RE: [cobalt-users] Extensive Hack Attack - Was C drive hack

["Paul Alcock" <webmgr@xxxxxxxxxxxxxxxxxx>]

> Hello list, I did this:
>
> cat /var/log/httpd/access | grep cmd.exe | wc -l
>
> and I got over 5000 hits for it already since log rotation at
> 4:30am...  it
> is now almost 3:00pm...  I did a tail -f and all I can see is this thing..
> We got more than 200 hits in less than 15 minutes and it's only gonna get
> worse..  :(
>
In my area it was (is) very bad. This morning that command reported just
short of 15,000 hits on cmd.exe

I also tailed the access file
[admin admin]$ tail -fc1b /home/log/httpd/access to view the ongoing
onslaught
but in reality that is worse than watching a drying machine tumble!

--sig

Paul Alcock
Get an account at http://www.ourfaqsite.com
and keep your FAQs up to date.