Re: [cobalt-users] The Code-Red Worm is attacking... GOD it's attacking.

[shimi <shimi@xxxxxxxxxxxxxxxx>]

On Fri, 20 Jul 2001, Andy Jacobs wrote:

> 
> ----- Original Message -----
> From: shimi <shimi@xxxxxxxxxxxxxxxx>
> To: <cobalt-security@xxxxxxxxxxxxxxx>; <cobalt-users@xxxxxxxxxxxxxxx>
> Sent: Thursday, July 19, 2001 11:42 PM
> Subject: [cobalt-users] The Code-Red Worm is attacking... GOD it's
> attacking.
> <Snip>
> 
> > You can keep track of how many attempts to infect your machine had already
> > been done at any given time, using this command:
> >
> > cat /var/log/httpd/access | grep .ida | wc -l
> 
> Mine just comes bak with "79".  Does this mean that 79 machines have tried
> to infect my RAQ4?
> 
> Andy

So far.

Someone I know already got 1000.

Keep your eyes open. Not because it can't infect you, but because of the
load that might be lurking to come to your machine...

It can kill your bandwidth, and if the server is not strong enough, even
your server itself... it all depends on how lucky you're... or in other
words, how much times was your machine's IP randomed by the worm.

- shimi