RE: Code Red, anyone?

From: Joe Lareau (joelat_private)
Date: Wed Aug 01 2001 - 10:04:49 PDT

Next message: Thompson, John J: "Code red probe followed by udp port 10xx"

Previous message: Dino Amato: "red"
Maybe in reply to: Russell Fulton: "Code Red, anyone?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

Cable modem (Cox RoadRunner) user,  I have seen 4 CRv2 attempts this
morning. Found by BlackICE & grepping web logs 

211.75.136.55 - - [01/Aug/2001:09:18:47 -0500] 
195.138.133.214 - - [01/Aug/2001:10:24:18 -0500] 
63.11.132.109 - - [01/Aug/2001:10:35:59 -0500] 
211.185.39.252 - - [01/Aug/2001:11:33:25 -0500] 


-Joe

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Thompson, John J: "Code red probe followed by udp port 10xx"
Previous message: Dino Amato: "red"
Maybe in reply to: Russell Fulton: "Code Red, anyone?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Aug 01 2001 - 10:27:51 PDT