OT - Shrapnel Games server hit by Code Red?!?

CW · #1 August 5th, 2001, 05:10 AM

I was wondering what went wrong with the Shrapnel server lately. The forum was really slow in the past day or two and then failed altogether yesterday. Just looked up their main page and it seems that their whole site went down, not just the forum. Were they using an unpatched Version of IIS? Got hit by the Code Red epidemic?

In fact in the Last week or so I noticed a big jump of port scans on my own computer. Port 27374 used to be the all-time favourite for obvious reasons, but port 80 scans really surpassed it in terms of numbers. What's even more interesting is that a lot of the originating addresses were from my own @Home cable modem network... so many "home" Users running IIS on their computers???

Richard · #2 August 5th, 2001, 05:17 AM

No we're fine, in fact I installed the code red patch awhile back. Even though our problem is related to code red (in the fact that the actual patch caused us problems) code red itself didn't hit us.

But we're fine now...

------------------
Sarge is coming...

Richard Arnesen
Director of Covert Ops
Shrapnel Games
http://www.shrapnelgames.com

CW · #3 August 5th, 2001, 05:40 AM

quote:
Originally posted by Richard:
No we're fine, in fact I installed the code red patch awhile back. Even though our problem is related to code red (in the fact that the actual patch caused us problems) code red itself didn't hit us.

The worm had "secondary" effects, and MS was not on your side!

Just kidding. And wow! New record - 16 port 80 scans on my computer in the past hour alone, and I'm just a humble end user!

Atrocities · #4 August 5th, 2001, 08:01 AM

I use BlackICE defender, and since I switched from @Home Cable serivice to Qwest DSL service, I have noticed a 10 fold increase in attempted HTTP Port Probes, Backorfice scans, Trojan Scans, TCP Port Probes, Fragment Overlaps, UDP Port probes, and the list goes on. I estimate over a 1000 hits in the Last week alone.

This tells me that there are many bad people out there who would love to violate my system and reck havock upon my computer.

Crazy_Dog · #5 August 5th, 2001, 11:42 AM

Atrocities, BlackIce is one of the worst firewalls......
Use zonealarm (they have one Version free and a PRO Version).
In the http://www.zonelabs.com

CW · #6 August 5th, 2001, 12:31 PM

I've heard that the latest Version of Zonealarm (2.6.231) can cause stability and connectivity problems for people with cable modems, anybody want to share your experience with it?

Atrocities · #7 August 5th, 2001, 12:39 PM

It does. I used Zone Alarm for a long time. BlackICE is good for detecting, and in combination with "other" programs that I use, is doing quite well. Thanks for the info though, and stay protected.

Crazy_Dog · #8 August 5th, 2001, 12:58 PM

D'ont know.
I use it with ISDN and work real well.
BTW i'm promoted YES !!!
Drinks for everyone LOL

Baron Munchausen · #9 August 5th, 2001, 09:03 PM

The server may not have been hit by the ORIGINAL Code Red but there are at least two new variants now starting to circulate. How infectious these are and if they have adjusted for the patch remains to be seen. Looks like life on the Internet is not going to get safer anytime soon.

dmm · #10 August 6th, 2001, 07:11 PM

Anybody care to propose a solution (no matter how draconian) to the hacker problem? Seems to me to be the new millenium's Version of graffiti, and just as hard to combat. Do you send some teenager to jail for "spray-painting" the net? And yet, it's more costly to society than old-fashioned vandalism. Also, ironically, it is much more likely to strike at the middle-class than at ghetto-dwellers.