[oclug] Dealing with CodeRed traffic

[Chris Nolan]

Finally found the info

http://www.dshield.org/codered.html

Thanks to those that replied
Chris Nolan

> -----Original Message-----
> From: Ross Jordan [mailto:rjordan at student.math.uwaterloo.ca] 
> Sent: Friday, August 03, 2001 11:50
> To: oclug at lists.oclug.on.ca
> Subject: Re: [oclug] Dealing with CodeRed traffic
> 
> 
> Sans does have a site dealing with code red: www.incidents.org
> www.digitalisland.net/codered is also useful. Infected ips
> can be reported to incidents.org.
> 
> However, I don't think individual hosts are being contacted yet.
> 
> -Ross
> 
> > On Fri, 03-Aug-2001 at 07:57:30 -0400, Chris Nolan wrote:
> > 
> > > 	What are others doing to stop it?  Is there someplace 
> to report the
> > > infected IP's?  I checked on SANs but nothing was obvious.
> > 
> > SecurityFocus (home to the incidents mailing list) is handling such
> > reports.  They're putting together a big list of infected IP's, and
> > notifying the owners.
> > 
> > --=20
> > Take care,
> > Scott \\'unsch