From owner-freebsd-questions  Sun Dec  9  5:59: 1 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from sage-american.com (sage-american.com [216.122.141.44])
	by hub.freebsd.org (Postfix) with ESMTP id AFFB137B405
	for <freebsd-questions@freebsd.org>; Sun,  9 Dec 2001 05:58:59 -0800 (PST)
Received: from SAGEONE (adsl-64-219-20-12.dsl.crchtx.swbell.net [64.219.20.12])
	by sage-american.com (8.9.3/8.9.3) with SMTP id HAA09910
	for <freebsd-questions@freebsd.org>; Sun, 9 Dec 2001 07:58:52 -0600 (CST)
Message-Id: <3.0.5.32.20011209075850.0101cb38@mail.sage-american.com>
X-Sender: jacks@mail.sage-american.com
X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32)
Date: Sun, 09 Dec 2001 07:58:50 -0600
To: freebsd-questions@freebsd.org
From: jacks@sage-american.com
Subject: Intruder attempts?
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I've noticed this often on the console of the server and appears to be
intruder attempts to login: This is just a snipet:

<snip/>
server1.net kernel log messages:
> Dec  8 03:41:47 sage-one rpc.statd: invalid hostname to sm_stat:
^X\M-w\M^?\M-?^X\M-w\M^?\M-?^Y\M-w\M^?\M-?^Y\M-w\M^?\M-?^Z\M-w\M^?\M-?^Z\M-w
\M^?\M-?^[\M-w\M^?\M-?^[\M-w\M^?\M-?%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%
n%10x%n%192x%nM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^PM-^P
</snip>



Best regards,
Jack L. Stone,
Server Admin

Sage-American
http://www.sage-american.com
jacks@sage-american.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message