Return-Path: <sentto-279987-1535-996748955-fc=all.net@returns.onelist.com> Delivered-To: fc@all.net Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Thu, 02 Aug 2001 03:43:07 -0700 (PDT) Received: (qmail 10451 invoked by uid 510); 2 Aug 2001 09:44:56 -0000 Received: from n25.groups.yahoo.com (216.115.96.75) by 204.181.12.215 with SMTP; 2 Aug 2001 09:44:56 -0000 X-eGroups-Return: sentto-279987-1535-996748955-fc=all.net@returns.onelist.com Received: from [10.1.4.53] by mv.egroups.com with NNFMP; 02 Aug 2001 10:42:35 -0000 X-Sender: fc@big.all.net X-Apparently-To: iwar@yahoogroups.com Received: (EGP: mail-7_2_0); 2 Aug 2001 10:42:34 -0000 Received: (qmail 85021 invoked from network); 2 Aug 2001 10:42:34 -0000 Received: from unknown (10.1.10.142) by l7.egroups.com with QMQP; 2 Aug 2001 10:42:34 -0000 Received: from unknown (HELO big.all.net) (65.0.156.78) by mta3 with SMTP; 2 Aug 2001 10:42:34 -0000 Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id DAA02660 for iwar@yahoogroups.com; Thu, 2 Aug 2001 03:42:33 -0700 Message-Id: <200108021042.DAA02660@big.all.net> To: iwar@yahoogroups.com In-Reply-To: <3B68FAEA.FD96FFCE@askgar.com> from "Gary Warner" at Aug 02, 2001 12:02:02 AM Organization: I'm not allowed to say X-Mailer: don't even ask X-Mailer: ELM [version 2.5 PL1] From: Fred Cohen <fc@all.net> Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com Delivered-To: mailing list iwar@yahoogroups.com Precedence: bulk List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com> Date: Thu, 2 Aug 2001 03:42:33 -0700 (PDT) Reply-To: iwar@yahoogroups.com Subject: Re: [iwar] I no longer feel left out... Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Per the message sent by Gary Warner: > Elias Levy was on Tech TV last hour. He mentioned that they had sent > emails to more than 300,000 sysadmins who had infected hosts the first > go-around. > They plan to do the same thing this time around. Statistics are being pushed out rather often on securityfocus (incidents@securityfocus.com) - for those interested... as of Wed, 1 Aug 2001 15:14:06 -0600 (MDT): > So far to date we have *confirmed* reports of 37,000 infected servers. > These are attacks from unique IP's which have been verified as actually > performing the attacks as identified by IDS's, web logs and firewall logs > (which contain enough data to be certain). > > We are in the process of notifying against 170,000 IP's, the differance > (of the total sum) being hosts which were logged as possible offenders via > machanisms which are not 100% reliable. That's from this go round - and remember, it's only in the reproductive phase now. Denial of services start in (18?) days give or take. FC --This communication is confidential to the parties it is intended to serve-- Fred Cohen Fred Cohen & Associates.........tel/fax:925-454-0171 fc@all.net The University of New Haven.....http://www.unhca.com/ http://all.net/ Sandia National Laboratories....tel:925-294-2087 ------------------------ Yahoo! Groups Sponsor ---------------------~--> Small business owners... Tell us what you think! http://us.click.yahoo.com/vO1FAB/txzCAA/ySSFAA/kgFolB/TM ---------------------------------------------------------------------~-> ------------------ http://all.net/ Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:38 PDT