ッabuse"
> > > To: "Andrew Jones"
> > > Date: 22-08-2005 9:36
> > >
> > >
> > > Dear Mr.Andrew Jones
> > >
> > > Thank you for warning Email.
> > >
> > > We apologize for the trouble from our customer.
> > >
> > > It has been atacked by one of our customer.
> > > 203.141.145.148 is under our control IP address.
> > >
> > > Could you send a bruteforce atack log to our email address
> > support@interlink.or.jp ?
> > > If we get it, we are going to give him a warning information and
> > > an urgent investigation request immediately.
> > >
> > >
> > > And we keeping an eye on this IP address and site name.
> > > 203.141.145.148
> > >
> > > Best regards,
> > >
> > > From INTERLINK support staff Arai
> > >
> > > > Dear Sir/Madam
> > > > Over the past couple of days there have been attempts by
> 203.141.145.148
> > > > to bruteforce Secure Shell on one of my servers.
> > > > Please stop this immediately, or I will take further action.
> > > > Regards,
> > > > Andrew Jones
> > > > ORSM hosting
> > > >
>