RE: [cobalt-users] The Code-Red Worm is attacking... GOD it's attacking.

[Michael <mike@xxxxxxxxxx>]

When I do this

cat /var/log/httpd/access | grep .ida | wc -l

I come up with simply a number:
213

what does that mean?

Mike

At 04:45 PM 7/19/2001 -0700, you wrote:
>How can we stop the Red Worm
>93 attempts in an hour, all with different ip addreses
>
>
> 62.158.207.253 - - [19/Jul/2001:19:27:36 -0400] "GET /default.ida?
>165.91.126.97 - - [19/Jul/2001:19:30:40 -0400] "GET /default.ida
>
>-Sim
>
>-----Original Message-----
>From: cobalt-users-admin@xxxxxxxxxxxxxxx
>[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of shimi
>Sent: Thursday, July 19, 2001 3:42 PM
>To: cobalt-security@xxxxxxxxxxxxxxx; cobalt-users@xxxxxxxxxxxxxxx
>Subject: [cobalt-users] The Code-Red Worm is attacking... GOD it's
>attacking.
>
>
>
>People. Put close attention on this. I got 280 machines connecting to my
>box in one hour. This doesn't seem to stop, nor I think it ever will.
>
>Stupid Microsoft and their lame bugs.
>
>You can keep track of how many attempts to infect your machine had already
>been done at any given time, using this command:
>
>cat /var/log/httpd/access | grep .ida | wc -l
>
>just hope you're not between the first numbers that the copies of the worm
>worldwide are trying to infect.
>
>consider bandwidth consumption on your networks/providers going up *fast*
>
>  Best regards,
>     shimi [mailto:shimi@xxxxxxxxxxxxxxxx]
>
>
>----
>
>Some quotes:
>
>   "Outlook is a massive flaming horrid blatant security violation, that
>    also happens to be a mail reader."
>
>   "There are two major products that come out of Berkeley: LSD and BSD.
>    We don't believe this to be a coincidence."
>          -- Jeremy S. Anderson
>
> Windows: "Where do you want to go today?"
>   Linux: "Where do you want to go tomorrow?"
>     BSD: "Are you guys coming or what?"
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To Subscribe or Unsubscribe, please go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To Subscribe or Unsubscribe, please go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users