On Sat, Jul 21, 2001 at 02:10:42AM +0200, Wichert Akkerman wrote:
>
> For amusement I checked the web logs for a few debian machines to see
> if they had some red worm attempts. Seems we've been probed a fair
> bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18
> on www.debian.org. Almost all attempts were made on July 19. Aren't
> we glad we all run Linux? :)
otoh i get nearly a dozen ftp and dns connection attempts a week at a
minimum, no doubt looking for vulnerable versions of bind and
wu-ftpd. also a dozen portmap connection attempts per day, no doubt
looking for vulnerable rpc.statd.
incompetant `morons with root password' (i won't call them sysadmins)
who won't install security updates are really the worse problem.
--
Ethan Benson
http://www.alaska.net/~erbenson/
PGP signature