[lug] New attack?

[rm at fabula.de]

On Mon, Jul 08, 2002 at 09:34:44AM -0600, Andrew R. Diederich wrote:
> 
> You're right.  I saw the 1.3.26 bit but you didn't describe a 400 Illegal
> Request error, so it's not the same thing. They might have changes
> something else as well, but it probably would have turned up already.
> 
> --
> Andrew  


Ok, small update: the server _is_ infected! Should i shut it down? ;-)

   Ralf

Ok, a friend of mine just came in, he actually knows the server: 
that box recently attacked his servers -- it seems to be some ISPs
tftp server (read: lots of boot images. Do we get silly ideas here :-)


> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug