Mailing List SIMS@mail.stalker.com Message #14655
From: Mike Hebel <nimitz@nimitzbrood.com>
Subject: Re: Attack
Date: Fri, 23 Jul 2004 09:31:05 -0500 (CDT)
To: <SIMS@mail.stalker.com>
X-Mailer: SquirrelMail (version 1.2.6)
The way I handled them was to change the Postmaster account password to
something extremely hard then started blocking their IPs in the blacklist.
They eventually stopped.

Mike Hebel


> I have some jerkwad in Asia attacking my sims machine.  I guess they
> are trying to gain access because they are trying a dictionary attack
> to get the password.  What is the best way to stop them?
>
> Here is some of the log:
>
> 10:15:48 1 SMTP {administrator} AUTH failed: password(123456) is wrong.
>  Connection from [222.183.144.79:1887]
> 10:15:50 0 SYSTEM Account {administrator} Resources open failed. Error
> Code=-43
> 10:15:50 1 SMTP {administrator} AUTH failed: password(1234567) is
> wrong. Connection from [222.183.144.79:1887]
> 10:15:53 0 SYSTEM Account {administrator} Resources open failed. Error
> Code=-43
> 10:15:53 1 SMTP {administrator} AUTH failed: password(12345678) is
> wrong. Connection from [222.183.144.79:1887]
> 10:15:55 0 SYSTEM Account {administrator} Resources open failed. Error
> Code=-43
> 10:15:55 1 SMTP {administrator} AUTH failed: password(654321) is wrong.
>  Connection from [222.183.144.79:1887]
> 10:15:58 0 SYSTEM Account {administrator} Resources open failed. Error
> Code=-
>
> Leonard
>
>
> #############################################################
> This message is sent to you because you are subscribed to
>  the mailing list <SIMS@mail.stalker.com>.
> To unsubscribe, E-mail to: <SIMS-off@mail.stalker.com>
> To switch to the DIGEST mode, E-mail to <SIMS-digest@mail.stalker.com>
> To switch to the INDEX mode, E-mail to <SIMS-index@mail.stalker.com>
> Send administrative queries to  <SIMS-request@mail.stalker.com>


----
"I think we used too much!" - Chris Knight


Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster