MLUG: [MLUG] new series of attacks
[MLUG] new series of attacks
Email address obfuscation in effect -- please click here to turn it off.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
I'm getting tons of this in my iplog all of a sudden (some yesterday, much
more today):

Jun  6 12:41:10 TCP: port 27374 connection attempt from c-66-56-76-79.atl.client2.attbi.com:3066
Jun  6 12:41:10 TCP: port 12345 connection attempt from c-66-56-76-79.atl.client2.attbi.com:3067

Attempts from a site come in pairs like this, usually repeating 3-4 times
in very rapid succession.  I think those ports are for trojans, but I
guess someone has written a very lame script that has to make multiple
attempts.  Or it could be some kind of self-spreading worm thingy.

Tell me if you know.

Regards,

Mike

--
To unsubscribe, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/