Re: CodeRed wormcatcher found on the net

From: Robert Freeman (freem100@chapman.edu)
Date: 08/27/00 

Message-ID: <000f01c00fd4$f9ceb1d0$54843604@address.com>
From: "Robert Freeman" <freem100@chapman.edu>
To: <vuln-dev@securityfocus.com>
Subject: Re: CodeRed wormcatcher found on the net
Date: Sat, 26 Aug 2000 20:14:55 -0700

An even more irresponsible program would be one to scan for "wormcatcher"
programs and spoof an attack. :0

regards,
Robert

----- Original Message -----
From: "Lincoln Yeoh" <lyeoh@pop.jaring.my>
To: "Martin Markgraf" <mm@rien-ag.de>; <vuln-dev@securityfocus.com>
Sent: Sunday, August 26, 2001 7:05 PM
Subject: Re: CodeRed wormcatcher found on the net

> At 01:05 PM 24-08-2001 +0200, Martin Markgraf wrote:
> >
> >Hello,
> >
> >Attached you will find a interesting perl program I found
> >on the net. It's some kind of "wormcatcher" for the CR II
> >and I havn't seen it mentioned on the list befor.
> >It reads the local webserver logfile and if it find an
> >CR II attempt it tries to execute several commands on
> >the offending server.
>
> I've always thought about shutting down those servers which scan me, or
> those running scanners voluntarily but I figure I'd end up doing jail time
:).
>
> So I usually just ignore them.
>
> Cheerio,
> Link.
>
>
>

----------------------------------------------------
NetZero Platinum
Sign Up Today - Only $9.95 per month!
http://my.netzero.net/s/signup?r=platinum&refcd=PT97

Relevant Pages