RE: Scripted CodeRed2 reply

["Baker, Thomas" <Tom.Baker () Staples com>]

> -----Original Message-----
> From: Chris Curtiss [mailto:xrayspx () xrayspx com]
> Sent: Tuesday, August 14, 2001 9:57 AM
> To: incidents () securityfocus com
> Cc: focus-linux () securityfocus com
> Subject: Scripted CodeRed2 reply
>
> 2001-07-31 14:36:44 192.xx.xx.xxx - xx.xx.xx.xxx 80 GET /x.ida
> AAAAAAAAAAAAAAAAA-snip-
>
> I haven't seen anything searching for x.ida before, and this was like once
a
> day, on about 4 different days, I thought that was odd.

x.ida is the eeye.com Code Red scanner.

> Chris Curtiss
> xrayspx () xrayspx com
> --a unix admin in an NT world--



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com