-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - Code red only affects IIS (not familiar with iPlanet's webserver
but assuming it has nothing to do with IIS from MS)
- - Your logs should contain IP's that are probing, assuming you log
properly (default?)
- - You could resolve the IP's or probe them on port 80 to determine if
they are webservers, if so you could contact the web admin running
the webserver and if the IP belongs to an ISP customer you can send
an email to [EMAIL PROTECTED] but they usual don't resolve
those types of complaints

Philip Wagenaar

- -----Original Message-----
From: chris home [mailto:[EMAIL PROTECTED]] 
Sent: vrijdag 16 november 2001 18:27
To: [EMAIL PROTECTED]
Subject: iPlanet and Code Red


Hello all,
My iPlanet web server log file has been recently filling up with the
dreaded 
Code Red probes. Is it possible to find out which machine is doing
this to 
me? If so, how can I do this? Also, could my system be infected?
Thank you 
for any and all support!

- -chip

_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Security 7.0.3

iQA/AwUBO/h/oM4JcipDIO8UEQJfTQCgrv0sDdWpoNyhUSR7koCh6+zvQaEAoJ0V
ryVNd2hFWavDM1yDM7Go+5Qm
=c16T
-----END PGP SIGNATURE-----



Reply via email to