[HECnet] Botnet hits on 23/tcp
Fred
fcoffey at misernet.net
Tue Oct 25 13:04:12 PDT 2016
On Tue, 25 Oct 2016, Johnny Billquist wrote:
> However, if the intrusion system disables the account, it becomes a rather
> ugly DOS vector. Not sure how they were thinking there...
I've had that happen. Couldn't telnet in, even _locally_ to MISER. Found
out that intrusion detection was throwing out ALL telnet attempts. So, I
used a different VMS host to "set host" instead. :)
20(or some arbitrary number I don't remember) minutes later the intrusion
record was gone.
Fred
More information about the Hecnet-list
mailing list