HP3000-L Archives

September 2006, Week 2

HP3000-L@RAVEN.UTC.EDU
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Empireclassic Hacker Getting Smarter?
From:
"Johnson, Tracy" <[log in to unmask]>
Reply To:
Johnson, Tracy
Date:
Mon, 11 Sep 2006 11:00:39 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (62 lines) 
Today we noticed the hp3000.empireclassic.com attacker started using two
part user names.

Sample from Logtool.  Attacker switched back to single part user names
about 50 minutes ago.

========================================================================
=======
MON, SEP 11, 2006   10:04 AM       LOG1879.PUB.SYS                 #J3
(PIN 82)
CONSOLE LOG
(OUTPUT)10:04/#J3/82/FTP INVALID LOGON FOR: "USER.FTPGUEST,PUB"
IP=222.173.2.37
USER:               MANAGER             GROUP:              PUB
ACCOUNT:            SYS                 JSNAME:
========================================================================
=======
MON, SEP 11, 2006   10:04 AM       LOG1879.PUB.SYS                 #J3
(PIN 82)
CONSOLE LOG
(OUTPUT)10:04/#J3/82/FTP INVALID LOGON FOR: "USER.FTPGUEST,PUB"
IP=222.173.2.37
USER:               MANAGER             GROUP:              PUB
ACCOUNT:            SYS                 JSNAME:
========================================================================
=======
MON, SEP 11, 2006   10:04 AM       LOG1879.PUB.SYS                 #J3
(PIN 82)
CONSOLE LOG
(OUTPUT)10:04/#J3/82/FTP INVALID LOGON FOR: "USER.FTPGUEST,PUB"
IP=222.173.2.37
USER:               MANAGER             GROUP:              PUB
ACCOUNT:            SYS                 JSNAME:
========================================================================
=======
MON, SEP 11, 2006   10:04 AM       LOG1879.PUB.SYS                 #J3
(PIN 82)
CONSOLE LOG
(OUTPUT)10:04/#J3/82/FTP INVALID LOGON FOR: "USER.FTPGUEST,PUB"
IP=222.173.2.37
USER:               MANAGER             GROUP:              PUB
ACCOUNT:            SYS                 JSNAME:
========================================================================
=======
 

Tracy Johnson
Measurement Specialties, Inc. 

BT







NNNN

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2