[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: red worm amusement



I got such attempts from 21 distinct addresses against my server in Russia
since
July 19 through July 20. I was able to resolve some of the addresses into
hostnames.

It is forged addresses, isn't it, and we cannot blame this hosts for the
attacks?

Mikhail.

----- Original Message -----
From: Yotam Rubin <yotam@makif.omer.k12.il>
To: <debian-security@lists.debian.org>
Sent: Saturday, July 21, 2001 7:06 AM
Subject: Re: red worm amusement


> On Sat, Jul 21, 2001 at 02:10:42AM +0200, Wichert Akkerman wrote:
> >
> > For amusement I checked the web logs for a few debian machines to see
> > if they had some red worm attempts. Seems we've been probed a fair
> > bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18
> > on www.debian.org. Almost all attempts were made on July 19. Aren't
> > we glad we all run Linux? :)
>
> That's pretty low, actually. I got attempts from 22 distinct addresses
against
> one server located in Israel and 36 distinct attempts against a server
located
> somewhere in the US. I think I'll add this to my advocacy toolkit now.
>
>   -- Yotam Rubin
>
> >
> >
> > Wichert.
> >
> > --
> >   _________________________________________________________________
> >  /       Nothing is fool-proof to a sufficiently talented fool     \
> > | wichert@wiggy.net                   http://www.liacs.nl/~wichert/ |
> > | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
> >
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>



Reply to: