[Info-vax] Anybody know who this is?

[VAXman- at SendSpamHere.ORG]

In article <nk7ja9$8a0$1 at dont-email.me>, "John E. Malmberg" <wb8tyw at qsl.net_work> writes:
>On 6/19/2016 8:31 PM, VAXman- at SendSpamHere.ORG wrote:
>
>> Yeah, that's so helpful.  Now, all I need to do is get my question answered.
>
>Your question corresponded with an announcement posted on 
>openvmshobbyist.com of a new HECnet node 1.550 by someone going by 
>tuklu_san.
>
>I posted the link to it earlier, but did not check what the DNS name 
>resolved to.
>
>$ nslookup sanyal.duckdns.org
>Server:  google-public-dns-a.google.com
>Address:  8.8.8.8
>
>Non-authoritative answer:
>Name:    SANYAL.DUCKDNS.ORG
>Address:  108.31.82.9
>
>Regards,
>-John
>wb8tyw at qsl.net_work

I'd like to know who to actually contact about the system.  It's W-I-D-E open
-- even guest account access described in SYS$ANNOUNCE -- and I've been seeing
my systems getting probed from that IP address.  It's gotten so bad that I had 
to disable the FTP server on one system.  There's no way in, because it's only
an anonymous FTP, but the volume of logged attemps is VERY annoying.

support
1234
12345
1111
cisco
vizxv
admin
admin
guest
123
123456
cisco
root
admin
support
vizxv
123456
dreambox
7ujMko0admin
smcadmin
supervisor
12345
cisco
admin
guest
vizxv
1234
123456
pass
vizxv
7ujMko0admin
admin
service
xc3511

... and the list goes on and on and on and on and on and on and on...

-- 
VAXman- A Bored Certified VMS Kernel Mode Hacker    VAXman(at)TMESIS(dot)ORG

I speak to machines with the voice of humanity.