From owner-freebsd-isp Tue Sep 18 11:19:36 2001 Delivered-To: freebsd-isp@freebsd.org Received: from thud.tbe.net (thud.tbe.net [209.123.109.174]) by hub.freebsd.org (Postfix) with ESMTP id A49C337B40E for ; Tue, 18 Sep 2001 11:19:32 -0700 (PDT) Received: by thud.tbe.net (Postfix, from userid 1001) id 3E1431C9453; Tue, 18 Sep 2001 14:17:25 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by thud.tbe.net (Postfix) with ESMTP id 3B0CDDCE4D; Tue, 18 Sep 2001 14:17:25 -0400 (EDT) Date: Tue, 18 Sep 2001 14:17:25 -0400 (EDT) From: "Gary D. Margiotta" To: Paul Boehmer Cc: freebsd-isp@freebsd.org Subject: Re: Code Red?! In-Reply-To: <3.0.6.32.20010918131041.41301100@mail.seidata.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Will also concur that we've seen it in our mix of BSD and Sun, Apache and NES/iPlanet servers. I have heard reports of a 'resurgence' of the Code Red worm. In addition, we just got word from one of our offices that there is another happy joy M$ Outlook-based e-mail attachement worm which goes through the address book, spams everyone in it and shares out the C: drive for unrestricted sharing. -Gary "Complexity breeds bugs. Bugs prevent adoption, lack of adoption results in death. Death not good." On Tue, 18 Sep 2001, Paul Boehmer wrote: > At 01:01 PM 9/18/01 -0400, you wrote: > >Is today an other Code Red day or did I miss something somewhere? > > > >Jan > > > > Slashdot has reported this as a new kind of attack. All of my "BSD" web servers are reporting similar activity. > > > +--------------------------------------------------------+ > | Paul Boehmer SEI Data, Inc. | > | Systems Administrator 888-200-4392 [V] | > | pboehmer@seidata.com 812-744-8000 [F] | > +--------------------------------------------------------+ > 5 out 4 people have problems with fractions > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message