OT - Shrapnel Games server hit by Code Red?!?
 

I was wondering what went wrong with the Shrapnel server lately. The forum was really slow in the past day or two and then failed altogether yesterday. Just looked up their main page and it seems that their whole site went down, not just the forum. Were they using an unpatched Version of IIS? Got hit by the Code Red epidemic? http://www.shrapnelgames.com/ubb/images/icons/shock.gif

In fact in the Last week or so I noticed a big jump of port scans on my own computer. Port 27374 used to be the all-time favourite for obvious reasons, but port 80 scans really surpassed it in terms of numbers. What's even more interesting is that a lot of the originating addresses were from my own @Home cable modem network... so many "home" Users running IIS on their computers??? http://www.shrapnelgames.com/ubb/ima...s/confused.gif

Re: OT - Shrapnel Games server hit by Code Red?!?
 

No we're fine, in fact I installed the code red patch awhile back. Even though our problem is related to code red (in the fact that the actual patch caused us problems) code red itself didn't hit us.

But we're fine now...

------------------
Sarge is coming...

Richard Arnesen
Director of Covert Ops
Shrapnel Games
http://www.shrapnelgames.com

Re: OT - Shrapnel Games server hit by Code Red?!?
 

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Richard:
No we're fine, in fact I installed the code red patch awhile back. Even though our problem is related to code red (in the fact that the actual patch caused us problems) code red itself didn't hit us.<HR></BLOCKQUOTE>

The worm had "secondary" effects, and MS was not on your side! http://www.shrapnelgames.com/ubb/ima...ons/icon10.gif Just kidding. And wow! New record - 16 port 80 scans on my computer in the past hour alone, and I'm just a humble end user! http://www.shrapnelgames.com/ubb/images/icons/shock.gif

Re: OT - Shrapnel Games server hit by Code Red?!?
 

I use BlackICE defender, and since I switched from @Home Cable serivice to Qwest DSL service, I have noticed a 10 fold increase in attempted HTTP Port Probes, Backorfice scans, Trojan Scans, TCP Port Probes, Fragment Overlaps, UDP Port probes, and the list goes on. I estimate over a 1000 hits in the Last week alone.

This tells me that there are many bad people out there who would love to violate my system and reck havock upon my computer.

Re: OT - Shrapnel Games server hit by Code Red?!?
 

Atrocities, BlackIce is one of the worst firewalls......
Use zonealarm (they have one Version free and a PRO Version).
In the http://www.zonelabs.com

Re: OT - Shrapnel Games server hit by Code Red?!?
 

I've heard that the latest Version of Zonealarm (2.6.231) can cause stability and connectivity problems for people with cable modems, anybody want to share your experience with it?

Re: OT - Shrapnel Games server hit by Code Red?!?
 

It does. I used Zone Alarm for a long time. BlackICE is good for detecting, and in combination with "other" programs that I use, is doing quite well. Thanks for the info though, and stay protected. http://www.shrapnelgames.com/ubb/images/icons/icon7.gif

Re: OT - Shrapnel Games server hit by Code Red?!?
 

D'ont know.
I use it with ISDN and work real well.
BTW i'm promoted YES !!!
Drinks for everyone LOL

Re: OT - Shrapnel Games server hit by Code Red?!?
 

The server may not have been hit by the ORIGINAL Code Red but there are at least two new variants now starting to circulate. How infectious these are and if they have adjusted for the patch remains to be seen. Looks like life on the Internet is not going to get safer anytime soon.

Re: OT - Shrapnel Games server hit by Code Red?!?
 

Anybody care to propose a solution (no matter how draconian) to the hacker problem? Seems to me to be the new millenium's Version of graffiti, and just as hard to combat. Do you send some teenager to jail for "spray-painting" the net? And yet, it's more costly to society than old-fashioned vandalism. Also, ironically, it is much more likely to strike at the middle-class than at ghetto-dwellers.

Re: OT - Shrapnel Games server hit by Code Red?!?
 

Just as an FYI, if you are fully patched against Code Red (v1) on your IIS server, you won't be infected by the subsequent Versions. The new Versions have changed the signature (so an intrusion detection system "IDS" won't see it via the same ruleset that spotted the original) and one of them now installs a back door on your machine. You can get specific details at www.sans.org.

Thus, if Code Red didn't kill shrapnel's server, Code Red II and III won't either.

Richard, good job applying the patch before you got nailed, even if the cure still caused pain.

Col. John

Re: OT - Shrapnel Games server hit by Code Red?!?
 

DMM,

The biggest problem with taking any measures against worm creators, etc., is finding them. It's relatively easy to determine contact info for someone who got infected, and thus, subsequently attacked you; but that is typically a clueless user who knows nothing about security, and should not be held to a very high level of responsibility.

If the geeks that wrote Code Red can be found, they should be tortured to death, slowly, and with intense pain, over a long period of time, televised live around the world. That is the only kind of message (IMHO) which will stop this nonsense.

http://www.shrapnelgames.com/ubb/ima...ons/icon12.gif

Col. John

Re: OT - Shrapnel Games server hit by Code Red?!?
 

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by dmm:
Anybody care to propose a solution (no matter how draconian) to the hacker problem?<HR></BLOCKQUOTE>

My sentance would be one day of incarceration. Seem too lenient? Well, does it help that it would be in the general population at a real pennitentary?

24 hours with some real criminals would teach the little punkettes to stay on the straight and narrow, if they made it out alive. At the very least they would have trouble sitting for a while, and that would make it kind of hard to get back to work at the old computer.

MUHHAHAHAHAHAHAHA!

Geo