Return-Path: <sentto-279987-1533-996719677-fc=all.net@returns.onelist.com> Delivered-To: fc@all.net Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Wed, 01 Aug 2001 19:38:26 -0700 (PDT) Received: (qmail 31431 invoked by uid 510); 2 Aug 2001 01:36:59 -0000 Received: from n8.groups.yahoo.com (216.115.96.58) by 204.181.12.215 with SMTP; 2 Aug 2001 01:36:59 -0000 X-eGroups-Return: sentto-279987-1533-996719677-fc=all.net@returns.onelist.com Received: from [10.1.4.53] by fk.egroups.com with NNFMP; 02 Aug 2001 02:34:38 -0000 X-Sender: fc@big.all.net X-Apparently-To: iwar@onelist.com Received: (EGP: mail-7_2_0); 2 Aug 2001 02:34:36 -0000 Received: (qmail 65474 invoked from network); 2 Aug 2001 01:42:11 -0000 Received: from unknown (10.1.10.142) by l7.egroups.com with QMQP; 2 Aug 2001 01:42:11 -0000 Received: from unknown (HELO big.all.net) (65.0.156.78) by mta3 with SMTP; 2 Aug 2001 01:42:11 -0000 Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id SAA31152 for iwar@onelist.com; Wed, 1 Aug 2001 18:42:10 -0700 Message-Id: <200108020142.SAA31152@big.all.net> To: iwar@onelist.com (Information Warfare Mailing List) Organization: I'm not allowed to say X-Mailer: don't even ask X-Mailer: ELM [version 2.5 PL1] From: Fred Cohen <fc@all.net> Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Wed, 1 Aug 2001 18:42:10 -0700 (PDT) Reply-To: iwar@yahoogroups.com Subject: [iwar] I no longer feel left out... Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit I was feeling left out there for a while, but finally one of my web sites has multiple Code Red traces... 37 in the last 24 hours - for a single IP... I guess I was just near the end of the sequence and it has taken this long for some Windows boxes to stay up long enough. Is anyone coordinating an effort to notify the folks with IP addresses that contain this? It would be handy if recipients were to email (en mass) all of the sited emitting these packets. A sort of pre-denial of service attack to let the systems administrators know that their machines need to be fixed... FC --This communication is confidential to the parties it is intended to serve-- Fred Cohen Fred Cohen & Associates.........tel/fax:925-454-0171 fc@all.net The University of New Haven.....http://www.unhca.com/ http://all.net/ Sandia National Laboratories....tel:925-294-2087 ------------------------ Yahoo! Groups Sponsor ---------------------~--> Small business owners... Tell us what you think! http://us.click.yahoo.com/vO1FAB/txzCAA/ySSFAA/kgFolB/TM ---------------------------------------------------------------------~-> ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:38 PDT