RE: [ic] mod_interchange and Apache MaxClients

["Ron Phipps" <suppressed>]

> From: suppressed
[mailto:interchange-users-
> suppressed On Behalf Of Jeff Fearn
> Sent: Tuesday, November 29, 2005 11:07 PM
> To: suppressed
> Subject: Re: [ic] mod_interchange and Apache MaxClients
> 
> On 11/30/05, Ron Phipps <suppressed> wrote:
> > Does anyone have a copy of the worm?  I'll do some searching and see
> > what I can turn up.
> 
> http://www.frsirt.com/exploits/20050124.awexpl.c.php
> 
> Jeff

Thanks Jeff,

It looks like the worm that I need is the Slapper v2.0 worm:

http://www.lurhq.com/slapperv2.html

This would then give me the exact code that is hitting our site when it
goes down.  I'm going to continue searching for it.

-Ron

_______________________________________________
interchange-users mailing list
suppressed
http://www.icdevgroup.org/mailman/listinfo/interchange-users