From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 23427 invoked by alias); 12 Jul 2004 17:10:05 -0000 Mailing-List: contact overseers-help@sources.redhat.com; run by ezmlm Precedence: bulk List-Archive: List-Post: List-Help: , Sender: overseers-owner@sources.redhat.com Received: (qmail 23419 invoked from network); 12 Jul 2004 17:10:05 -0000 Received: from unknown (HELO mx1.redhat.com) (66.187.233.31) by sourceware.org with SMTP; 12 Jul 2004 17:10:05 -0000 Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254]) by mx1.redhat.com (8.12.10/8.12.10) with ESMTP id i6CHA5e1007305 for ; Mon, 12 Jul 2004 13:10:05 -0400 Received: from pobox.toronto.redhat.com (pobox.toronto.redhat.com [172.16.14.4]) by int-mx1.corp.redhat.com (8.11.6/8.11.6) with ESMTP id i6CHA3021770 for ; Mon, 12 Jul 2004 13:10:03 -0400 Received: from touchme.toronto.redhat.com (IDENT:postfix@touchme.toronto.redhat.com [172.16.14.9]) by pobox.toronto.redhat.com (8.12.8/8.12.8) with ESMTP id i6CHA1vU019423 for ; Mon, 12 Jul 2004 13:10:01 -0400 Received: from toenail (toenail.toronto.redhat.com [172.16.14.211]) by touchme.toronto.redhat.com (Postfix) with ESMTP id 919E980037F for ; Mon, 12 Jul 2004 13:10:01 -0400 (EDT) Received: from toenail.toronto.redhat.com (localhost.localdomain [127.0.0.1]) by toenail (8.12.10/8.12.5) with ESMTP id i6CHA1xj013731 for ; Mon, 12 Jul 2004 13:10:01 -0400 Received: (from fche@localhost) by toenail.toronto.redhat.com (8.12.10/8.12.10/Submit) id i6CHA16r013726 for overseers@sources.redhat.com; Mon, 12 Jul 2004 13:10:01 -0400 Date: Mon, 12 Jul 2004 17:10:00 -0000 From: "Frank Ch. Eigler" To: Sourceware Overseers Subject: [fche@redhat.com: internet attack on sourceware.org from your site] Message-ID: <20040712171000.GA16913@redhat.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="mz5eWKkhz39mMVQV" Content-Disposition: inline User-Agent: Mutt/1.4.1i X-SW-Source: 2004-q3/txt/msg00026.txt.bz2 --mz5eWKkhz39mMVQV Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-length: 0 --mz5eWKkhz39mMVQV Content-Type: message/rfc822 Content-Disposition: inline Content-length: 986 Date: Mon, 12 Jul 2004 13:02:18 -0400 From: "Frank Ch. Eigler" To: main@convex.ru, Konstantin.Lovtsky@usu.ru, mak@grab.rcupi.e-burg.su, postmaster@rcupi.e-burg.su, dimbo@cnit.ustu.ru, pavel@grab.rcupi.e-burg.su, sws@asu.rcupi.e-burg.su Bcc: Sourceware Overseers Subject: internet attack on sourceware.org from your site Message-ID: <20040712170218.GA10531@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i Content-length: 453 Hi - Around 1400-1500Z today, multiple Internet attacks targeting a leading open source software repository, sourceware.org (aka gcc.gnu.org, cygwin.com, sources.redhat.com), originated from your site at 194.226.227.5 and other associated addresses. Stored data suggests possibly a user named "forb" was involved. Please investigate this and let us know whether any actions were taken, or if we can help provide more information. Thank you. - FChE --mz5eWKkhz39mMVQV--