Re: New Version out? in http://www.dslreports.com/forum/r1242093 en Sun, 06 Dec 2009 09:54:00 EDT Sun, 06 Dec 2009 09:54:00 EDT Re: New Version out? http://www.dslreports.com/forum/remark,1242093 anon : Speaking of eEye's code red scanner - anyone know of another tool that will scan more than a single class C at a time?

Thanks]]> http://www.dslreports.com/forum/remark,1242093 Tue, 07 Aug 2001 14:54:57 EDT Re: New Version out? http://www.dslreports.com/forum/remark,1240691 Steve :
said by ntwrkguy:
GET /x.ida?aaaaa....aaa=x
This looks very much like the eEye Code Red Scanner tool (though I believe they use A instead of a). I'm quite sure this can't do any infection because the "overflow" code is too small to actually do anything.

Steve
--
Stephen J. Friedl / Software Consultant / Tustin, California USA / »www.unixwiz.net]]> http://www.dslreports.com/forum/remark,1240691 Tue, 07 Aug 2001 10:24:35 EDT New Version out? http://www.dslreports.com/forum/remark,1240569 ntwrkguy : could there be a new version of the virus that is starting to spread? this is the only hit I have under this format.

8/6/01 21:03:27 - NON AUTHORIZED IP 24.10.xx.xx(ccxxxxxx-a.taylor1.mi.home.com) GET /x.ida?aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa aa aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa aaaaaaaa aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa=x Status Code 403 688 Bytes Outbound 265 Bytes Inbound [Refrence Number 1185]

I have xx's out portions of the IP for the "protection" of the owner of this machine.

Brian
Network Administrator
Round Grove Machine Corp.]]> http://www.dslreports.com/forum/remark,1240569 Tue, 07 Aug 2001 10:00:49 EDT