[94] in bugtraq
Re: Another request for passwords
daemon@ATHENA.MIT.EDU (christopher williams)
Mon Oct 24 05:15:24 1994
From: cgw@io.com (christopher williams)
To: chowes@helix.net (Charles Howes)
Date: Mon, 24 Oct 1994 02:24:30 -0500 (CDT)
Cc: bugtraq@crimelab.com
In-Reply-To: <Pine.SUN.3.90.941023195018.5984P-100000@trance.helix.net> from "Charles Howes" at Oct 23, 94 07:55:57 pm
Reply-To: cgw@io.com
Charles Howes wrote:
>Event one: A user at umn.edu forges mail (supposedly from helix.net).
>Event two: A user at helix.net forges mail (supposedly from sfu.ca).
have any of the sites that received the request for /etc/passwd mail
from helix.net noticed any finger connects from usis.com? today, i've
noticed an inordinate amount of fingerd connects from usis.com -- more
than 2700 in the last 24 hours, but strangely enough, scant few in the
days before the past 24-hour period (4-7 a day before today).
i've notified usis.com, but haven't heard from them yet.
just another (hopefully benign) datapoint,
-cgw-
--
christopher williams +1 512 447 7866 unice homo factus
cgw@io.com fnord punctorum linearumque
