nanog mailing list archives

Re: FTP Probes from Taiwan/China


From: "Stephen J. Wilcox" <steve () opaltelecom co uk>
Date: Sun, 9 Sep 2001 10:58:49 +0100 (BST)



Maybe I'm not getting attacked in the same way as you - perhaps its
someone directing DoS at you or something? But I am seeing a massive
increase in scans from lots of IPs and to lots of ports.

Steve

On Sun, 9 Sep 2001, Gordon Ewasiuk wrote:



Has anyone seen a dramatic increase in FTP probes/scans/bad stuff from
certain IP blocks in Taiwan or China?  Specifically, 211/8, 61/8, and
202/7.  I'm logging over 7500 probes/hr right now.  Is there a new
exploit out or something?

Another network just surfaced:  210.82/15

-Gordon

--------------------------------------------------
Gordon Ewasiuk, Certifed Sun Fanatic,  Winstar VHC
The REAL office number is here----->  703.893.4901
Tired of BSODs, My Computer, and Code Red?
http://www.sun.com/solaris/binaries/
-------------------------------------------------



-- 
Stephen J. Wilcox
IP Services Manager, Opal Telecom
http://www.opaltelecom.co.uk/
Tel: 0161 222 2000
Fax: 0161 222 2008


Current thread: