nanog mailing list archives
Re: FTP Probes from Taiwan/China
From: mike harrison <meuon () highertech net>
Date: Sun, 9 Sep 2001 12:59:48 -0400 (EDT)
Has anyone seen a dramatic increase in FTP probes/scans/bad stuff from certain IP blocks in Taiwan or China? Specifically, 211/8, 61/8, and 202/7. I'm logging over 7500 probes/hr right now. Is there a new exploit out or something? Another network just surfaced: 210.82/15
I am getting lots of port 80'ish scans from those IP ranges. and a few port 139, but I have not seen a port 21 (FTP) scan from anyone in the last 30 minutes... while monitoring a /19 and a /20 locally.
Current thread:
- FTP Probes from Taiwan/China Gordon Ewasiuk (Sep 08)
- Re: FTP Probes from Taiwan/China Stephen J. Wilcox (Sep 09)
- Re: FTP Probes from Taiwan/China mike harrison (Sep 09)
- Re: FTP Probes from Taiwan/China Gordon Ewasiuk (Sep 09)
- Re: FTP Probes from Taiwan/China kysi ferul (Sep 10)
- Re: FTP Probes from Taiwan/China kysi ferul (Sep 10)
- Re: FTP Probes from Taiwan/China mike harrison (Sep 09)
- Re: FTP Probes from Taiwan/China Stephen J. Wilcox (Sep 09)