It seems my system is being randomly scanned (attacked) by the lion worm.
Since I don't run dns on it, and since the lion worm attempts to insert x86
code
COMPAQ assures me this can do no harm to an alpha.
The say they will be investigating further seeing as how v5.1 runs a suspect
version of bind, according to the CERT
http://www.cert.org/advisories/CA-2001-02.html
whew.
What a day, thanks to all who replied with suggestions and comments.
I was mostly unable to track down the owners of the addresses. But gave
them
to COMPAQ security so maybe they will look. One was from the PACBELL
internet provider. Most were registered via Network Solutions Inc. and I
could get no real info. Probably it is my inexperience in looking up stuff
like this.
O, another was apnic.net. and truls.hiof.no from trondheim.
-----------------------------------------------------
Walter North 406-444-2914
Operating Systems Programmer
wnorth_at_state.mt.us
Drakenberg's Discovery:
If you can't seem to find your glasses,
it's probably because you don't have them on.
-----------------------------------------------------
Received on Tue Apr 03 2001 - 22:37:45 NZST