Steve wrote:
> 
> Code Red targets port 80 of "random" IP's, so the
> only way you'll know how often you're being hit is
> if you're monitoring port 80.

After hearing so much about this, I decided today
to point netcat at port 80 and see if anything
came up.  Wow.  Three hits in 10 minutes (two
CR1 and two CR2).  It's amazing that a pathetic
little dial-up connection in a far off corner 
of the world would get hit like that.

If any of you are interested in trying this,
the following will output Code Red attacks to 
your screen.
------------
nc -l -p 80
------------
Pipe it through |more to see all of it.

Linux and MSwindows versions of netcat are
available here:
-----------------------------------
http://www.l0pht.com/~weld/netcat/
-----------------------------------

It any of you guys would like a version of 
netcat that runs in BasicLinux, let me know.

Cheers,
Steven

P.S.  While writing this letter I have been
      hit twice more.

Reply via email to