North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: FTP Probes from Taiwan/China

  • From: mike harrison
  • Date: Sun Sep 09 13:04:22 2001 
> > Has anyone seen a dramatic increase in FTP probes/scans/bad stuff from
> > certain IP blocks in Taiwan or China?  Specifically, 211/8, 61/8, and
> > 202/7.  I'm logging over 7500 probes/hr right now.  Is there a new
> > exploit out or something?
> > 
> > Another network just surfaced:  210.82/15

I am getting lots of port 80'ish scans from those IP ranges.
and a few port 139, but I have not seen a port 21 (FTP) scan from anyone
in the last 30 minutes... while monitoring a /19 and a /20 locally.