Re: Attack

[Tod Fitch]

This is the type of thing that I want a cheap router for: I don't know 
how one can stop it in SIMS. But reasonable firewall software and/or a 
NAT/firewall router ought to do it. Unfortunately, I don't have any 
recommendations for a good product.

So far I have been lucky: My choice of admin account name and password 
have not been hit.

-Tod
On Jul 23, 2004, at 7:24 AM, Leonard Spell wrote:
I have some jerkwad in Asia attacking my sims machine.  I guess they 
are trying to gain access because they are trying a dictionary attack 
to get the password.  What is the best way to stop them?

Here is some of the log:
10:15:48 1 SMTP {administrator} AUTH failed: password(123456) is 
wrong. Connection from [222.183.144.79:1887]
10:15:50 0 SYSTEM Account {administrator} Resources open failed. Error 
Code=-43
10:15:50 1 SMTP {administrator} AUTH failed: password(1234567) is 
wrong. Connection from [222.183.144.79:1887]
10:15:53 0 SYSTEM Account {administrator} Resources open failed. Error 
Code=-43
10:15:53 1 SMTP {administrator} AUTH failed: password(12345678) is 
wrong. Connection from [222.183.144.79:1887]
10:15:55 0 SYSTEM Account {administrator} Resources open failed. Error 
Code=-43
10:15:55 1 SMTP {administrator} AUTH failed: password(654321) is 
wrong. Connection from [222.183.144.79:1887]
10:15:58 0 SYSTEM Account {administrator} Resources open failed. Error 
Code=-

Leonard
#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>