"wiz"
"WIZ"
"debug"
"DEBUG"
ATTACK
nested
VRFY bbs
VRFY decode
VRFY uudecode
VRFY lp
VRFY demo
VRFY guest
VRFY root
VRFY uucp
VRFY oracle
VRFY sybase
VRFY games
vrfy bbs
vrfy decode
vrfy uudecode
vrfy lp
vrfy demo
vrfy guest
vrfy root
vrfy uucp
vrfy oracle
vrfy sybase
vrfy games
expn decode
expn uudecode
expn wheel
expn root
EXPN decode
EXPN uudecode
EXPN wheel
EXPN root
rlogind\[[0-9]+\]: Connection from [.0-9]+ on illegal port
rshd\[[0-9]+\]: Connection from [.0-9]+ on illegal port
uucico\[[0-9]+\]: refused connect from
tftpd\[[0-9]+\]: refused connect from
kernel: Oversized packet received from
attackalert
attack