Security Incidents mailing list archives
Re: CodeRed back with with a vengence this month!
From: zeno <bugtraq () cgisecurity net>
Date: Mon, 10 Dec 2001 11:19:29 -0500 (EST)
Hey,
quickly this month after its sleep period. In past months snort has not seen CodeRed attacks until 9th or 10th, this month I started seeing
I saw a couple log entries but they where from the 8th nothing on the day you speak of. .
jumped from about 800 unique source addresses per hour on Nov 30 to nearly 3000 this morning.
damn if it helps I haven't seen this much traffic maybe a new worm version that starts on 1.x.x.x and adds one? What subnet you on? I'm on 199.x.x.x and seen almost nothing. - zenomorph ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- CodeRed back with with a vengence this month! Russell Fulton (Dec 10)
- Re: CodeRed back with with a vengence this month! Cory McIntire (Dec 10)
- Re: CodeRed back with with a vengence this month! Ian O'Brien (Dec 10)
- Re: CodeRed back with with a vengence this month! zeno (Dec 10)
- Re: CodeRed back with with a vengence this month! Cory McIntire (Dec 10)