[ngw] It seems the list is back up....

Pat Noordsij patn at gwmadison.wisc.edu
Thu Jul 19 20:44:25 UTC 2001


is this 
Attempts to connect to port 80 (http) of seemingly random addresses
in our address range are up very significantly
this afternoon.  Where normally we get only a few addresses contacted
per day, there were 14 contacted from 11 source addresses in a
sample period of one recent minute.  Activity logs are growing at
a much higher than normal rate overall.

These are believed to be mostly .ida exploit activity (code red worm).

>>> trevor at harrison.org 07/19/01 03:15PM >>>



--
Visit http://www.ngwlist.com for help with the list.
Visit http://www.concentrico.net for custom GroupWise development needs and product information.





More information about the ngw mailing list