[Tfug] OT:Speaking of Cyber Attacks

Charles R. Kiss charles at kissbrothers.com
Sun Jan 31 18:48:48 MST 2010


On Mon Jan 11 17:48:37 2010 I got about a hundred "attacks" from about 20 ISPs ; beginning with a 192.168.2.4 /port 137 scan (which is my printer's, on CUPS, connection to the router ), ie.:


Found attack from 192.168.2.4 in port 137 => Mon Jan 11 17:48:37 2010

Found  attack from 125.65.112.168 in port 8000 => Mon Jan 11 17:48:37 2010

Found  attack from 125.65.112.168 in port 7212 => Mon Jan 11 17:48:37 2010 .......... etc. +100


I did a whois on certain IP's and got various results, including the usual random Chinese government office.

What kind of attack is this? How often does it happen? and, Did anyone else get a similar spike of attacks on Jan. 11.


Is there a website somewhere where people can upload their security logs, and a bot goes out there and notifies people automatically that their network is infected??

Thanks

Charles.
-- 


This message and any attachments may contain information that is privileged or confidential, and is intended solely for the addressee.  If you received this message in error, please notify the sender by reply e-mail and delete the message and any attachments.  Thank you.




More information about the tfug mailing list