[Tfug] Repeated breakin attempts

erich tfug@tfug.org
Thu Dec 19 11:29:01 2002


   Has anybody seen this party making intrusion attempts into their system?
My gateway is dynamic and temporary everytime I dial up, but their 
script is
very busy and finds it nonetheless.
   

Dec 17 09:23:43 cbl proftpd[3494]: cbl.fgi.com 
(pD9520464.dip.t-dialin.net[217.82.4.100]) - USER anonymous

Dec 18 16:17:22 cbl proftpd[4180]: cbl.fgi.com 
(p5088F25B.dip.t-dialin.net[80.136.242.91]) - USER anonymous


   My system rejects this because there is no anonymous ftp service here. I
look thru my message logs regularly, and have seen numerus attempts in
the past by this party. I think it originates in the US, but on one
occasion I have seen a .de intrusion attempt.

                                                           Cheers,
                                                           Erich