[37217] in North American Network Operators' Group
Re: black hat .cn networks
daemon@ATHENA.MIT.EDU (Dan Hollis)
Mon May 7 15:54:56 2001
Date: Mon, 7 May 2001 11:51:22 -0700 (PDT)
From: Dan Hollis <goemon@anime.net>
To: Justin Hinderliter <justin@interaccess.com>
Cc: <linneweh@concentric.net>,
Elias Halldor Agustsson <elias@skyrr.is>, <nanog@merit.edu>
In-Reply-To: <003001c0d71c$f292b190$8f6746cf@interaccess.com>
Message-ID: <Pine.LNX.4.30.0105071148240.5820-100000@anime.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 7 May 2001, Justin Hinderliter wrote:
> For those looking for evidence of attacks, I personally know of 3 boxes that
> were hit and rooted this morning. The three attacks happened between 6:20am
> and 7:04am.
The past week i've seen attacks increase 5-fold, mostly 111/udp attacks
mixed with some lpr and ftp on the side. Also lots of http scanning, which
I havent seen in quite a while.
-Dan
