Re: CodeRed wormcatcher found on the net

["Robert Freeman" <freem100 () chapman edu>]

An even more irresponsible program would be one to scan for "wormcatcher"
programs and spoof an attack. :0

regards,
Robert

----- Original Message -----
From: "Lincoln Yeoh" <lyeoh () pop jaring my>
To: "Martin Markgraf" <mm () rien-ag de>; <vuln-dev () securityfocus com>
Sent: Sunday, August 26, 2001 7:05 PM
Subject: Re: CodeRed wormcatcher found on the net


> At 01:05 PM 24-08-2001 +0200, Martin Markgraf wrote:
> > Hello,
> >
> > Attached you will find a interesting perl program I found
> > on the net. It's some kind of "wormcatcher" for the CR II
> > and I havn't seen it mentioned on the list befor.
> > It reads the local webserver logfile and if it find an
> > CR II attempt it tries to execute several commands on
> > the offending server.
>
> I've always thought about shutting down those servers which scan me, or
> those running scanners voluntarily but I figure I'd end up doing jail time
:).
> So I usually just ignore them.
>
> Cheerio,
> Link.

----------------------------------------------------
NetZero Platinum
Sign Up Today - Only $9.95 per month!
http://my.netzero.net/s/signup?r=platinum&refcd=PT97