*SHORT* summary of some of the attacks against us for Mar 2005

   Just too many scans and not enough time to keep the list up all the time
    so... some of the more intresting scans/attacks, or 1 day samples are here
 

 year - time EASTERN source_ip[:port] (dns name, if any) attack/scan/notes


2005/03/04-15:40:10.677957 217.83.188.128 (pD953BC80.dip.t-dialin.net.) scan net on ports 111, 21
2005/03/04-20:51:47.239504 217.83.188.128 (pD953BC80.dip.t-dialin.net.) connect sendmail, issue VRFY root  command
2005/03/09-15:46:25        200.30.0.65 (brazil) scan dtspc port on 12 machines
2005/03/10-00:42:44        213.240.221.218 (ATV pool for Sofia/Bulgaria) scan small set of machines via ssh, try to
2005/03/10-00:42:44        213.240.221.218 (ATV pool for Sofia/Bulgaria) login using 234 users, total 1448 times.
2005/03/10-10:45:08        200.255.67.39(brazil-again) scan same 12 machines on dtspc port as yesterday.