RE: Code Red -- AGAIN?!?

From: Reeves, Michael (GEAE, Compaq) (michael.reevesat_private)
Date: Fri Nov 30 2001 - 06:29:44 PST

Next message: Geoffrey King: "Strange Web requests."

Previous message: Emre Yildirim: "Re: Code Red -- AGAIN?!?"
Maybe in reply to: Steve: "Code Red -- AGAIN?!?"
Next in thread: Grimes, Shawn (NIA/IRP): "RE: Code Red -- AGAIN?!?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have seen a steady stream of CR, CRII, and nimda since thier inception.
Some days worse than others but I filter it out at the routers. Over 40,000
instances in the last week :)

This thing will be around forever.

Mike 

-----Original Message-----
From: Steve [mailto:steveat_private]
Sent: Thursday, November 29, 2001 4:47 PM
To: incidentsat_private
Subject: Code Red -- AGAIN?!?


Is anyone else other than me seeing another increase of code red scans and 
of course the infected emails?  This morning alone I had 38 different 
infected messages stopped at my email gateway and looking at my web logs, 
there are numerous scans going on as well.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Geoffrey King: "Strange Web requests."
Previous message: Emre Yildirim: "Re: Code Red -- AGAIN?!?"
Maybe in reply to: Steve: "Code Red -- AGAIN?!?"
Next in thread: Grimes, Shawn (NIA/IRP): "RE: Code Red -- AGAIN?!?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Nov 30 2001 - 11:01:03 PST