Security Incidents mailing list archives

RE: Code Red -- AGAIN?!?


From: "Grimes, Shawn (NIA/IRP)" <GrimesSh () grc nia nih gov>
Date: Fri, 30 Nov 2001 08:15:59 -0500

        I had a few this morning coming from 156.101.1.5.  Blocked the IP at
our firewall but maybe if I get some free time today I'll give them a call
and tell them.


Thank You,
Shawn Grimes
Computer Specialist
NCTS - Gerontology Research Center
410-558-8007
grimessh () grc nia nih gov 

-----Original Message-----
From: Steve [mailto:steve () securesolutions org]
Sent: Thursday, November 29, 2001 4:47 PM
To: incidents () securityfocus com
Subject: Code Red -- AGAIN?!?


Is anyone else other than me seeing another increase of code red scans and 
of course the infected emails?  This morning alone I had 38 different 
infected messages stopped at my email gateway and looking at my web logs, 
there are numerous scans going on as well.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: