<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 10">
<meta name=Originator content="Microsoft Word 10">
<link rel=File-List href="cid:filelist.xml@01C0ECCA.0EA13A10">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="date"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="time"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:Zoom>110</w:Zoom>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Courier New";
mso-fareast-font-family:"Times New Roman";}
span.EmailStyle17
{mso-style-type:personal-compose;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:windowtext;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I got a nifty little email from someone in a Japanese NOC
when I woke up today stating one of my server <span class=SpellE>ip’s</span>
were in their logs.<span style='mso-spacerun:yes'> </span>Let me paste so
I don’t have to quote.<span style='mso-spacerun:yes'>
</span>Paste will be at the bottom of this message.<span
style='mso-spacerun:yes'> </span>Now, I checked my logs (which I don’t
do as often as I should) and I noticed a lot of attempted logins from Japanese <span
class=SpellE>ip’s</span> via anonymous ftp and telnet, all of which were
denied.<span style='mso-spacerun:yes'> </span>I also see those same IP’s
trying to view my <span class=SpellE>webpages</span> which are all password
protected.<span style='mso-spacerun:yes'> </span>I know for a fact it
wasn’t any of my users, so either they are misinterpreting their logs or
someone has gotten access to my machine.<span style='mso-spacerun:yes'>
</span>As far as I can tell no one has gotten in that wasn’t supposed to,
what should I be looking for to make sure?<span style='mso-spacerun:yes'>
</span>I’m also posting some logs from the system.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="12" Minute="36">12:36:10</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[21020]: ANONYMOUS FTP LOGIN FROM 211.208.194.227
[211.208.194.227], <span class=SpellE>dd</span>&@<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="12" Minute="36">12:36:16</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[21020]: FTP session closed<o:p></o:p></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="19" Minute="15">19:15:45</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[29242]: ANONYMOUS FTP LOGIN FROM ns.njg.ac.jp
[211.16.245.66], a@b.com<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="19" Minute="16">19:16:26</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[29242]: FTP session closed<o:p></o:p></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="16" Minute="1">16:01:46</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>rhnsd</span>[838]: Could not create pipe for forking
process; Too many open files<span style='mso-spacerun:yes'> </span><o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="16" Minute="30">16:30:21</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>sshd</span>[22172]: Did not receive <span class=SpellE>ident</span>
string from 210.207.37.244.<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="16" Minute="30">16:30:24</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[22298]: FTP session closed<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="23" Minute="30">23:30:39</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[22682]: ANONYMOUS FTP LOGIN FROM 210.207.37.244
[210.207.37.244], <span class=SpellE>guest@micros</span>$<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="23" Minute="30">23:30:39</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[22682]: FTP session closed<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="16" Minute="30">16:30:43</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>PAM_unix</span>[22771]: check pass; user unknown<o:p></o:p></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="20">17:20:24</st1:time> <span class=SpellE>modemheads</span>
login[23706]: invalid password for `root' on `pts/3' from `211.192.187.226'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="20">17:20:42</st1:time> <span class=SpellE>modemheads</span>
last message repeated 2 times<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="20">17:20:42</st1:time> <span class=SpellE>modemheads</span>
login[23706]: REPEATED login failures on `pts/3' from `211.192.187.226'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="25">17:25:53</st1:time> <span class=SpellE>modemheads</span>
login[30330]: invalid password for `UNKNOWN' on `pts/3' from `211.5.133.88'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="31">17:31:46</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>rhnsd</span>[838]: Could not create pipe for forking
process; Too many open files<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="40">17:40:30</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>sshd</span>[19271]: Did not receive <span class=SpellE>ident</span>
string from 211.133.4.103.<o:p></o:p></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><st1:date Month="6" Day="4" Year="2000"><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt'>Jun<span
style='mso-spacerun:yes'> </span>4</span></font></span> 00</st1:date>:41:59
<span class=SpellE>modemheads</span> <span class=SpellE>ftpd</span>[20899]:
ANONYMOUS FTP LOGIN FROM nttmygi02039.ppp.infoweb.ne.jp [211.133.4.103$<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="42">17:42:44</st1:time> <span class=SpellE>modemheads</span>
