black hat .cn networks

Dan Hollis goemon at
Mon May 7 18:51:22 UTC 2001

On Mon, 7 May 2001, Justin Hinderliter wrote:
> For those looking for evidence of attacks, I personally know of 3 boxes that
> were hit and rooted this morning.  The three attacks happened between 6:20am
> and 7:04am.

The past week i've seen attacks increase 5-fold, mostly 111/udp attacks
mixed with some lpr and ftp on the side. Also lots of http scanning, which
I havent seen in quite a while.


More information about the NANOG mailing list