[rescue] [OT] CodeRed activity?

Grant Stevens rescue at sunhelp.org
Sat Aug 4 22:24:50 CDT 2001


Odd, most of mine are from 64.x.x.x addresses.  I'm on Telocity, er, 
DirecTV DSL, and my ip is a 64.x.x.x.  It sounds like the big ISPs are 
getting *some* filtering up and running.

Grant


Adam Kropelin wrote:

> At 11:10 PM 8/4/2001 -0400, I wrote:
>
>>> Yes.... Except I have XXXXXXXs from other places:
>>
>>
>> Hmm, I don't have a single scan from outside of 24.0.0.0/8. Perhaps 
>> Time Warner put  a filter on the perimeter so all I see are scans 
>> generated internally to the RR network. Dunno.
>
>
> Scratch that. Just got my first:
>
> 65.33.84.229 - - [04/Aug/2001:23:12:06 -0400] "GET /default.ida?XXX...
>
> --Adam





More information about the rescue mailing list