Vulnerability Development mailing list archives

Re: CodeRed wormcatcher found on the net


From: Lincoln Yeoh <lyeoh () pop jaring my>
Date: Mon, 27 Aug 2001 10:05:54 +0800

At 01:05 PM 24-08-2001 +0200, Martin Markgraf wrote:

Hello,

Attached you will find a interesting perl program I found
on the net. It's some kind of "wormcatcher" for the CR II
and I havn't seen it mentioned on the list befor.
It reads the local webserver logfile and if it find an
CR II attempt it tries to execute several commands on 
the offending server.

I've always thought about shutting down those servers which scan me, or
those running scanners voluntarily but I figure I'd end up doing jail time :).

So I usually just ignore them.

Cheerio,
Link.



Current thread: