[iwar] Code red variants in increasing numbers

From: Fred Cohen (fc@all.net)
Date: 2001-08-04 20:51:39


Return-Path: <sentto-279987-1552-996983500-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Sat, 04 Aug 2001 20:54:23 -0700 (PDT)
Received: (qmail 24910 invoked by uid 510); 5 Aug 2001 02:53:57 -0000
Received: from n6.groups.yahoo.com (216.115.96.56) by 204.181.12.215 with SMTP; 5 Aug 2001 02:53:57 -0000
X-eGroups-Return: sentto-279987-1552-996983500-fc=all.net@returns.onelist.com
Received: from [10.1.4.55] by hm.egroups.com with NNFMP; 05 Aug 2001 03:51:40 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_2_0); 5 Aug 2001 03:51:39 -0000
Received: (qmail 93406 invoked from network); 5 Aug 2001 03:51:39 -0000
Received: from unknown (10.1.10.26) by l9.egroups.com with QMQP; 5 Aug 2001 03:51:39 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta1 with SMTP; 5 Aug 2001 03:51:39 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id UAA01258 for iwar@onelist.com; Sat, 4 Aug 2001 20:51:39 -0700
Message-Id: <200108050351.UAA01258@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Sat, 4 Aug 2001 20:51:39 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] Code red variants in increasing numbers
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Looks like there are more Code Red variants on the way...  One with Xs,
in the overrun sequence, one with Os in the overrun sequence.  They seem
to be running at a higher rate and through cable modem and DSL IP
addresses for now.  To get a sense, on random IP addresses, I am now
getting red code requests at a rate of one every few minutes -
sustained... 

This issue is not anywhere near dead yet as far as I can tell...

FC
--This communication is confidential to the parties it is intended to serve--
Fred Cohen		Fred Cohen & Associates.........tel/fax:925-454-0171
fc@all.net		The University of New Haven.....http://www.unhca.com/
http://all.net/		Sandia National Laboratories....tel:925-294-2087

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Small business owners...
Tell us what you think!
http://us.click.yahoo.com/vO1FAB/txzCAA/ySSFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:39 PDT