[Dshield] RE: fighting back against CodeRed

Donnie C. Moss dcm at ugnet.org
Wed Aug 8 03:05:45 GMT 2001


I know you can pull the IP Address but you would have to do some sort of
lookup with ARIN to get the Admin contact for that IP block... then it
would recquire that the block contact information is current.

--dcm

 On Wed, 8Aug 2001, Robert wrote:

> If anyone writes such a thing, I'd love a copy !!!
> 
> robert
> 
> ----- Original Message -----
> From: "Matt Weil" <weilmr at slu.edu>
> To: <dshield at dshield.org>
> Sent: Wednesday, August 08, 2001 8:56 AM
> Subject: Re: [Dshield] RE: fighting back against CodeRed
> 
> 
> > Would a script to send the party an E-Mail when the file default.ida is
> requested help...  Can't ASP and PHP
> > pull the IP and admin address out of the header request????  Maybe if they
> where emailed 500 times a day they
> > would think about getting to the patch....  Sorry just throwing out Ideas
> this may not be possable....
> >
> > Matt
> >
> > Eric Rosander wrote:
> >
> > > I agree with Mark. Just ask Max Vision what you get when you do this in
> the
> > > name of "the forces of good".
> > >
> > > -----Original Message-----
> > > From: dshield-admin at dshield.org [mailto:dshield-admin at dshield.org]On
> > > Behalf Of Mark Rowlands
> > > Sent: Tuesday, August 07, 2001 11:25 AM
> > > To: Tod D. Ihde
> > > Cc: dshield at dshield.org
> > > Subject: Re: [Dshield] RE: fighting back against CodeRed
> > >
> > > On Tuesday 07 August 2001 17:19, you wrote:
> > > > The machines are not going to get patched by the owners.
> > > >
> > > > The patch has been out for months.
> > > >
> > > > CodeRed (And II) have been out for days.
> > > >
> > > > Wake up. Responsible people have already patched their boxes. Nobody
> else
> > > > has, or will.
> > > >
> > > > Any quibbling that may come from the owner is easily squashed. "You
> want I
> > > > should have just formatted & rebooted? That was an easier program to
> > > > write", and "your box was probing mine. I made it stop."
> > > >
> > > > No they might not hold up in cort, but I'm willing to bet I'm a bigger
> > > > pr*ck than anyone who might be stupid enough to try to take me to
> court
> > > > over patching a box they wouldn't patch themselves.
> > >
> > > Courts and lawyers and judges don't care about right and wrong, they
> care
> > > about the Law and Money.  The court is,however,  an important place that
> > > really matters because in court, they can take away your computers, your
> > > right to work in your chosen career and your freedom. So it don't matter
> if
> > > you are the biggest swingingest dick in the land, if you can't get it up
> in
> > > court ;-).  So please, be a bit wary and a bit thoughtful, I'd hate to
> see
> > > people end up in prison over this bit of net nonsense,
> > >
> > > _______________________________________________
> > > Dshield mailing list
> > > Dshield at dshield.org
> > > To change your subscription options (or unsubscribe), see:
> > > http://www1.dshield.org/mailman/listinfo/dshield
> > >
> > > _______________________________________________
> > > Dshield mailing list
> > > Dshield at dshield.org
> > > To change your subscription options (or unsubscribe), see:
> http://www1.dshield.org/mailman/listinfo/dshield
> >
> > _______________________________________________
> > Dshield mailing list
> > Dshield at dshield.org
> > To change your subscription options (or unsubscribe), see:
> http://www1.dshield.org/mailman/listinfo/dshield
> >
> 
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see: http://www1.dshield.org/mailman/listinfo/dshield
> 


/------------------------\
| Donnie Moss, CCNA, MCP |
| Network Administrator  |
| dcm at ugnet.org          |
| http://www.ugnet.org   |
\------------------------/

"More people are killed by donkeys annually than are
killed in plane crashes."






More information about the list mailing list