Quoting Joel Hammer <[EMAIL PROTECTED]>:
> Have you seen the newest wrinkle in the code red worm?
>
> http://www.cert.org/incident_notes/IN-2001-10.html
>
> Things here in Baltimore on @HOME are still fairly active with the
> worm.
> Things peaked around Aug 8 with almost 80 hits per hour (all hits
> counted,
> not unique ip's.)
> Things now are down to about 20-30 hits per hour.
> Has anybody done a study to see just who is running these compromised
> servers?
> I have had in the last month 8056 hits with the XXX worm, but these come
> from
> only 1659 unique ip's. And, 4630 of those hits come from my
> "neighborhood",
<SNIP>
I stopped logging these things, got tired of logcheck sending me 30+ emails
overnight every night.
I am curious though, what are you using to tabulate the results you've posted?
--
Linux SxS [http://members.home.net/linuxsteps/
_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc
->http://linux.nf/mailman/listinfo/linux-users
