Xref: utzoo comp.unix.admin:971 comp.dcom.modems:8226 comp.misc:11387
Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!wsrcc.com!wolfgang
From: wolfgang@wsrcc.com (Wolfgang S. Rupprecht)
Newsgroups: comp.unix.admin,comp.dcom.modems,comp.misc
Subject: Re: Troubling phone calls
Keywords: uucp, modem, security
Message-ID: <1991Feb8.041641.6483@wsrcc.com>
Date: 8 Feb 91 04:16:41 GMT
References: <1018@eplunix.UUCP> <b0efha.ba2@wang.com>
Organization: Wolfgang S Rupprecht Computer Consulting, Washington DC.
Lines: 13

> Checking our dialup lines for security problems, I've noticed that *someone*
> keeps calling us as uucp, something like 40 times a day.  We haven't been a
> uucp site for 3 years, at least, probably longer, and the old password is
> locked on our machine.

Why not put the uucp's back for a day or two.  Just don't give them
any permission for reading/writing or executing anything.  Then check
the log files and see who it was.

-wolfgang
-- 
Wolfgang Rupprecht    wolfgang@wsrcc.com (or) uunet!wsrcc!wolfgang
Snail Mail Address:   Box 6524, Alexandria, VA 22306-0524