CoderedII seems to be over and done with and this weeks nimda score is relatively low (234) compared to a week ago.
here's a commandline that will get the hostnames of nimda zombies mindlessly probing your webserver. grep exe /var/log/apache/access.log|cut -d' ' -f1|sort -u|nslookup|grep Name|cut -c10- > nimdahosed <html><head><title>html sig</title></head><body><div style="font:sans-serif; font-size:72pt;line-height:84pt;color:blue1;"><ul><li>sexy is good</li><li> linux is good</li><li>qed: linux is sexy</li></ul><hr><hr><hr><hr><hr><hr> <a href="http://www.efn.org/~laprice";>laprice at efn dot org</a></body></html>
