[21889] in North American Network Operators' Group
IMAP attacks continue
daemon@ATHENA.MIT.EDU (Daniel Senie)
Sun Nov 22 14:19:51 1998
Date: Sun, 22 Nov 1998 13:51:19 -0500
From: Daniel Senie <dts@senie.com>
To: nanog@merit.edu
The frequency of IMAP attacks is increasing, and the number of IP
addresses scanned per attack seems to be increasing as well. In the last
24 hours, I've been scanned by:
fermi.math.csi.cuny.edu
c149.lib.uci.edu
sockeye.cob.calpoly.edu
quebec.upa.qc.ca
Anyone upstream of any of these able to add a Sniffer? It'd be
interesting to see if someone is connected in via telnet or ssh and
launching the attacks remotely. With all of these types of attack in the
last several days, the systems doing the attacking have all been ones
that were compromised.
--
-----------------------------------------------------------------
Daniel Senie dts@senie.com
Amaranth Networks Inc. http://www.amaranthnetworks.com
