Subject:
|
Re: Problem with Brickbay?
|
Newsgroups:
|
lugnet.market.brickshops
|
Date:
|
Wed, 19 Sep 2001 22:47:15 GMT
|
Viewed:
|
2240 times
|
| |
|
|
In lugnet.market.brickshops, Amy Hughes writes:
> In lugnet.market.brickshops, Ray Sanders writes:
> > ... It almost felt like the server was under great load.
>
> It probably was. My web log shows *thousands* of attempts by the latest worm to
> infect me.
While logged on thru earthlink last night, I turned on the personal web server
on the iMac. The log was showing a nimda virii hit on average every 2-3 minutes.
This was on a dialup port, which typically would have *no* port 80 server
active. I reversed a few of the IPs at ARIN. Most (all ?) of them were from
north america. Don't believe I saw one from anywhere outside of NA.
> Dan relies on ASP, so he's more vulnerable to these kinds of
> attacks.
I think the primary vulnaribility is IIS, but with this variant, it tries
multiple approaches to compromise the server. NIPC has a writeup here ...
<http://www.nipc.gov/warnings/advisories/2001/01-022.htm>
> I hope people start billing Microsoft for this crap. I'm microsoft-free, and
> their shoddy software can still kill my site with the volume of traffic these
> worms create.
One has to wonder why so many worms target MS vunerabilities. Or is it because
MS software has so many vunerabilities. All in favor of peer-reviewed source
code, say 'aye'.
Ray
|
|
Message has 3 Replies:
 | | Re: Problem with Brickbay?
|
| Well, brickbay is still down. And just today I heard on the morning radio about another DOS type virus running around. *SIGH* Don't script kiddies have anything better to do than to proprogate viruses that takes advantage of Microsoft's "EVERYTHING (...) (25 years ago, 20-Sep-01, to lugnet.market.brickshops)
| | | Re: Problem with Brickbay?
|
| (...) well, being that you're from NA, that's expected. The worm is trying to be smart, and infect mostly local ips - that way, it's not slowing down the backbone as much, and can spread further and faster. (...) hehe, aye :) I just hope someone (...) (25 years ago, 20-Sep-01, to lugnet.market.brickshops)
| | | Re: Problem with Brickbay?
|
| yeah, i'm gonna' go a hair off topic and rant a tad. (...) Aye! Well, I'm sitting here and averaging an IIS probe every 10sec. This is downright pathetic. Forensically speaking, nimda is not very interesting. It ties together a number of different (...) (25 years ago, 20-Sep-01, to lugnet.market.brickshops)
|
Message is in Reply To:
| | Re: Problem with Brickbay?
|
| (...) It probably was. My web log shows *thousands* of attempts by the latest worm to infect me. Dan relies on ASP, so he's more vulnerable to these kinds of attacks. I hope people start billing Microsoft for this crap. I'm microsoft-free, and their (...) (25 years ago, 19-Sep-01, to lugnet.market.brickshops)
|
10 Messages in This Thread:
 
 
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
This Message and its Replies on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|
