Are there any mod_security rules that work againts the code red and nimba worms?

We are seeing multitutes of 408 time-outs and I think this is coming from these worms.