From owner-freebsd-security Sat Jul 21 23: 2:26 2001 Delivered-To: freebsd-security@freebsd.org Received: from stuart.microshaft.org (ns1.microshaft.org [208.201.249.2]) by hub.freebsd.org (Postfix) with ESMTP id 6C90C37B403 for ; Sat, 21 Jul 2001 23:02:22 -0700 (PDT) (envelope-from jono@stuart.microshaft.org) Received: (from jono@localhost) by stuart.microshaft.org (8.9.3/8.9.3) id XAA88909; Sat, 21 Jul 2001 23:02:19 -0700 (PDT) (envelope-from jono) Date: Sat, 21 Jul 2001 23:02:19 -0700 From: "Jon O ." To: nathan barrick Cc: freebsd-security@FreeBSD.ORG Subject: Re: everyone Message-ID: <20010721230219.N86996@networkcommand.com> Reply-To: "jono@networkcommand.com" References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: ; from nathan@salvation.unixgeeks.com on Sat, Jul 21, 2001 at 09:15:29PM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org You know I have about logs showing about 60K attempts for that file. You might want to take a look at some of the web servers that attacked you. You might find some interesting things... On 21-Jul-2001, nathan barrick wrote: > > everyone on the list, > > i wanna thank you guys for the responses.. a little after i sent > off the email to the list i was search for "GET /default.ida?NNN" > and i ended up finding alot of info about this red alert worm. but > thanks alot for the responses -- again. > > good to have people who are willing to help. > 'till next time, > > nathan. > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message