At 10:49 PM 8/4/2001 -0400, you wrote:
>Man, things have changed around here. Starting about 9:30 this am (EST
>AUG 4), I am getting numerous hits with an XXXXXXXX repeating payload, not
>the old NNNN.
>About 170 today, all from 24.xx.xx.xx, that is, mostly  @HOME ip's.
>I haven't seen the XXXX payload before. I guess this thang must mutate
>Linux advocates, if this doesn't change the mindset of your IS people, give
>up and buy MS$ stock.
>Joel

Without bothering to look at times and dates:
csc008:/log/httpd # grep XXXXXXX /var/log/httpd/* |wc -l
grep: /var/log/httpd/old: Is a directory
     25
csc008:/log/httpd # grep NNNNNN /var/log/httpd/* |wc -l
grep: /var/log/httpd/old: Is a directory
    368

Boy howdy.....



----------------------------------------------------
Jonathan Wilson
System Administrator

Cedar Creek Software     http://www.cedarcreeksoftware.com
Central Texas IT     http://www.centraltexasit.com

_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users

Reply via email to