RE: [cobalt-users] OT Code Red variations

["J. Patrick Lanigan" <patl@xxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Here's another script for ya, written by Vadim "Kryptolus" Berezniker:

http://www.kryptolus.com/red.html Example of output.
http://www.kryptolus.com/red8.txt Script

Replace lines 382-387 with:

if($line
=~/^(.*?)\s+(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}).*?\[(.*?)\](.*?)\.ida\?(.*)
/) {
	print "processing $2\n" unless $silent;
	$time = $3;
	my @ip = $2;
	my @reverse = reverse_resolve(@ip);

And, of course, set your paths at the beginning of the script.

> >>A few, i sorted them the other day for giggles, I know a fellow eho 
> >>has gotten 40K hits, he got bored and made default.ida a hit counter 
> >>page to count them...lol

The admin for a local LUG server sponsered by a large hosting company with
1000's of servers and lots of bandwidth, sym linked the seawolf iso to
default.ida... Now that's funny :)

Have fun,

J. Patrick Lanigan, Web Developer
URLtek Web Solutions
- ----------------------------------------
  w: http://www.laniganonline.com/
  w: http://www.urltek.com coming soon
- ----------------------------------------
It is dangerous to be right
 when the Government is wrong ~ Voltaire

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO3IvdIlmdkS/cGLOEQIpwQCgxoDJzRMgDYujnR4rvY913f2/ylwAnAgq
DFi/nSJ680p6iXZyK9bey2uv
=83X9
-----END PGP SIGNATURE-----