From owner-freebsd-security  Tue Jun 24 04:28:36 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id EAA09279
          for security-outgoing; Tue, 24 Jun 1997 04:28:36 -0700 (PDT)
Received: from shadows.aeon.net (bsdsec@shadows.aeon.net [194.100.41.1])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id EAA09274
          for <freebsd-security@FreeBSD.ORG>; Tue, 24 Jun 1997 04:28:31 -0700 (PDT)
Received: (from bsdsec@localhost)
          by shadows.aeon.net (8.8.5/8.8.3) id OAA04572;
          Tue, 24 Jun 1997 14:26:21 +0300 (EET DST)
From: mika ruohotie <bsdsec@shadows.aeon.net>
Message-Id: <199706241126.OAA04572@shadows.aeon.net>
Subject: Re: Attempt to compromise root
In-Reply-To: <25515.866830848@time.cdrom.com> from "Jordan K. Hubbard" at "Jun 20, 97 11:20:48 am"
To: jkh@time.cdrom.com (Jordan K. Hubbard)
Date: Tue, 24 Jun 1997 14:26:20 +0300 (EET DST)
Cc: kelly@fsl.noaa.gov, freebsd-security@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL31 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > "sekurity.org" and what their purpose is?  Is there someone there to
> There are dozens of such sites around - I doubt you'd get much more than
> laughed at if you tried to make an issue of it.

just wondering. since they probed my talk port at jun 9th, i get
slightly paranoid, and wonder if they have probed more of "us" on
some freebsd mailing list...

anyone else seeing that site in their logs?

i dedicated them one 'ipfw add ?? reject log all' just coz of the sitename.


mickey