[Intrusions] Tattle WHOIS protential problem

security.alerts at dynamicnet.net security.alerts at dynamicnet.net
Fri Jun 17 10:16:03 GMT 2005


Greetings CJ:

Jun 14 16:46:36 webnew sshd(pam_unix)[10076]: authentication failure; 
logname= uid=0 euid=0 tty=NODEVssh ruser= 
rhost=211-23-176-222.hinet-ip.hinet.net
Jun 14 16:46:36 webnew sshd(pam_unix)[10103]: authentication failure; 
logname= uid=0 euid=0 tty=NODEVssh ruser= 
rhost=211-23-176-222.hinet-ip.hinet.net

Was found by tattle.pl to email spam at ms1.hinet.net

Yet the APIC WHOIS for 211.23.0.0 - 211.23.255.255 is CHTD, Chunghwa 
Telecom Co.,Ltd. whose abuse email addresses are as follows:

network-adm at hinet.net
fkchung at ms1.hinet.net
hostmaster at twnic.net

See http://www.apnic.net/apnic-bin/whois.pl

Please look at this issue for resolution.

Thank you.





More information about the Intrusions mailing list