HP3000-L Archives

December 2010, Week 5

HP3000-L@RAVEN.UTC.EDU
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Attempted Hacks on INVENT3K2 in Last 90 Days
From:
"Johnson, Tracy" <[log in to unmask]>
Reply To:
Johnson, Tracy
Date:
Wed, 29 Dec 2010 10:27:08 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (49 lines) 
Submitted for entertainment purposes only.

We've only had a few attempted hacks on the INVENT3K2 machine in the
past 90 days.

Upon discovery the first 3 Octets and the 4th gets wildcarded and added
into our INETDSEC deny file.  Then JINETD gets restarted.  (I presume
those ISPs can't govern their users.) 

The list below is much shortened, there were about 8000 lines of this
stuff in the log file.

10/10/11  4:13p #J23     FTP INVALID LOGON FOR: "USER.FTPGUEST,PUB"
IP=216.102.150.8
10/10/16  4:19a #J23     FTP INVALID LOGON FOR: "BESADMIN"
IP=201.23.190.65
10/10/16  4:20a #J23     FTP INVALID LOGON FOR: "BACKUP"
IP=201.23.190.65
10/10/16  4:21a #J23     FTP INVALID LOGON FOR: "INFO" IP=201.23.190.65
10/10/16  4:21a #J23     FTP INVALID LOGON FOR: "TEST" IP=201.23.190.65
10/10/16  4:22a #J23     FTP INVALID LOGON FOR: "REMOTE"
IP=201.23.190.65
10/10/16  4:23a #J23     FTP INVALID LOGON FOR: "ADMIN" IP=201.23.190.65
10/10/18  8:33a #J30     FTP INVALID LOGON FOR: "BESADMIN"
IP=112.165.209.225
10/10/18  8:34a #J30     FTP INVALID LOGON FOR: "TEST"
IP=112.165.209.225
10/10/18  8:35a #J30     FTP INVALID LOGON FOR: "BACKUP"
IP=112.165.209.225
10/10/23  8:08p #J34     FTP INVALID LOGON FOR: "many varying names"
IP=12.177.5.11
10/11/08  5:16p #J34     FTP INVALID LOGON FOR: "ADMIN" IP=38.99.91.58
10/12/16  7:26a #J69     FTP INVALID LOGON FOR: "USER.FTPGUEST,PUB"
IP=62.77.56.21
10/12/28  4:18p #J69     FTP INVALID LOGON FOR: "BACKUP"
IP=218.232.110.179
10/12/28  4:17p #J69     FTP INVALID LOGON FOR: "TEST"
IP=218.232.110.179
10/12/28  4:17p #J69     FTP INVALID LOGON FOR: "BESADMIN"
IP=218.232.110.179


Tracy Johnson
Office 1-757-766-4318
[log in to unmask]

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2