[olug] Worms!

[Kris Gotcu]

since we're on the topic, eeye has a really good account of their work
on documenting the worm and it's at:
http://www.eeye.com/html/advisories/codered.zip

i don't know about anyone else but i got "code red hits" on port 80 from
over 50 different hosts. apache reports "Client sent malformed Host header"

also, obviously unrelated but definitelly strange, over 200 requests on 
ports 113
and 27374 from 20some different ip's. 27374 i understand but i can't seem to
find anything on attacks on 113 on the web. bugtraq was equally unresponsive
as everyone just shrugged when someone else mentioned it on the list.
does anyone else get probed on 'auth'?



---------------------------------------------------------------------
To unsubscribe, e-mail: olug-unsubscribe at bstc.net
For additional commands, e-mail: olug-help at bstc.net