RE: Wave of Nimda-like hits this morning?

From: Darren Young (DYoungat_private)
Date: Tue Feb 26 2002 - 21:03:26 PST

  • Next message: dendlerat_private: "RE: Determining the country of orgin for IP address(es)" 

     
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have several Solaris 8 machines running Apache 1.3.22. The activity
in requests for Nimba seems a bit higher than the past couple of
weeks, but none of them have crashed.

Darren Young
Senior UNIX Administrator
Global Steel Exchange
http://www.gsx.com

- -----Original Message-----
From: John Brahy [mailto:JohnBat_private]
Sent: Tuesday, February 26, 2002 6:36 PM
To: incidentsat_private
Subject: Re: Wave of Nimda-like hits this morning?


>Please keep in mind that came from a Solaris box, Apache log.
>Whatever this (maybe) new bug is, it's blowing up these boxes left
>and right...can't figure it out.  

Is anyone else having Solaris/Apache boxes blow up on them from 
this variant?


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Security 7.0.3

iQA/AwUBPHxWGw5DEDiRLzkxEQIDRACfcB42ZNbj1Wd6L/JQFM88IdFClZQAoI4d
hOD/zoLoGNv5X5MochOyJ+fG
=OEGD
-----END PGP SIGNATURE-----

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Wed Feb 27 2002 - 13:12:38 PST