Re: Code Red, anyone?

[Pluto <pluto () stderr de>]

On Wed, Aug 01, 2001 at 07:46:27AM -0700, Pat Wilson wrote:
> Just to confirm - I've spotted an infestation here (only one so
> far; we blocked access to machines that had been infested on the
> 19th and hadn't heard had been cleaned up).  This one even had
> the Chinese Web site...

  Snort reported 9 "WEB-IIS ISAPI .ida attempt" in the last 20 min. Just
20 IP-numbers.

  Gruss

-- 
  Pluto   -   SysAdmin of Hades
  Free information! Freedom through knowledge. Wisdom for all!! =:-)

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com