[41416] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

FTP Probes from Taiwan/China

daemon@ATHENA.MIT.EDU (Gordon Ewasiuk)
Sun Sep 9 00:29:08 2001

Date: Sun, 9 Sep 2001 00:25:38 -0400 (EDT)
From: Gordon Ewasiuk <gewasiuk@gnmc.net>
To: <nanog@merit.edu>
Message-ID: <Pine.GSO.4.33.0109090009490.5653-100000@enterprise.gnmc.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu



Has anyone seen a dramatic increase in FTP probes/scans/bad stuff from
certain IP blocks in Taiwan or China?  Specifically, 211/8, 61/8, and
202/7.  I'm logging over 7500 probes/hr right now.  Is there a new
exploit out or something?

Another network just surfaced:  210.82/15

-Gordon

--------------------------------------------------
Gordon Ewasiuk, Certifed Sun Fanatic,  Winstar VHC
The REAL office number is here----->  703.893.4901
Tired of BSODs, My Computer, and Code Red?
http://www.sun.com/solaris/binaries/
-------------------------------------------------


home help back first fref pref prev next nref lref last post