Hmm...I didn't see your post about IP's. And, I'm not seeing IP's. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fitscape.com Internet Relations Sent: Friday, June 13, 2003 6:06 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd
Forget the machine names - they can be bogus and/or changed. What u need to do is look @ the IP's like I said in my previous post. Bryan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Katie La Salle-Lowery Sent: Friday, June 13, 2003 4:53 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Looks like. It's got the right uid's but wrong passwords. After five failed attempts, the account is locked out. One of the machine names was familiar to us--a commercial customer on our wireless network. We asked them to check that machine. I suspected it was infected with a trojan. They just called back. That looks like a good possibility for that machine. However, there have been 3 different machine names we've found--on different networks. ~Katie -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 13, 2003 5:50 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Password cracking program running? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > [EMAIL PROTECTED] On Behalf Of Katie La Salle-Lowery > Sent: Friday, June 13, 2003 4:33 PM > To: [EMAIL PROTECTED] > Subject: [IMail Forum] OT; user accounts getting locked out en masse; process is > ksecdd > > Hi All, > > Just cuz you're such an broadly experienced group I'm going to pose my > problem of the day: > > My User Accounts (Windows network) are getting locked out en masse. > Event viewer shows failed login attempts using process ksecdd. > > I'm Googling my little heart out but if anyone in this knowledgable > group has any insight, I'd be in their debt. > > Thanks, > Katie > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
