Xref: utzoo can.uucp:57 news.admin:5822
Path: utzoo!attcan!utgpu!watmath!rjwhite
From: rjwhite@watmath.waterloo.edu (RJ White)
Newsgroups: can.uucp,news.admin
Subject: attempted system breakin ?
Message-ID: <26626@watmath.waterloo.edu>
Date: 29 May 89 23:09:52 GMT
Distribution: can
Organization: University of Waterloo [MFCF]
Lines: 15

On Sun may 28 near midnight, system 'looking' attempted to do a
	(uusend /etc/passwd /usr/spool/uucppublic/gu)
and
	(uusend /etc/passwd guj)

and system 'iros1' after trying various experiments in sending and
receiving files, tried to get the passwd file from the above uusend's.
Both of these attempts failed since we have disabled uusend for precisely
the reason that we don't like people grabbing our passwd file for using
passwd breaking programs on it.  I suggest others do likewise.

I assume that the system names 'looking' and 'iros1' were both forged.
I know the people at looking, here in Waterloo.  I think iros1 is in
Ottawa or Montreal.
	-rj