It makes one wonder what would have happened if a suitable mailbox was
found. Maybe something new?

And yes, it looks like an "out of the box" security scan. :)

Lucien

On Mon, Oct 27, 2008 at 2:15 PM, <ChadB@xxxxxxxxxxxxxxxxxxxx> wrote:


Looks like the types of log entries you'll get from certain 'security scan'
type software packages or tools. Any possibility your network group was
doing some vulnerability testing? If not, looks like you got scanned by
someone 'outside'!




rob@xxxxxxxxx
Sent by:
security400-bounc To
es@xxxxxxxxxxxx security400@xxxxxxxxxxxx
cc

10/27/2008 09:08 Subject
AM [Security400] Fw: Hack Attack -
Let's guess mail file names (in
Domino).
Please respond to
Security
Administration on
the AS400 /
iSeries
<security400@midr
ange.com>






Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com


----- Forwarded by Rob Berendt/DEKKO on 10/27/2008 09:06 AM -----

rob@xxxxxxxxx
Sent by: domino400-bounces+rob=dekko.com@xxxxxxxxxxxx
10/27/2008 09:03 AM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
domino400@xxxxxxxxxxxx
cc

Subject
Hack Attack - Let's guess mail file names.






I am noticing a lot of these in our Sametime server in the DMZ.
10/27/2008 02:07:33 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/root.nsf]
10/27/2008 02:07:33 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/router.nsf]
10/27/2008 02:07:33 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/rw.nsf]
10/27/2008 02:07:33 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/rz0plm92.nsf]
10/27/2008 02:07:33 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sam.nsf]
10/27/2008 02:07:34 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sa.nsf]
10/27/2008 02:07:34 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sap.nsf]
10/27/2008 02:07:34 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/security.nsf]
10/27/2008 02:07:34 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/service.nsf]
10/27/2008 02:07:34 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/setup.nsf]
10/27/2008 02:07:34 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sgiweb.nsf]
10/27/2008 02:07:35 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/shutdown.nsf]
10/27/2008 02:07:35 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/signa.nsf]
10/27/2008 02:07:35 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/soft.nsf]
10/27/2008 02:07:35 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/software.nsf]
10/27/2008 02:07:35 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sqldba.nsf]
10/27/2008 02:07:36 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sqluser.nsf]
10/27/2008 02:07:36 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/student.nsf]
10/27/2008 02:07:36 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/supervisor.nsf]
10/27/2008 02:07:36 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/support.nsf]
10/27/2008 02:07:39 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sync.nsf]
10/27/2008 02:07:39 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sys.nsf]
10/27/2008 02:07:40 HTTP Web Server: Lotus Notes Exception - File does
not exist [/mail/sysadm.nsf]

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.



_____________________________________________________________________________

Scanned by IBM Email Security Management Services powered by MessageLabs.
For more information please visit http://www.ers.ibm.com

_____________________________________________________________________________


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.




This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2020 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].