From owner-freebsd-questions  Wed Aug 22 19:32:58 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from tomts6-srv.bellnexxia.net (tomts6.bellnexxia.net [209.226.175.26])
	by hub.freebsd.org (Postfix) with ESMTP id 9CA5937B408
	for <freebsd-questions@FreeBSD.ORG>; Wed, 22 Aug 2001 19:32:49 -0700 (PDT)
	(envelope-from freymann@scaryg.shacknet.nu)
Received: from scaryg.shacknet.nu ([64.231.108.240])
          by tomts6-srv.bellnexxia.net
          (InterMail vM.4.01.03.16 201-229-121-116-20010115) with ESMTP
          id <20010823023248.WXGS3759.tomts6-srv.bellnexxia.net@scaryg.shacknet.nu>;
          Wed, 22 Aug 2001 22:32:48 -0400
Received: from bob (bob.scaryg.shacknet.nu [192.168.0.10])
	by scaryg.shacknet.nu (8.11.3/8.11.3) with SMTP id f7N2VqD41808;
	Wed, 22 Aug 2001 22:31:53 -0400 (EDT)
	(envelope-from freymann@scaryg.shacknet.nu)
From: "ScaryG" <freymann@scaryg.shacknet.nu>
To: "John Galt" <galt@inconnu.isu.edu>,
	"Mike Porter" <mupi@mknet.org>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: RE: Reporting Code Red attempts
Date: Wed, 22 Aug 2001 22:32:54 -0400
Message-ID: <NEBBIBBMOLOKIBAOAKCFEELACFAA.freymann@scaryg.shacknet.nu>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
In-Reply-To: <Pine.LNX.4.33.0108222021180.21821-100000@inconnu.isu.edu>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

|O|>The funny codered hit was when Netscape.com got it.  It seems that they
|O|>inherited some IIS servers because of a buyout and hadn't
|O|>gotten around to
|O|>switching over to Netscape Enterprise yet :)

 lol

 I live in Ontario, Canada and use the Bell High Speed Edition (DSL)
network.

 Since about 4pm today (it's now 10:30pm) the Apache::CodeRed has responded
to at least 60 CodeRed probes on my web server, and has also noticed
repeated probes (and ignored them).

 This apache module does a good job of emailing the offending system once
every 24 hours. It's worth a look for those that wanna try and help knock
this thing down. Can be found at http://www.cpan.org, just search for
Apache::CodeRed

-gf.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message