Security Incidents mailing list archives

Re: Possible Intrusion Attempt?

From: Keith Owens <kaos () ocs com au>
Date: Wed, 28 May 2003 13:33:08 +1000

On 27 May 2003 20:35:51 -0000, 
Matt LaFelero <ramstryke () yahoo com> wrote:

In-Reply-To: <Pine.LNX.4.44.0305221541100.9229-100000 () procyon pantek com>
Here is one of the source from one of the messages..

--------------------
<html><head>Username
<title>deferent</title>Username</head><body><center>
<a href="http://detractor:myopic@www%2e%6d%6frt%67ag%65l%6fw%72%61%74%65%
73.n%65%74/Lead3500/">


www.mortgagelowrates.net (210.51.181.1) is a persistent spammer.
Repeated complaints to tech-group () china-netcom com and
anti-spam () ns chinanet cn net have been ignored.  Given the amount of
spam advertising 210.51.0.0/16 and the lack of response from
tech-group () china-netcom com, it is fairly obvious that all of
210.51.0.0/16 should be null routed.


----------------------------------------------------------------------------
----------------------------------------------------------------------------

Current thread:

RE: Possible Intrusion Attempt?, (continued)
- - RE: Possible Intrusion Attempt? Rob Shein (May 25)
    - Re: Possible Intrusion Attempt? Andersson (no email) (May 26)
    - Re: Possible Intrusion Attempt? Thomas Zimmerman (May 26)
    - Re: Possible Intrusion Attempt? Lars Duesing (May 27)
    - Re: Possible Intrusion Attempt? Stewart (May 27)
- RE: Possible Intrusion Attempt? Thomas, Frank (May 23)
- RE: Possible Intrusion Attempt? Whiteside, Larry [contractor] (May 25)
- RE: Possible Intrusion Attempt? FWAdmin (May 26)
- RE: Possible Intrusion Attempt? Brad Webb (May 27)
- Re: Possible Intrusion Attempt? Matt LaFelero (May 27)
  - Re: Possible Intrusion Attempt? Keith Owens (May 28)
    - Re: Possible Intrusion Attempt? Jeff (May 29)