Security Incidents: Re: big increase in ftp scanning

[Keith Owens <kaos () OCS COM AU>]

On Tue, 7 Nov 2000 16:53:34 -0500,
Tuc <ttsg () TTSG COM> wrote:
> > On Tue, Oct 31, 2000 at 11:29:26PM -0500, Mike A. Harris wrote:
> > > I had a machine compromised from a t-dialin machine in germany
> > > about a vmonth ago.  I got zero response from them.
>       I've sent about 5 different machines we've gotten probed by
> in their space in the last 6 months all with no replies.
>
>       We actually considered just NULL0ing the entire space they own.
<aol>Me too</aol>.  I have seen repeated DNS over TCP, ftp and other
scans from dip.t-dialin.net addresses.  Complaints to abuse () t-ipnet de
get zero response.  In the end I just blocked 212.185.223.0/24.