Re: default.ida

On 11 Jul 2003 08:03:08 -0700, The Other Guy responded to a post from
groups1@acrosslimits.com (James Azzopardi) who wrote in
alt.apache.configuration:

>I am getting someone accessing
>myserver.com/default.ida?XXXXXXXXXXXXXXXXXXXXXX which I would like to
>block. Any suggestions? It is from different IPs and when I do it
>manually myself, the server does not send any data so I guess that
>this is a form of denial of service on my system.
>
>James Azzopardi


Code Red II worm scans from other computers looking for vulnerable IIS
servers. See http://httpd.apache.org/docs/misc/FAQ.html#codered

http://www.cert.org/incident_notes/IN-2001-09.html

Also search google for "Code Red II"

HTH
TOG

--
../configure --prefix=~/zyterion
Not this guy or that guy, The Other Guy.

This spot may contain a satirical comment or comedic source,
and is meant to be funny. If you are easily offended, gullible
or don't have a sense of humour we suggest you read elsewhere.