Code Red

[jc at trillian.mit.edu (John Chambers)]

| Hello,
| 	Just wondering how many on the list have been scanned for Code Red
| II today.  I have been getting scanned over 80 times a day.  My log file
| goes on forever with all these damn X's and people looking for IIS
| exploits.  When will script kiddies get a life.....

None here at home.  Probably because RCN still  blocks  port  80.   I
started  a  second  server at a higher port, but of course it doesn't
show anything.  I checked the server log on trillian.mit.edu, and  it
shows  maybe 20 probes for URLs that include '\.exe' today.  I wonder
what (if anything) this will do to the popularity of IIS servers?

-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).