I'm still enjoying the fact that HP3K log ins are still in two parts,
user AND account.
But for me INETDSEC sits in NET.SYS. DATABASE.SWIMS is an HP group and
account I've never heard of.
Tracy Johnson
Measurement Specialties, Inc.
BT
NNNN
> -----Original Message-----
> From: HP-3000 Systems Discussion
> [mailto:[log in to unmask]] On Behalf Of Tony Summers
> Sent: Thursday, May 11, 2006 10:13 AM
> To: [log in to unmask]
> Subject: Re: [HP3000-L] Incoming Hacker on the Empireclassic Machine
>
>
> Spoil his fun - add a deny statement to INETDSEC.DATABASE.SWIMS that
> blocks his IP address and see how long it takes for him to realise.
>
> ######################################################################
> #
> ftp allow/deny 123.123.126.123
> #
> %
> %
>
> -----Original Message-----
> From: HP-3000 Systems Discussion
> [mailto:[log in to unmask]] On Behalf Of Johnson, Tracy
> Sent: 11 May 2006 14:03
> To: [log in to unmask]
> Subject: [HP3000-L] Incoming Hacker on the Empireclassic Machine
>
> I've got an incoming hacker attempting to FTP into our HP3000
> "Empireclassic" machine. Console display below:
>
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
> 8:55/#J3/79/FTP INVALID LOGON FOR: "PAUL" IP=61.232.2.46
>
> Our net admin is guessing "Paul" is running a simple script
> going through an alphabet of passwords. Every so often there
> is a pause. He laughed and said, "Well he just switch from
> the "A's" to the "B's".
>
> Since Empireclassic just runs old text games, I just stand
> there looking at the console saying to myself,
>
> "C'mon Paul! You can DO it!"
>
>
> Tracy Johnson
> Measurement Specialties, Inc.
>
> BT
>
>
>
>
>
>
>
> NNNN
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security
> System. For more information please visit
> http://www.messagelabs.com/email
> ______________________________________________________________________
>
> The contents of this email are confidential to the intended
> recipient and may not be disclosed. Although it is believed
> that this email and any attachments are virus free, it is the
> responsibility of the recipient to confirm this.
>
> Smith & Williamson Corporate Finance Limited - A member of
> the London Stock Exchange.
> A member of M&A International Inc. http://www.mergers.net
> Registered in England No. 4533970. Authorised and regulated
> by the Financial Services Authority
> Smith & Williamson Investment Management Limited, Registered
> No. 976145. Authorised and regulated by the Financial
> Services Authority. Smith & Williamson Pension Consultancy
> Limited - Independent Intermediary. Registered No. 3133226.
> Authorised and regulated by the Financial Services Authority.
> Smith & Williamson Fund Administration Limited, Registered
> No. 1934644. Authorised and regulated by the Financial
> Services Authority. Smith & Williamson Limited - A member of
> Nexia International. Registered in England No. 4534022.
> Regulated by the Institute of Chartered Accountants in
> England & Wales for a range of investment business
> activities. NCL Investments Limited, Registered No. 1913794.
> Member of the London Stock Exchange authorised and regulated
> by the Financial Services Authority.
>
> Registered Office: 25 Moorgate, London EC2R 6AY
> Telephone: 020 7131 4000 http://www.smith.williamson.co.uk
>
> Nexia Smith & Williamson Audit Limited - A member of Nexia
> International. Registered in England No. 4469576. Nexia Smith
> & Williamson Audit Limited is a company registered to carry
> out audit work and is regulated for a range of investment
> activities by the Institute of Chartered Accountants in
> England and Wales. Smith & Williamson Limited is a separate
> company that provides professional resources and certain
> services to Nexia Smith & Williamson Audit Limited under the
> terms of a formal agreement on an arm's length basis.
>
> Registered Office: 25 Moorgate, London EC2R 6AY
> Telephone: 020 7131 4000 http://www.nexiasmith.williamson.co.uk
>
> All telephone calls are recorded for business purposes.
>
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security
> System. For more information please visit
> http://www.messagelabs.com/email
> ______________________________________________________________________
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
>
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|
