Date: Tue, 18 Sep 2001 14:43:44 -0400 From: Bill Vermillion <bill@wjv.com> To: "Gary D. Margiotta" <gary@tbe.net> Cc: Paul Boehmer <pboehmer@seidata.com>, freebsd-isp@FreeBSD.ORG Subject: Re: Code Red?! Message-ID: <20010918144344.B18054@wjv.com> In-Reply-To: <Pine.BSF.4.21.0109181410470.4810-100000@thud.tbe.net>; from gary@tbe.net on Tue, Sep 18, 2001 at 02:17:25PM -0400 References: <3.0.6.32.20010918131041.41301100@mail.seidata.com> <Pine.BSF.4.21.0109181410470.4810-100000@thud.tbe.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Sep 18, 2001 at 02:17:25PM -0400, Gary D. Margiotta thus sprach: > Will also concur that we've seen it in our mix of BSD and Sun, > Apache and NES/iPlanet servers. > I have heard reports of a 'resurgence' of the Code Red worm. I appears to be named the 'nimda' worm. On some of my very lightly trafficed sites 60% of the log entries are error messages from that, both in the access and error logs. The log shows 9:31:15AM EST. I'm getting about 300 entries per hour in both the access log and the error log - and these sites are relatively obscure but well connected. > In addition, we just got word from one of our offices that there > is another happy joy M$ Outlook-based e-mail attachement worm > which goes through the address book, spams everyone in it and > shares out the C: drive for unrestricted sharing. And totally off subject there is an InfoWorld columnist today who pointed out the FrontPage license prohibits it's use on any site that disparages, MS, MSNBC, Expedia, and a few others. With the worms and this maybe a few more will rethink these products. -- Bill Vermillion - bv @ wjv . com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010918144344.B18054>