Re: The Return of Code Red II?

From: Christine Kronberg (Christine_Kronberg@genua.de)
Date: 03/12/03

  • Next message: Salomao Barguil: "Hosts File "Girlnextdoor_""
    Date: Wed, 12 Mar 2003 09:36:02 +0100 (CET)
    From: Christine Kronberg <Christine_Kronberg@genua.de>
    To: <incidents@securityfocus.com>
    
    

    On Tue, 11 Mar 2003, Stan Burditzman wrote:
    >
    >
    > Is anyone else seeing traffic generated by Code Red II. I thought it wasn't
    > supposed to propagate after 10/01? Unfortunately I don't have the whole
    > string but here is the RealSecure Event.

      Never had any of them till yesterday. Coming from:
      217.3.198.126 [11/Mar/2003:17:12:38 +0100]
      217.40.50.241 [11/Mar/2003:21:35:44 +0100]
      217.52.20.194 [12/Mar/2003:06:54:41 +0100]
      202.143.228.194 [12/Mar/2003:08:28:44 +0100]

      Cheers,

                                                  Chris.

    -- 
    GeNUA mbH
    ----------------------------------------------------------------------------
    <Pre>Lose another weekend managing your IDS?
    Take back your personal time.
    15-day free trial of StillSecure Border Guard.</Pre>
    <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>
    

  • Next message: Salomao Barguil: "Hosts File "Girlnextdoor_""