{"id":1398,"date":"2004-11-29T19:55:01","date_gmt":"2004-11-29T23:55:01","guid":{"rendered":"http:\/\/www.thewormbook.com\/hlog\/?p=1398"},"modified":"2004-11-29T19:55:01","modified_gmt":"2004-11-29T23:55:01","slug":"strange-hacker-logins","status":"publish","type":"post","link":"http:\/\/www.thewormbook.com\/hlog\/?p=1398","title":{"rendered":"strange hacker logins"},"content":{"rendered":"<p>Looking through the firewall logs on my backup machine, I discover that someone from a computer in the State administration of Utah (168.178.120.104) has been trying to break in here. That makes a change from the usual Bulgarians  and untraceable Far Eastern suspects. But what was really unusual were the logons they tried: after the usual <span class=\"loony\">&#8220;test, guest, admin&#8221;<\/span> and <span class=\"loony\">user<\/span> came the following sequence: <span class=\"loony\">&#8220;umbro nike canon brother&#8221;<\/span><\/p>\n\n<p>Canon and Brother I can sort of understand: they are printers, which have a natural connection to a computer. But Nike? Do people log their shoes in? And I don&#8217;t even know what Umbro makes. Can any smarter readers help?<\/p>\n\n<p>Update: I complained to the tech contact at the State of Utah and got a reply back within two hours: <span class=\"sane\">Yes it looks as though this host is contaminated.. Behind our backs andon the week end  this host was taken over by an outside host&#8230;We will lock it out of the net and clean it before we let it back so it should not be doing any more harm&#8230;<\/span> So, sometimes, things work as they should.<\/p>","protected":false},"excerpt":{"rendered":"<p>Looking through the firewall logs on my backup machine, I discover that someone from a computer in the State administration of Utah (168.178.120.104) has been trying to break in here. That makes a change from the usual Bulgarians and untraceable &hellip; <a href=\"http:\/\/www.thewormbook.com\/hlog\/?p=1398\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a> <a href=\"http:\/\/www.thewormbook.com\/hlog\/?p=1398\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"_links":{"self":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/posts\/1398"}],"collection":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1398"}],"version-history":[{"count":0,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/posts\/1398\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1398"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1398"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1398"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}