Hello,

many attacks got to my Apache server these two months and it seems that

Hello, don't worry about it if you have a Linux server. The worm ist called "Code Red". Read this for example for a brief description: http://www.cert.org/advisories/CA-2001-19.html Regards Eicke Kemm they are supposed to be MS IIS problem-related, so I don't care so far, but I have about 120 attack sessions per day.

I would like to know more about this worm.

Here is cut from my error_log: [Mon Aug 6 11:28:38 2001] [error] [client 61.129.67.225] File does not exist: /usr/local/apache/htdocs/default.ida [Mon Aug 6 11:33:11 2001] [error] [client 194.247.87.239] Client sent malformed Host header

and so on repeating lines 1 and 2, but 2nd more often.

Please let me know where I can read more about this worm.

Sincerely, Dmitriy Melihov

-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com