RE: Code Red Worm

From: Ralph Gervolino (rgervolino@datapeer.com)
Date: 08/07/01


Subject: RE: Code Red Worm
Date: Tue, 7 Aug 2001 16:42:53 -0400
Message-ID: <633CCF78073BD8448D2632230058429CAEC464@ex0.hq.3wcorp.com>
From: "Ralph Gervolino" <rgervolino@datapeer.com>
To: <Gregory_DeGennaro@csaa.com>, <SECURITY-BASICS@securityfocus.com>

Here are the number of hits off are web server running apache
[Mon Aug 6 00:18:16 2001] [error] [client 66.25.212.8] File does not
exist: /hsphere/
local/home/jbowley/blah.com/default.ida

grep 'default.ida' /hsphere/local/var/httpd/logs/error_log |wc -l
90141

Ralph Gervolino
Systems Administrator
Datapeer, Inc.
web: http://www.datapeer.com/
email: rgervolino@datapeer.com

-----Original Message-----
From: Gregory_DeGennaro@csaa.com [mailto:Gregory_DeGennaro@csaa.com]
Sent: Monday, August 06, 2001 11:56 AM
To: SECURITY-BASICS@securityfocus.com
Subject: Code Red Worm

Wow ...

(306) hits by the code red worm in 22 hours!

306 / 3 (the average amount of scans before moving on) = 102 servers and
workstations world wide.

Incidentally, I do not have web services running and this is a *nix
firewall.

Nice going novice users and system administrators for the lack of
updating
and patching your systems.

What are we going to do about these people?

Greg



Relevant Pages

  • RE: Code Red Worm
    ... Subject: Code Red Worm ... that was on my home firewall. ... one of our IP's had 499 hits when I checked at last night (about ... A few years ago, Friday, October 14 was World Standards Day. ...
    (Security-Basics)
  • Re: Code Red Worm
    ... Subject: Code Red Worm ... Weenie.. ... one of our IP's had 499 hits when I checked at last night (about ... A few years ago, Friday, October 14 was World Standards Day. ...
    (Security-Basics)
  • Code Red Worm
    ... Subject: Code Red Worm ... workstations world wide. ... I do not have web services running and this is a *nix ... Nice going novice users and system administrators for the lack of updating ...
    (Security-Basics)