RE: Scripted CodeRed2 reply

From: Baker, Thomas (Tom.Bakerat_private)
Date: Tue Aug 14 2001 - 11:29:58 PDT

Next message: Vitaly Osipov: "Re: Been a victim of a DDoS"

Previous message: Tamer Sahin: "tamersahin.net Code Red Cleaner v1.0"
Maybe in reply to: Chris Curtiss: "Scripted CodeRed2 reply"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>
>
>-----Original Message-----
>From: Chris Curtiss [mailto:xrayspxat_private]
>Sent: Tuesday, August 14, 2001 9:57 AM
>To: incidentsat_private
>Cc: focus-linuxat_private
>Subject: Scripted CodeRed2 reply
>
>2001-07-31 14:36:44 192.xx.xx.xxx - xx.xx.xx.xxx 80 GET /x.ida
>AAAAAAAAAAAAAAAAA-snip-
>
>I haven't seen anything searching for x.ida before, and this was like once
a
>day, on about 4 different days, I thought that was odd.
>

x.ida is the eeye.com Code Red scanner.

>
>Chris Curtiss
>xrayspxat_private
>--a unix admin in an NT world--



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Vitaly Osipov: "Re: Been a victim of a DDoS"
Previous message: Tamer Sahin: "tamersahin.net Code Red Cleaner v1.0"
Maybe in reply to: Chris Curtiss: "Scripted CodeRed2 reply"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Aug 14 2001 - 11:38:03 PDT