[Tfug] Repeated breakin attempts

Steve Davis tfug@tfug.org
Thu Dec 19 12:11:01 2002


dip.t-dialin.net is used by T-Online in germany, probably a DSL account. the IP is dynamic and reassigned (at least) every 24 hours. I constantly get hammered by these 
idiots, lately on port 4662.

On Thu, 19 Dec 2002 11:31:55 -0700, erich wrote:

>
>   Has anybody seen this party making intrusion attempts into their system?
>My gateway is dynamic and temporary everytime I dial up, but their 
>script is
>very busy and finds it nonetheless.
>   
>
>Dec 17 09:23:43 cbl proftpd[3494]: cbl.fgi.com 
>(pD9520464.dip.t-dialin.net[217.82.4.100]) - USER anonymous
>
>Dec 18 16:17:22 cbl proftpd[4180]: cbl.fgi.com 
>(p5088F25B.dip.t-dialin.net[80.136.242.91]) - USER anonymous
>
>
>   My system rejects this because there is no anonymous ftp service here. I
>look thru my message logs regularly, and have seen numerus attempts in
>the past by this party. I think it originates in the US, but on one
>occasion I have seen a .de intrusion attempt.
>
>                                                           Cheers,
>                                                           Erich
>
>
>
>_______________________________________________
>tfug mailing list
>tfug@tfug.org
>http://www.tfug.org/mailman/listinfo/tfug
>


Steve Davis
muaddib@arrakis.franken.de

-- If you don't know what it is, call it a system.