login[21835]: invalid password for `UNKNOWN' on `pts/3' from `211.51.32.172' <o:p></o:p></p>
<p class=MsoPlainText><st1:date Month="6" Day="4" Year="2000"><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt'>Jun
<span style='mso-spacerun:yes'> </span>4</span></font></span> 00</st1:date>:42:45
<span class=SpellE>modemheads</span> <span class=SpellE>ftpd</span>[20899]: FTP
session closed<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="42">17:42:48</st1:time> <span class=SpellE>modemheads</span>
login[21835]: invalid password for `UNKNOWN' on `pts/3' from `211.51.32.172'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="42">17:42:52</st1:time> <span class=SpellE>modemheads</span>
login[21835]: invalid password for `UNKNOWN' on `pts/3' from `211.51.32.172'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="42">17:42:52</st1:time> <span class=SpellE>modemheads</span>
login[21835]: REPEATED login failures on `pts/3' from `211.51.32.172'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="43">17:43:16</st1:time> <span class=SpellE>modemheads</span>
login[23127]: invalid password for `UNKNOWN' on `pts/3' from
`nttmygi02039.ppp.info$<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="17" Minute="43">17:43:24</st1:time> <span class=SpellE>modemheads</span>
login[23127]: invalid password for `root' on `pts/3' from
`nttmygi02039.ppp.infowe<o:p></o:p></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="18" Minute="5">18:05:25</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>rshd</span>[22804]: Connection from 211.10.72.240 on illegal
port<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="18" Minute="5">18:05:28</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>rlogind</span>[22805]: Connection from 211.10.72.240 on
illegal port<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="18" Minute="5">18:05:40</st1:time> <span class=SpellE>modemheads</span>
login[22991]: invalid password for `root' on `pts/3' from `gw1.cybercity.ne.jp'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="22" Minute="30">22:30:32</st1:time> <span class=SpellE>modemheads</span>
login[7635]: invalid password for `root' on `pts/1' from `u001707.ueda.ne.jp'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="22" Minute="30">22:30:42</st1:time> <span class=SpellE>modemheads</span>
login[7635]: invalid password for `UNKNOWN' on `pts/1' from
`u001707.ueda.ne.jp'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="22" Minute="30">22:30:47</st1:time> <span class=SpellE>modemheads</span>
login[7635]: invalid password for `root' on `pts/1' from `u001707.ueda.ne.jp'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="22" Minute="30">22:30:47</st1:time> <span class=SpellE>modemheads</span>
login[7635]: REPEATED login failures on `pts/1' from `u001707.ueda.ne.jp'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="22" Minute="31">22:31:47</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>rhnsd</span>[838]: Could not create pipe for forking
process; Too many open files<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span>
<st1:time Hour="22" Minute="35">22:35:25</st1:time> <span class=SpellE>modemheads</span>
login[7637]: invalid password for `UNKNOWN' on `pts/1' from
`s211-49-118-49.thrunet$<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span>
<st1:time Hour="17" Minute="36">05:36:34</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[7638]: ANONYMOUS FTP LOGIN FROM netsv.npn.gr.jp
[210.190.67.82], <span class=SpellE>guest@docomo</span>.$<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span>
<st1:time Hour="17" Minute="36">05:36:49</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[7638]: FTP session closed<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span>
<st1:time Hour="10" Minute="43">10:43:38</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[7765]: ANONYMOUS FTP LOGIN FROM
zaqd37c15da.zaq.ne.jp [211.124.21.218], local@$<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span>
<st1:time Hour="10" Minute="44">10:44:28</st1:time> <span class=SpellE>modemheads</span>
<span class=SpellE>ftpd</span>[7765]: FTP session closed<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span>
<st1:time Hour="16" Minute="0">04:00:14</st1:time> <span class=SpellE>modemheads</span>
login[7773]: invalid password for `UNKNOWN' on `pts/1' from `211.236.65.213'<o:p></o:p></p>
<p class=MsoPlainText><span class=GramE><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span>
<st1:time Hour="16" Minute="0">04:00:27</st1:time> <span class=SpellE>modemheads</span>
login[7773]: invalid password for `UNKNOWN' on `pts/1' from `211.236.65.213'<o:p></o:p></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Hello !</span></font></span><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'> My
name is Naoki <span class=SpellE>Matsutaka</span>.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>I
am working by being a provider.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>When
performing a server's log check this morning,<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>access</span></font></span><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
from modemheads.com was discovered.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>It
was the trace of the attack by TELNET and FTP<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>from</span></font></span><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
