Re: CodeRed wormcatcher found on the net

From: Robert Freeman (freem100at_private)
Date: Sat Aug 26 2000 - 20:14:55 PDT


An even more irresponsible program would be one to scan for "wormcatcher"
programs and spoof an attack. :0

regards,
Robert

----- Original Message -----
From: "Lincoln Yeoh" <lyeohat_private>
To: "Martin Markgraf" <mm@rien-ag.de>; <vuln-devat_private>
Sent: Sunday, August 26, 2001 7:05 PM
Subject: Re: CodeRed wormcatcher found on the net


> At 01:05 PM 24-08-2001 +0200, Martin Markgraf wrote:
> >
> >Hello,
> >
> >Attached you will find a interesting perl program I found
> >on the net. It's some kind of "wormcatcher" for the CR II
> >and I havn't seen it mentioned on the list befor.
> >It reads the local webserver logfile and if it find an
> >CR II attempt it tries to execute several commands on
> >the offending server.
>
> I've always thought about shutting down those servers which scan me, or
> those running scanners voluntarily but I figure I'd end up doing jail time
:).
>
> So I usually just ignore them.
>
> Cheerio,
> Link.
>
>
>

----------------------------------------------------
NetZero Platinum
Sign Up Today - Only $9.95 per month!
http://my.netzero.net/s/signup?r=platinum&refcd=PT97



This archive was generated by hypermail 2b30 : Mon Aug 27 2001 - 08:50:42 PDT