[21565] in North American Network Operators' Group
RE: Exodus: this is bad
daemon@ATHENA.MIT.EDU (Adam Rothschild)
Mon Nov 16 19:32:31 1998
X-Envelope-To: nanog@merit.edu
Date: Mon, 16 Nov 1998 18:05:25 -0500 (EST)
From: Adam Rothschild <asr@millburn.net>
To: Chris Mauritz <chrism@raremedium.com>
cc: nanog@merit.edu, list@inet-access.net
In-Reply-To: <93A9C7D71478D211ACEC00805F65C14FC54E@steamer.raremedium.com>
On Mon, 16 Nov 1998, Chris Mauritz wrote:
> The jerkoff is trying from 207.104.58.91 too. I've just filtered it as
> well. Check out /var/log/secure on oven.
True... and in rapid succession, too. Anyone notice anything fishy from
this fucker as well?
[root@oven log]# cat secure | more
Nov 15 23:41:36 oven in.telnetd[20426]: connect from 207.104.58.91
Nov 15 23:41:36 oven in.telnetd[20427]: connect from 207.104.58.91
Nov 15 23:41:51 oven in.telnetd[20428]: connect from 207.104.58.91
Nov 15 23:41:52 oven in.telnetd[20429]: connect from 207.104.58.91
Nov 15 23:42:01 oven in.telnetd[20430]: connect from 207.104.58.91
Nov 15 23:42:01 oven in.telnetd[20431]: connect from 207.104.58.91
Nov 15 23:42:21 oven in.telnetd[20432]: connect from 207.104.58.91
Nov 15 23:42:28 oven in.telnetd[20433]: connect from 207.104.58.91
Nov 15 23:42:28 oven in.telnetd[20434]: connect from 207.104.58.91
Nov 15 23:42:28 oven in.telnetd[20435]: connect from 207.104.58.91
Nov 15 23:42:28 oven in.telnetd[20436]: connect from 207.104.58.91
Nov 15 23:42:28 oven in.telnetd[20437]: connect from 207.104.58.91
Nov 15 23:42:28 oven in.telnetd[20438]: connect from 207.104.58.91
Nov 15 23:42:49 oven in.telnetd[20439]: connect from 207.104.58.91
Nov 15 23:42:49 oven in.telnetd[20440]: connect from 207.104.58.91
Nov 15 23:42:49 oven in.telnetd[20441]: connect from 207.104.58.91
Nov 15 23:43:28 oven in.telnetd[20442]: connect from 207.104.58.91
Nov 15 23:43:34 oven in.telnetd[20443]: connect from 207.104.58.91
Nov 15 23:43:34 oven in.telnetd[20444]: connect from 207.104.58.91
Nov 15 23:43:43 oven in.telnetd[20445]: connect from 207.104.58.91
