[rescue] [OT] CodeRed activity?

[Brian Hechinger]

On Sat, Aug 04, 2001 at 11:10:58PM -0400, Adam Kropelin wrote:
> 
> Hmm, I don't have a single scan from outside of 24.0.0.0/8. Perhaps Time 
> Warner put  a filter on the perimeter so all I see are scans generated 
> internally to the RR network. Dunno.

could be, mine are coming from all over.

>  From what I read at incidents.org, the new codered variant enables a shell 
> on the compromised box. Nice touch, that.

a shell into NT?  that doesn't sound useful. :)

> Sure is nice that Apache will just 404 the fscking things until the cows 
> come home.

hey, i'm loving it.  100 hits from the 19th of last month until today.  i've
never seen so much traffic on my site!! :)

-brian