Return-Path: XXX@XXX.Navy.MIL Received: from XXX (XXX.XXX.navy.mil [204.161.XX.XX]) by ash.or.jp (8.8.8/3.4W3) with SMTP id CAA01696 for ; Wed, 25 Mar 1998 02:59:17 +0900 Received: from XXX.navy.mil (a01000.XXX.navy.mil) by XXX (5.0/SMI-SVR4) id AA15736; Tue, 24 Mar 1998 09:55:51 -0800 Message-Id: <3517F3FB.6405552D@XXX.navy.mil> Date: Tue, 24 Mar 1998 09:57:15 -0800 From: Xxxx X-Mailer: Mozilla 4.04 [en] (WinNT; I) Mime-Version: 1.0 To: root@ash.or.jp, postmaster@APNIC.NET Cc: XXX@XXX.Navy.MIL Subject: Network Intrusion Attempts Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Greetings, Several attempts to gain unauthorized access to hosts on our network were recorded over the weekend from the host SRV01.ASH.OR.JP. Please review the following log files and acknowledge receipt of this message. Thank you. -- Xxxx Xxxxxx XXX@XXX.navy.mil Mar 22 03:59:22 gw in.telnetd[861]: connect from srv01.ash.or.jp Mar 22 03:59:25 gw in.telnetd[864]: connect from srv01.ash.or.jp Mar 22 04:00:54 gw in.telnetd[867]: connect from srv01.ash.or.jp Mar 22 04:30:16 gw in.telnetd[875]: connect from srv01.ash.or.jp Mar 22 04:51:55 gw in.telnetd[878]: connect from srv01.ash.or.jp Sat Mar 21 06:49:30 PST 1998 SERVER_NAME= www.XXX.navy.mil SCRIPT_NAME= /cgi-bin/phf QUERY_STRING= QAlias=x%0a/bin/uname%20%2da REQUEST_METHOD= GET REMOTE_ADDR= 210.154.87.18 REMOTE_HOST= srv01.ash.or.jp Tracing Route to srv01.ash.or.jp 1 router.XXX.navy.mil (204.161.XX.XX) 7.318 ms 198.009 ms 19.507 ms 2 XXX.XXX.net (4.0.XX.XX) 38.219 ms 24.587 ms 24.309 ms 3 XXX.XXX.net (4.0.XX.XX) 24.746 ms 24.600 ms 24.514 ms 4 XXX.XXX.net (4.0.XX.XX) 26.117 ms 26.915 ms 26.360 ms 5 4.0.XX.XX (4.0.XX.XX) 27.849 ms 27.919 ms 27.476 ms 6 XXX.XXX.net (144.232.XX.XX) 27.855 ms 27.795 ms 27.205 ms 7 XXX.XXX.net (144.232.XX.XX) 29.860 ms 35.746 ms 29.552 ms 8 XXX.XXXnet (144.232.XX.XX) 29.860 ms 29.711 ms 30.403 ms 9 XXX.XXX.net (204.59.XX.XX) 53.822 ms 45.940 ms 40.899 ms 10 XXX.XXX.net (204.59.XX.XX) 45.594 ms 45.706 ms 45.198 ms 11 XXX.XXX.net (204.59.XX.XX) 208.897 ms 205.420 ms 194.568 ms 12 204.59.XX.XX (204.59.XX.XX) 206.530 ms 204.799 ms 196.695 ms 13 203.139.XX.XX (203.139.XX.XX) 193.223 ms 195.184 ms 198.786 ms 14 203.139.XX.XX (203.139.XX.XX) 207.702 ms 203.036 ms 214.839 ms 15 203.139.XX.XX (203.139.XX.XX) 206.174 ms 292.138 ms 227.754 ms 16 203.139.XX.XX (203.139.XX.XX) 252.688 ms 241.780 ms 240.182 ms 17 203.139.XX.XX (203.139.XX.XX) 249.103 ms 258.095 ms 256.778 ms 18 mn128.ash.or.jp (210.154.87.17) 269.039 ms 255.362 ms 262.162 ms 19 srv01.ash.or.jp (210.154.87.18) 261.784 ms 261.546 ms 276.764 ms