SCOUG-HELP Mailing List Archives

<< Previous Message <<

Date:	Fri, 2 Feb 2007 22:46:17 -0800
From:	Gary Wong <gary.wong@sbcglobal.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: IP lookup of FTP hacker ?

Content Type: text/plain

Peter Skye wrote:
> I'm getting a lot more FTP infiltration attempts on my server here.
> My FTPD syslog.msg shows:
>
> 2007/02/01 13.19: FTPD:1673: connection from 61.136.60.164
> 2007/02/01 13.19: FTPD:1673: 61.136.60.164 attempting to login with wrong information
> 2007/02/01 13.19: FTPD:1673: max login failures from 61.136.60.164 reached
> 2007/02/01 13.19: FTPD:1686: connection from 61.136.60.164
> ...
> 2007/02/02 01.06: FTPD:259: 61.136.60.164 attempting to login with wrong information
> 2007/02/02 01.06: FTPD:259: max login failures from 61.136.60.164 reached
> 2007/02/02 01.06: FTPD:213: connection from 61.136.60.164
> 2007/02/02 01.06: FTPD:213: 61.136.60.164 attempting to login with wrong information
> 2007/02/02 01.06: FTPD:213: FTP LOGOFF from 61.136.60.164
>
> This guy tried for 12 hours with an automated script.
>
> How do I reverse lookup the above IP? NSLOOKUP doesn't find it:
>
> [G:\]nslookup 61.136.60.164
> Server: vnsc-pri.sys.gtei.net
> Address: 4.2.2.1
> *** vnsc-pri.sys.gtei.net can't find 61.136.60.164: Non-existent domain
>
> A Google search on the IP shows I'm not the only one this guy has tried to hack. I'd just like to know what country he's in.
>
> - Peter
>
>
I use www.arin.net/whois/.

It is somewhere overseas.

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"postmaster@scoug.com".

=====================================================

Return to [ 02 | February | 2007 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.