Re: Code Red, anyone?

From: Pluto (plutoat_private)
Date: Wed Aug 01 2001 - 08:29:29 PDT

  • Next message: Alfred Huger: "Re: Code Red, anyone?"

    On Wed, Aug 01, 2001 at 07:46:27AM -0700, Pat Wilson wrote:
    > Just to confirm - I've spotted an infestation here (only one so
    > far; we blocked access to machines that had been infested on the
    > 19th and hadn't heard had been cleaned up).  This one even had
    > the Chinese Web site...
    
      Snort reported 9 "WEB-IIS ISAPI .ida attempt" in the last 20 min. Just
    20 IP-numbers.
    
      Gruss
    
    -- 
      Pluto   -   SysAdmin of Hades
      Free information! Freedom through knowledge. Wisdom for all!! =:-)
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Aug 01 2001 - 09:10:32 PDT