[40283] in North American Network Operators' Group
RE: CodeRed: New Variant?
daemon@ATHENA.MIT.EDU (Seth M. Kusiak)
Mon Aug 6 09:09:33 2001
Message-ID: <20010806130942.23077.qmail@hex.databits.net>
From: "Seth M. Kusiak" <seth.kusiak@yours4less.com>
To: nanog@merit.edu
Date: Mon, 06 Aug 2001 13:09:42 GMT
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Errors-To: owner-nanog-outgoing@merit.edu
Perhaps I should explain a bit more:
This is a known exploit
(http://www.microsoft.com/technet/security/bulletin/ms01-023.asp) however I
saw many requests from multiple IP's. I thought that this was odd to see so
many in such a short time. I thought that maybe another worm was on the
loose.
~Seth
Seth M. Kusiak writes:
>
> I'm seeing this. Anyone else?
>
> --------------------------------------------------------------------------
> 2001-08-05 22:11:37 <Client IP> - <Server IP> 80 GET /NULL.printer - 302 0
> 315 2365 0
>
>
>
>
>
>
>
> 3؋@`3۳$빐1j - - -
> --------------------------------------------------------------------------
