On Fri, 12 Jul 1996, Rob Sansom wrote:
> I occasionally get a burst of TCP packets to port 110 on our web server,
> which does not run a pop 3 server or any such thing. Here's a good
> example:
> I know it's not an employee trying to collect their mail, since all of
> these connection attempts have come from places like Malaysia, Washington
Hmm Malaysia? any gov.my? or any other .my? I know that there are alot of
machines hacked in .my and I know one such person who has attempted with
failure over and over and over again to attack my popper port which is
wrapped and i cant figure out what the hell he's doing after 20 attempts
of geting refused that comes from many malaysia sites. I'm gonna say that
most of the conencts I get from .my are hack attempts.
Just thought I'd pass that on.
--
===================================| Webspan Inc., ISP Division.
FreeBSD 2.1.0 is available now! | Phone: 908-367-8030 ext. 126
-----------------------------------| 500 West Kennedy Blvd., Lakewood, NJ-08701
Turning PCs into Workstations | E-Mail: scanner @
webspan .
net
http://www.freebsd.org | SysAdmin / Network Engineer / Security
===================================| Member BSDNET team! http://www.bsdnet.org
References:
|
|
