Re: Getting a TON of IP attacks... Request for Open-Sourced IDS program

• To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• Subject: Re: Getting a TON of IP attacks... Request for Open-Sourced IDS program
• From: Craig McLean <craig@xxxxxxxxxxx>
• Date: Sat, 12 Nov 2005 11:31:27 +0000
• In-reply-to: <BD6B49853F5EAB47A824B8A07B13CC1B378E@xxxxxxxxx>
• List-help: <mailto:[email protected]?subject=help>
• List-id: For users of Fedora Core releases <fedora-list.redhat.com>
• List-post: <mailto:[email protected]>
• List-subscribe: <https://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=subscribe>
• List-unsubscribe: <https://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=unsubscribe>
• References: <BD6B49853F5EAB47A824B8A07B13CC1B378E@xxxxxxxxx>
• Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• User-agent: Mozilla Thunderbird 1.0.7-1.1.fc4 (X11/20050929)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel B. Thurman wrote:
[snip]

> Anyway, here it is:
> 
> /awstats/awstats.pl?configdir=|echo;echo%2 ... cho%20YYY;echo|: 1 Time(s)
> /blog/xmlrpc.php: 1 Time(s)
> /blog/xmlsrv/xmlrpc.php: 1 Time(s)
> /blogs/xmlsrv/xmlrpc.php: 1 Time(s)

All that stuff is the new "Lupper" worm sniffing about. More info can be
found at:
http://vil.nai.com/vil/content/v_136821.htm

C.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDddKPMDDagS2VwJ4RAlUIAKCRMt+FkQo+AT775GKmWpC0MkY97gCgzruR
3wXJGdDSWaiLdcCPWAcxnZE=
=S27a
-----END PGP SIGNATURE-----

• References:
  • Getting a TON of IP attacks... Request for Open-Sourced IDS program
    • From: Daniel B. Thurman

• Prev by Date: Re: VSFTPD anonymous login
• Next by Date: Re: Ethernet problem
• Previous by thread: Re: Getting a TON of IP attacks... Request for Open-Sourced IDS program
• Next by thread: Re: Fedora Core 4 Update: kernel-2.6.14-1.1637_FC4
• Index(es):
  • Date
  • Thread