[ale] CodeRed attacks, here we go again.

[greg at turnstep.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm up over 12,000 attempts since 9:00 am this morning. 
Curiously, not all of them attempt all 15 different 
tests - but most do. I just wrote a little script to help 
add a little teergrube effect for those servers. 

Since most of them request this file first:

/scripts/root.exe

I went ahead and created one for them. It's causing the 
clients to wait for 300 seconds, which ain't bad cause that's 
5 minutes they aren't flooding someone else. Hopefully, it 
will slow things down a bit. Maybe crash their system if 
I'm lucky. :)

Details on the (now updated) page at:

http://www.gtsm.com/codewave.html

I'm looking into getting all 15 types of requests to "respond"..

Greg Sabino Mullane
greg at turnstep.com PGP Key: 0x14964AC8 200109181724

-----BEGIN PGP SIGNATURE-----
Comment: http://www.turnstep.com/pgp.html

iQA/AwUBO6e7wbybkGcUlkrIEQILOACgmlGS8TBQvOzUsp2unij
XQ5VqWCQAoJzZ
Ka+SoMEyki0eb90d5a8gBAst
=czPJ
-----END PGP SIGNATURE-----

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.