Re: POP3 logon attempts

From: Bojan Zdrnja (Bojan.Zdrnjaat_private)
Date: Mon Mar 31 2003 - 16:14:13 PST

  • Next message: Torsten Mueller: "Re: POP3 logon attempts"

    > Original message:
    
    > From:    Tom Fischer <Tom.Fischerat_private-stuttgart.de>
    > To:      incidentsat_private <incidentsat_private>
    > Date:    Tuesday, April 1, 2003, 12:11:27 AM
    > Subject: POP3 logon attempts
    
    > Hi,
    > some of our POP3 servers got DoSed cause of massive password probes 
    > against following accounts:
    
    > Does someone know a tool which will brute force these accounts?
    
    It seems like someone just tried brute force cracking on your server.
    There are many remote brute force POP-3 cracking programs, of which I believe
    Brutus is the most popular.
    
    You can find more information about Brutus at:
    
    http://www.hoobie.net/brutus
    
    Brutus comes with few pre-defined accounts to crack, but your list seems a bit
    larger - in any case it's very simple for malicious user to add new usernames.
    It also has words.txt included, with much larger list of commond words.
    
    You might also check Entry at:
    
    http://www.sparkleware.com/index.html
    
    Best regards,
    
    Bojan Zdrnja
    
    
    ----------------------------------------------------------------------------
    Powerful Anti-Spam Management and More...
    SurfControl E-mail Filter puts the brakes on spam,
    viruses and malicious code. Safeguard your business
    critical communications. Download a free 30-day trial:
    http://www.securityfocus.com/SurfControl-incidents
    



    This archive was generated by hypermail 2b30 : Mon Mar 31 2003 - 16:40:16 PST