[oclug] Microsoft hit by CodeRed

[Vic Gedris]

On Fri, 10 Aug 2001, Chris Nolan wrote:

> Vic,
>
> 	Note you should change your grep as you won't be seeing any of the
> "Code Red II" traffic as it uses XXXX's instead of NNNN's (if you don't have
> a 'default.ida' page, just grep on that.  You'll probably go way out count
> wise as the 2nd one is much more rapid.  I've been hit 2432 times.
>
> 	In terms of reporting it, see http://www.dshield.org/codered.html as
> you can send them your logs and they will do the contacting of admins in a
> coordinated effort.
>
> Chris Nolan

Chris,

Interesting.  I haven't been hit with Code Red II yet then, but my count
went up by 20 overnight.  I'll keep an eye out for the new one.

Cheers,
Vic

-- 
------------------------------------------------------------------------
    WORLD WIDE PUNK        http://www.worldwidepunk.com
vic-at-worldwidepunk.com   PO Box 52051, Ottawa Ontario, K1N 5S0, CANADA
------------------------------------------------------------------------