[HECnet] Botnet hits on 23/tcp

Fred fcoffey at misernet.net
Tue Oct 25 13:04:12 PDT 2016


On Tue, 25 Oct 2016, Johnny Billquist wrote:

> However, if the intrusion system disables the account, it becomes a rather 
> ugly DOS vector. Not sure how they were thinking there...

I've had that happen.  Couldn't telnet in, even _locally_ to MISER.  Found 
out that intrusion detection was throwing out ALL telnet attempts.  So, I 
used a different VMS host to "set host" instead. :)

20(or some arbitrary number I don't remember) minutes later the intrusion 
record was gone.

Fred




More information about the Hecnet-list mailing list