[21501] in North American Network Operators' Group
Re: Exodus / Clue problems
daemon@ATHENA.MIT.EDU (brian moore)
Mon Nov 16 02:20:51 1998
Date: Sun, 15 Nov 1998 18:22:01 -0800
From: brian moore <bem@cmc.net>
To: nanog@merit.edu, list@inet-access.net
Mail-Followup-To: nanog@merit.edu, list@inet-access.net
In-Reply-To: <19981115232414.6465.qmail@smx.pair.com>; from sigma@pair.com on Sun, Nov 15, 1998 at 06:24:13PM -0500
On Sun, Nov 15, 1998 at 06:24:13PM -0500, sigma@pair.com wrote:
>
> Let me guess - the IP is 209.67.50.254, and they're trying to login to
> nameservers as "root", sometimes a dozen times per second?
Not seeing that rate, but yep:
Nov 15 18:10:25 mailhost.cmc.net ipmon[117]: 18:10:24.956040 le0 @35 b
209.67.50.254,1608 -> mailhost.cmc.net,telnet PR tcp len 20 44 -S
--
Brian Moore | "The Zen nature of a spammer resembles
Sysadmin, C/Perl Hacker | a cockroach, except that the cockroach
Usenet Vandal | is higher up on the evolutionary chain."
Netscum, Bane of Elves. Peter Olson, Delphi Postmaster
