Re: ASP script to parse URLSCAN.log file and add to a database.
From: wmarti@TAMU.EDUDate: 11/04/01
- Previous message: Florian Weimer: "Re: Sv: Call to arms - INFORMATION ANARCHY"
- In reply to: Michelle Erbeck: "ASP script to parse URLSCAN.log file and add to a database."
- Next in thread: Michelle Erbeck: "Re: ASP script to parse URLSCAN.log file and add to a database."
- Next in thread: Attonbitus Deus: "Re: URLScan for IIS"
- Reply: Michelle Erbeck: "Re: ASP script to parse URLSCAN.log file and add to a database."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Message-ID: <200111041507.fA4F7Ts13826@basque.tamu.edu> Date: Sun, 4 Nov 2001 09:07:28 -0600 From: wmarti@TAMU.EDU Subject: Re: ASP script to parse URLSCAN.log file and add to a database. To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Ok, I mostly lurk and learn, but this coupled with the "information
anarchy" posts is a bit much.
Two points:
(1) the code below is useful;
(2) publishing infected addresses is down-right irresponsible!!
Michelle Erbeck <michelle@maedata.net> writes:
> ... We use this
> database to deny access to infected hosts thru code we place in a global.asa
> file.
Good idea.
> ... We also publish these addresses at
> http://www.maedata.net/blacklist
What possible good could this do besides telling bad guys about new targets?
Given the back doors installed with some of the Code Red / Nimda variants,
this list just gives those systems to whomever.
I tend to believe in full disclosure. Actions like this tend to discredit
any argument that more information is always better.
Cheers,
Willis Marti
Associate Director
CIS Networking
- Previous message: Florian Weimer: "Re: Sv: Call to arms - INFORMATION ANARCHY"
- In reply to: Michelle Erbeck: "ASP script to parse URLSCAN.log file and add to a database."
- Next in thread: Michelle Erbeck: "Re: ASP script to parse URLSCAN.log file and add to a database."
- Next in thread: Attonbitus Deus: "Re: URLScan for IIS"
- Reply: Michelle Erbeck: "Re: ASP script to parse URLSCAN.log file and add to a database."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|