Security Incidents mailing list archives

Re: The Return of Code Red II?


From: Christine Kronberg <Christine_Kronberg () genua de>
Date: Wed, 12 Mar 2003 09:36:02 +0100 (CET)

On Tue, 11 Mar 2003, Stan Burditzman wrote:


Is anyone else seeing traffic generated by Code Red II.  I thought it wasn't
supposed to propagate after 10/01?  Unfortunately I don't have the whole
string but here is the RealSecure Event.

  Never had any of them till yesterday. Coming from:
  217.3.198.126     [11/Mar/2003:17:12:38 +0100]
  217.40.50.241     [11/Mar/2003:21:35:44 +0100]
  217.52.20.194     [12/Mar/2003:06:54:41 +0100]
  202.143.228.194   [12/Mar/2003:08:28:44 +0100]

  Cheers,


                                              Chris.


-- 
GeNUA mbH



----------------------------------------------------------------------------

<Pre>Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre>
<A href="http://www.securityfocus.com/stillsecure";> http://www.securityfocus.com/stillsecure </A>



Current thread: