North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Exodus / Clue problems

  • From: brian moore
  • Date: Mon Nov 16 02:19:52 1998 
On Sun, Nov 15, 1998 at 06:24:13PM -0500, [email protected] wrote:
> 
> Let me guess - the IP is 209.67.50.254, and they're trying to login to
> nameservers as "root", sometimes a dozen times per second?

Not seeing that rate, but yep:
Nov 15 18:10:25 mailhost.cmc.net ipmon[117]: 18:10:24.956040 le0 @35 b
    209.67.50.254,1608 -> mailhost.cmc.net,telnet PR tcp len 20 44 -S

-- 
Brian Moore                       | "The Zen nature of a spammer resembles
      Sysadmin, C/Perl Hacker     |  a cockroach, except that the cockroach
      Usenet Vandal               |  is higher up on the evolutionary chain."
      Netscum, Bane of Elves.                 Peter Olson, Delphi Postmaster