logcheck.hacking
"wiz" "WIZ" "debug" "DEBUG" ATTACK nested VRFY bbs VRFY decode VRFY uudecode VRFY lp VRFY demo VRFY guest VRFY root VRFY uucp VRFY oracle VRFY sybase VRFY games vrfy bbs vrfy decode vrfy uudecode vrfy lp vrfy demo vrfy guest vrfy root vrfy uucp vrfy oracle vrfy sybase vrfy games expn decode expn uudecode expn wheel expn root EXPN decode EXPN uudecode EXPN wheel EXPN root LOGIN root REFUSED rlogind.*: Connection from .* on illegal port rshd.*: Connection from .* on illegal port sendmail.*: user .* attempted to run daemon uucico.*: refused connect from .* tftpd.*: refused connect from .* login.*: .*LOGIN FAILURE.* FROM .*root login.*: .*LOGIN FAILURE.* FROM .*guest login.*: .*LOGIN FAILURE.* FROM .*bin login.*: .*LOGIN FAILURE.* FROM .*uucp login.*: .*LOGIN FAILURE.* FROM .*adm login.*: .*LOGIN FAILURE.* FROM .*bbs login.*: .*LOGIN FAILURE.* FROM .*games login.*: .*LOGIN FAILURE.* FROM .*sync login.*: .*LOGIN FAILURE.* FROM .*oracle login.*: .*LOGIN FAILURE.* FROM .*sybase kernel: Oversized packet received from attackalert