I got such attempts from 21 distinct addresses against my server in Russia since July 19 through July 20. I was able to resolve some of the addresses into hostnames.
It is forged addresses, isn't it, and we cannot blame this hosts for the attacks? Mikhail. ----- Original Message ----- From: Yotam Rubin <[EMAIL PROTECTED]> To: <debian-security@lists.debian.org> Sent: Saturday, July 21, 2001 7:06 AM Subject: Re: red worm amusement > On Sat, Jul 21, 2001 at 02:10:42AM +0200, Wichert Akkerman wrote: > > > > For amusement I checked the web logs for a few debian machines to see > > if they had some red worm attempts. Seems we've been probed a fair > > bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18 > > on www.debian.org. Almost all attempts were made on July 19. Aren't > > we glad we all run Linux? :) > > That's pretty low, actually. I got attempts from 22 distinct addresses against > one server located in Israel and 36 distinct attempts against a server located > somewhere in the US. I think I'll add this to my advocacy toolkit now. > > -- Yotam Rubin > > > > > > > Wichert. > > > > -- > > _________________________________________________________________ > > / Nothing is fool-proof to a sufficiently talented fool \ > > | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | > > | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D | > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >