Incidents
The Return of Code Red II? Mar 11 2003 05:24PM
Stan Burditzman (slidefx2 hotmail com) (3 replies)

Is anyone else seeing traffic generated by Code Red II. I thought it wasn't
supposed to propagate after 10/01? Unfortunately I don't have the whole
string but here is the RealSecure Event.

Event Name: HTTP_Code_Red_II
Date/Time: 2003/03/11 09:32:11
Source Addr: 211.148.215.243
Destination Addr: 161.xxx.xxx.xxx
Protocol Id: TCP(6)
URL: /default.ida
arg: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXX%u9090%u6858%ucbd3%u7801%

_________________________________________________________________
Tired of spam? Get advanced junk mail protection with MSN 8.
http://join.msn.com/?page=features/junkmail

------------------------------------------------------------------------
----

<Pre>Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre>
<A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>

[ reply ]
Re: The Return of Code Red II? Mar 12 2003 08:36AM
Christine Kronberg (Christine_Kronberg genua de)
Re: The Return of Code Red II? Mar 11 2003 07:05PM
Jay D. Dyson (jdyson treachery net)
SV: The Return of Code Red II? Mar 11 2003 06:52PM
Peter Kruse (kruse krusesecurity dk)


 

Privacy Statement
Copyright 2010, SecurityFocus