modemheads.com.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>It
remained in a server's log as follows.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>--------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Jun<span style='mso-spacerun:yes'> </span>3</span></font></span><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
</span></font><st1:time Hour="17" Minute="12"><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'>17:12:49</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
dev <span class=SpellE>in.telnetd</span>[1965]: refused connect from
modemheads.com Jun<span style='mso-spacerun:yes'> </span>4 </span></font><st1:time
Hour="11" Minute="39"><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New"'>11:39:04</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
dev <span class=SpellE>in.telnetd</span>[2287]: refused connect from
modemheads.com Jun<span style='mso-spacerun:yes'> </span>4 </span></font><st1:time
Hour="14" Minute="31"><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New"'>14:31:09</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
dev <span class=SpellE>in.telnetd</span>[2330]: refused connect from
modemheads.com Jun<span style='mso-spacerun:yes'> </span>4 </span></font><st1:time
Hour="17" Minute="23"><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New"'>17:23:07</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
dev <span class=SpellE>in.telnetd</span>[2371]: refused connect from
modemheads.com<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
</span></font><st1:time Hour="22" Minute="47"><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'>22:47:51</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
dev <span class=SpellE>in.ftpd</span>[2448]: refused connect from
modemheads.com<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>Jun<span
style='mso-spacerun:yes'> </span>4 02:32:00 ns <span class=SpellE>in.telnetd</span>[17808]:
refused connect from modemheads.com Jun<span style='mso-spacerun:yes'>
</span>4 02:32:00 ns <span class=SpellE>in.telnetd</span>[17809]: refused
connect from modemheads.com Jun<span style='mso-spacerun:yes'> </span>4
02:32:01 ns <span class=SpellE>in.telnetd</span>[17810]: refused connect from
modemheads.com Jun<span style='mso-spacerun:yes'> </span>4 05:24:06 ns <span
class=SpellE>in.telnetd</span>[18067]: refused connect from modemheads.com
Jun<span style='mso-spacerun:yes'> </span>4 05:24:06 ns <span
class=SpellE>in.telnetd</span>[18068]: refused connect from modemheads.com
Jun<span style='mso-spacerun:yes'> </span>4 05:24:06 ns <span
class=SpellE>in.telnetd</span>[18069]: refused connect from modemheads.com
Jun<span style='mso-spacerun:yes'> </span>4 08:16:04 ns <span
class=SpellE>in.telnetd</span>[18222]: refused connect from modemheads.com
Jun<span style='mso-spacerun:yes'> </span>4 08:16:04 ns <span
class=SpellE>in.telnetd</span>[18223]: refused connect from modemheads.com
Jun<span style='mso-spacerun:yes'> </span>4 08:16:04 ns <span
class=SpellE>in.telnetd</span>[18224]: refused connect from modemheads.com<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Jun<span style='mso-spacerun:yes'> </span>4</span></font></span><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
</span></font><st1:time Hour="13" Minute="40"><font size=2 face="Courier New"><span
style='font-size:10.0pt;font-family:"Courier New"'>13:40:49</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
ns <span class=SpellE>in.ftpd</span>[19511]: refused connect from
modemheads.com Jun<span style='mso-spacerun:yes'> </span>4 </span></font><st1:time
Hour="13" Minute="40"><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New"'>13:40:49</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
ns <span class=SpellE>in.ftpd</span>[19512]: refused connect from
modemheads.com Jun<span style='mso-spacerun:yes'> </span>4 </span></font><st1:time
Hour="13" Minute="40"><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New"'>13:40:49</span></font></st1:time><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>
ns <span class=SpellE>in.ftpd</span>[19513]: refused connect from
modemheads.com<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>--------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>I
cannot understand why the user of modemhead.com<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>has</span></font></span><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'> to
do TELNET to our host.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>I
want to give what such a lot of refused logs must be outputted to from
modemheads.com why, and satisfactory explanation.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>Since
your mail address had become administrative contact when the name was
investigated in <span class=SpellE>Whois</span> database, mail was transmitted.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>I
want to ask measure of you so that there may be no such thing.<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span
class=GramE><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>bye-</span></font></span><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>Naoki
<span class=SpellE>Matsutaka</span> -- support@yutopia.or.jp<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
</div>
</body>
</html>