Security Incidents mailing list archives
portscan from *.sabiz.co.kr
From: peterb () SCALA-RND COM (Balazs, Peter)
Date: Thu, 1 Apr 1999 07:26:02 +0100
Hi! I have encountered continuous portscan activity from 210.205.111.47. Accoding to nslookup, it belongs to sabiz.sabiz.co.kr Some of my friends found the same. What can be done against it? Thanks in advance. PeterB Mar 31 08:09:33 rpg scanlogd: 210.205.111.47 to **** ports 80, 23, 143, 110, 111, 53, 31337, 2766, ..., fSrpauxy, TOS 00, TTL 47 @08:09:33 Mar 31 08:09:34 rpg ipop3d[16800]: connect from 210.205.111.47 Mar 31 08:09:34 rpg in.ftpd[16803]: refused connect from 210.205.111.47 and so on...
Current thread:
- portscan from *.sabiz.co.kr Balazs, Peter (Mar 31)