On Fri, 20 Jul 2001, Dylan Reeve wrote:
So that's 48 attacks on 2 IP addresses in less than 9 hours. A lot seem to be from domestic connections - s216-232-94-216.bc.hsia.telus.net for example. A few from iprimus.net.au customer addresses...
Interestingly, the QSI web servers have so far received 0 hits... (not that we have any MS servers anyway) My personal webserver (hosted elsewhere) has received attacks from 24 unique hosts since about 5am this morning, from the list below: Whats even more interesting is that looking at cache logs for the QSI auckland dialups, There are 0 (in the last hour anyway) attempts coming FROM qsi dialups. However, i put the cacheflow into reverse mode too (proxying traffic from the net destined for port 80 on the QSI dialup pools), and it averages 27 hits per minute, from a huge variety of sources... the majority of which have unresolveable IP's) ------- List of hosts attacking tombstone.b.org.nz -------- 193.114.91.162 194.42.247.8 203.41.148.120 205.142.207.10 210.189.254.11 210.64.2.33 211.20.30.3 211.206.127.64 212.35.226.152 216.126.231.151 217.57.167.106 62.172.142.55 62.243.4.148 62.81.224.27 63.142.84.37 63.220.121.10 64.148.84.66 adsl-64-169-186-250.dsl.snfc21.pacbell.net cpe-24-221-197-146.co.sprintbbd.net dsl-216.222.104-114.boi.rmci.net h24-78-84-224.vc.shawcable.net ip-216-221-140-34.cust-ip.discovernet.net ip108.usw10.rb1.bel.nwlink.com w019.z065104053.lax-ca.dsl.cnc.net --- Matt Camp --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog