North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Code Red on dial-in ppp

  • From: Keith Woodworth
  • Date: Sat Jul 21 14:48:34 2001 

On Sat, 21 Jul 2001, Chris Adams wrote:

|+Interesting to note that the one host from our IP space that hit one of
|+our servers was NOT in the report I received.  We had over 21,000 hosts
|+try this on our (Unix/Apache) web servers.  Is someone collecting logs
|+to generate reports?

Weird but Ive been scanning our Apache logs and have yet to see any
attempts for this yet.

Snort has reported 414 alerts w/ regards to Code Red in about a 12 hour
period, but none of the destinations are where are web server sits, just
all in our DSL range.

Keith