Test Center Threat Watch: 10/17

We are currently migrating our spam filters. Spam Watch will resume next week. Stay tuned.

Attack Watch: 10/11-10/17

Scan bots have been active for the last few days. Relentless TCP scans have been coming from IP addresses that trace to Beijing, China.

Some read and close activity from an IP off of California-based ISP Springacre's network.

There are numerous spamming attempts via SMTP port 25. Some of the offenders include host.cash-blaster.com, www1.pageowners.com and mail2.sfimarkerting.com, so set your spam filters to reject these nuisances.

The trap network has been under an onslaught of SQL hack attempts for the last three days. The attempts were all made using "sa" or "root" as the username, and here are the most common password tries used:

abcdefg 123

The rest are random words, seemingly computer generated, like "megan" "burn" "intrepid" "punkin" and "shemale."

Tweet