*SHORT* summary of some of the attacks against us for Dec 2004

   Just too many scans and not enough time to keep the list up all the time
    so... some of the more intresting scans/attacks, or 1 day samples are here
 

 year - time EASTERN source_ip[:port] (dns name, if any) attack/scan/notes


2004/12/10-20:17:52 211.57.50.162 (YUKBOOK ELEMENTARY SCHOOL, KR) scan net try to login to root via ssh on multiple machines.
2004/12/11-18:54:52 66.10.227.51 (66-10-227-51.ded.swbell.net.) scan net try to login to root via ssh on multiple machines.
2004/12/16-04:33:31 211.32.117.239 (ACOM Corp,kr) scan net try to login to root via ssh on multiple machines.
2004/12/18-06:28:40 211.91.230.44 (China United Telecommunications Corporation) scan net for ports 111, 23
Host 44.230.91.211.in-addr.arpa not found: 2(SERVFAIL)
2004/12/18-23:17:37 204.2.35.160 (mail1.secureserverinternet.com.) weird ssh attack, trying user root2. on all ip on net