nanog mailing list archives
Re: Very peculiar Telnet probing (possibly spoofed?)
From: Suresh Ramasubramanian <suresh () outblaze com>
Date: Thu, 09 Sep 2004 11:24:44 +0530
Jeff Kell wrote:
I'm getting attacks from: 159.226.x.x 202.x.x.x 203.x.x.x
These /8s are shared between a whole lot of different ISPs in different countries.
Do the machines trying this typically look like botnets, or open proxies?Do you notice any other traffic (malicious or otherwise) from these IPs immediately before or after these telnet probes?
srs
Current thread:
- Re: Spammers Skirt IP Authentication Attempts, (continued)
- Re: Spammers Skirt IP Authentication Attempts Peter Corlett (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Richard Welty (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Paul Vixie (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Mark Jeftovic (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Rich Kulawiec (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Michael . Dillon (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Richard Cox (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Suresh Ramasubramanian (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Paul Vixie (Sep 08)
- Very peculiar Telnet probing (possibly spoofed?) Jeff Kell (Sep 08)
- Re: Very peculiar Telnet probing (possibly spoofed?) Suresh Ramasubramanian (Sep 08)
- Re: Very peculiar Telnet probing (possibly spoofed?) Chris Brenton (Sep 09)
- Re: Spammers Skirt IP Authentication Attempts Mark Jeftovic (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts [operational content at end] Rich Kulawiec (Sep 09)
- Re: Spammers Skirt IP Authentication Attempts Daniel Reed (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Stephane Bortzmeyer (Sep 10)
- Re: Spammers Skirt IP Authentication Attempts Joe Rhett (Sep 10)
- Re: Spammers Skirt IP Authentication Attempts Stephane Bortzmeyer (Sep 10)