nanog mailing list archives
Re: Code Red Hammering Away
From: Sameh Ghane <sw () anthologeek net>
Date: Sat, 4 Aug 2001 23:24:29 +0200
Le (On) Sat, Aug 04, 2001 at 05:14:09PM -0400, Bob K ecrivit (wrote):
4:53:48pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep XXXXX | wc -l 6I've started seeing LOTS of XXXXX hits as of approx 1 hour ago. 5 in one hour and counting...Just for reference, here's the logs of this new variant:
Pretty interesting, maybe all nanog-post subscribers could share their experience with this worm too. Especially if you've seen a lot of non-[XN] alphanumerical chars. Sorry, but this worm caused more damages to mailing lists than anything else, on the Internet. Looks more like a chain-letter...
Current thread:
- Code Red Hammering Away Lou Katz (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away Etaoin Shrdlu (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away Etaoin Shrdlu (Aug 04)
- Re: Code Red Hammering Away Gregory (Grisha) Trubetskoy (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away Bob K (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away Av (Aug 04)
- Re: Code Red Hammering Away Bob K (Aug 04)
- Re: Code Red Hammering Away Sameh Ghane (Aug 04)
- Re: Code Red Hammering Away Advanced Hosting UNIX Admin Daniel Fairchild (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away William Allen Simpson (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away michael (Aug 04)
- Re: Code Red Hammering Away Simon Lyall (Aug 04)
- <Possible follow-ups>
- RE: Code Red Hammering Away Joe Blanchard (Aug 04)
- RE: Code Red Hammering Away Joe Blanchard (Aug 04)
- RE: Code Red Hammering Away Roeland Meyer (Aug 04)