Not Code Red, was Re: [NCLUG] error message

[Matt Pujol]

The little "Activity" light on my modem has been on solid for the last few
days.  I assumed this was the issue....or somebody trying to hack my
network.  I've gotten an increase in rpc gethostbyname() hacks in the last
week or so.  About one every 2-4 hours.  I've gotten all the RH6.2 rpc
security updates (last one was Feb. I think).  I'm wondering if I didn't
miss something.

Matt

/***********************
Matt Pujol
Product Marketing Manager
1394 and USB CoreWare Technologies
ASIC Digital Entertainment Marketing

LSI Logic
2001 Danfield Court
Fort Collins, Co 80525
970-206-5816
matt.pujol at lsil.com
***********************/


-----Original Message-----
From: nclug-admin at nclug.org [mailto:nclug-admin at nclug.org]On Behalf Of
John E. Jones
Sent: Tuesday, August 07, 2001 2:25 PM
To: nclug at nclug.org
Subject: RE: Not Code Red, was Re: [NCLUG] error message


Yep, I even called them and told them what server it was coming from...


John


-----Original Message-----
From: nclug-admin at nclug.org [mailto:nclug-admin at nclug.org]On Behalf Of
Mark C. Smith
Sent: Tuesday, August 07, 2001 2:25 PM
To: nclug at nclug.org
Subject: Re: Not Code Red, was Re: [NCLUG] error message


I'm using @Home (unfortunately) and gotten so much traffic from
Code Red that my dhcp requests time out before getting any info.
from the server.  Anyone else had this problem?


Mark







*--------------------------------------------------------------------*
Mark c. Smith			   Markcs at CS.ColoState.EDU
Dept. Computer Science             http://WWW.CS.ColoState.EDU/~markcs
Colorado State University          (970)491-5305 (work)
*--------------------------------------------------------------------*

On Aug 6, 2001, Benson Chow wrote the following with Subject "Not Code
Red,...:

->Being on a pretty populated subnet full of poorly secured machines, I've
->been getting one heck of a lot of code red and code red 2 attacks.  I
->don't even want to speculate how many I would get on my @home connection.
->
->I'm up to 154 Code Red II's and 138 Code Red 1's on my dynamic, single
->IP DSL this past 4 weeks.  I'm sure there are more from people who are on
->cablemodem but this is quite bad IMHO...  (but it's fun scripting to count
->:)
->
->-bc
->
->On Mon, 6 Aug 2001, Bryan Stillwell wrote:
->
->> Date: Mon, 6 Aug 2001 17:13:13 -0600
->> From: Bryan Stillwell <bryan at bokeoa.com>
->> Subject: Re: [NCLUG] error message
->[snip]
->> Now this month is a different story, I've had 85 attempts on my co-lo
->> server for code red 2, and 113 attempts for the first code red.
->
->
->_______________________________________________
->NCLUG mailing list
->NCLUG at nclug.org
->http://www.nclug.org/mailman/listinfo/nclug
->

_______________________________________________
NCLUG mailing list
NCLUG at nclug.org
http://www.nclug.org/mailman/listinfo/nclug

_______________________________________________
NCLUG mailing list
NCLUG at nclug.org
http://www.nclug.org/mailman/listinfo/nclug