On Thu, 13 Dec 2001, Kirk Marat wrote:
> Has anyone else out there been seeing repeated scans of their machines by
> multiple hosts on the wanadoo.fr network? (Typical ip addresses starting
> with 193.252, 193.253, 217.128 and others). Typical log entries look like:
> Dec 12 17:24:01 4C:avance300 ftpd[124923]: refused connect from 193.253.62.11
We have, both in our internet server and our nmr:
Nov 5 16:42:55 calzada ftpd[11497]: ANONYMOUS FTP LOGIN FROM
AMarseille-201-1-2-242.abo.wanadoo.fr [193.253.217.242], guest_at_here.com
syslog.4:Nov 5 06:09:20 uermn in.ftpd[2315]: refused connect from
AMarseille-201-1-2-242.abo.wanadoo.fr
--
---------------------------------------------------------------------
Eugenio Alvarado Tel: 207-4106
Escuela de Quimica
Universidad de Costa Rica
---------------------------------------------------------------------
Received on Fri Dec 14 2001 - 10:51:41 MST