Getting a TON of IP attacks... Request for Open-Sourced IDS program

Craig McLean craig at fukka.co.uk
Sat Nov 12 11:31:27 UTC 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel B. Thurman wrote:
[snip]

> Anyway, here it is:
> 
> /awstats/awstats.pl?configdir=|echo;echo%2 ... cho%20YYY;echo|: 1 Time(s)
> /blog/xmlrpc.php: 1 Time(s)
> /blog/xmlsrv/xmlrpc.php: 1 Time(s)
> /blogs/xmlsrv/xmlrpc.php: 1 Time(s)

All that stuff is the new "Lupper" worm sniffing about. More info can be
found at:
http://vil.nai.com/vil/content/v_136821.htm

C.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDddKPMDDagS2VwJ4RAlUIAKCRMt+FkQo+AT775GKmWpC0MkY97gCgzruR
3wXJGdDSWaiLdcCPWAcxnZE=
=S27a
-----END PGP SIGNATURE-----




More information about the users mailing list