[Tfug] Repeated breakin attempts
Scott Fuller
tfug@tfug.org
Sun Dec 22 15:35:01 2002
I've seen these come across in logs every now and the. I just ended up
blocking the whole subnet.
--Scott
erich wrote:
>
> Has anybody seen this party making intrusion attempts into their
> system?
> My gateway is dynamic and temporary everytime I dial up, but their
> script is
> very busy and finds it nonetheless.
>
> Dec 17 09:23:43 cbl proftpd[3494]: cbl.fgi.com
> (pD9520464.dip.t-dialin.net[217.82.4.100]) - USER anonymous
>
> Dec 18 16:17:22 cbl proftpd[4180]: cbl.fgi.com
> (p5088F25B.dip.t-dialin.net[80.136.242.91]) - USER anonymous
>
>
> My system rejects this because there is no anonymous ftp service
> here. I
> look thru my message logs regularly, and have seen numerus attempts in
> the past by this party. I think it originates in the US, but on one
> occasion I have seen a .de intrusion attempt.
>
> Cheers,
> Erich
>
>
>
> _______________________________________________
> tfug mailing list
> tfug@tfug.org
> http://www.tfug.org/mailman/listinfo/tfug