Security Incidents mailing list archives
SMTP brute force attack?
From: Seth Milder <mrseth () PHYSICS GMU EDU>
Date: Fri, 24 Nov 2000 00:10:42 -0500
I keep getting this in my logs. Is someone trying to find a valid username so they can crack my box? Or maybe this is a spammer trying to find a way to get my machine to relay their crap? Any advice is definitely welcome. Thanks, Seth Nov 23 21:01:09 ns sendmail[21886]: NOQUEUE: Null connection from [x.x.x.x] Nov 23 21:01:18 ns sendmail[21888]: VAA21888: <haha () victimhost com>... User unknown Nov 23 21:17:45 ns sendmail[21912]: VAA21912: <F10981N9776 () victimhost com>... User unknown Nov 23 21:17:46 ns sendmail[21913]: VAA21913: <F10981N9776 () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <robert () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <mark () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <chris () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <greg () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <michael () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <peter () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <joe () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <gary () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <bill () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <frank () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <brian () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <dan () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <steve () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <eric () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <jeff () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <scott () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <david () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <bob () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <rick () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <paul () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <dave () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <mike () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <ken () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <jason () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <kevin () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <john () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <rob () victimhost com>... User unknown Nov 23 21:17:49 ns sendmail[21915]: VAA21915: <tom () victimhost com>... User unknown Nov 23 21:19:13 ns sendmail[21919]: VAA21919: <alt-chinese-text () victimhost com>... User unknown Nov 23 21:24:23 ns sendmail[21935]: VAA21935: <chinese-talk-misc () victimhost com>... User unknown Nov 23 23:31:06 ns sendmail[22186]: NOQUEUE: Null connection from [x.x.x.x] Nov 23 23:31:14 ns sendmail[22188]: XAA22188: <haha () victimhost com>... User unknown
Current thread:
- SMTP brute force attack? Seth Milder (Nov 28)