(ASCEND) Login Attacks

To: "ascend-users@bungi.com" <ascend-users@bungi.com>
Subject: (ASCEND) Login Attacks
From: Craig Whitmore <lennon@igrin.co.nz>
Date: Tue, 6 Oct 1998 09:44:31 +1300
Encoding: 26 TEXT
Organization: iGRIN Internet
Sender: owner-ascend-users@max.bungi.com

Over the last few months (6+) we have had attacks of people trying to login.  On the max boxes..

Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [route-max-1/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [ipxroute-max-1/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [pools-max/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [permconn-max-1/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [frdlink-max-1/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [initial-banner-max/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [route-1/ascend] (from nas router)
Thu Jul 23 15:14:48 1998: Auth: Login incorrect: [route-max-1/ascend] (from nasrouter)
Thu Jul 23 15:14:49 1998: Auth: Login incorrect: [ipxroute-1/ascend] (from nas router)
Thu Jul 23 15:14:49 1998: Auth: Login incorrect: [initial-banner/ascend] (from nas router)
Thu Jul 23 15:14:49 1998: Auth: Login incorrect: [route-1/ascend] (from nas router)
 
We get these attacks maybe 1 or 2 times a week  (or variations of this general method)


Unfortunately we can't get CID unless we pay about 0.5c/US per CID (toooo much money)

Just warning people if they have their radius server set up to allow these accounts..

Thanks
Craig Whitmore
IGRIN Internet



++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

Prev by Date: (ASCEND) PPP-noNCPs-open
Next by Date: Re: (ASCEND) Ascend Access Control
Prev by thread: RE: (ASCEND) multilink ppp/windows98/maxtnt
Next by thread: Re: (ASCEND) Login Attacks
Index(es):
- Main
- Thread