North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Code Red Hammering Away

  • From: Sameh Ghane
  • Date: Sat Aug 04 17:28:38 2001 
Le (On) Sat, Aug 04, 2001 at 05:14:09PM -0400, Bob K ecrivit (wrote):
> 
> > > 4:53:48pm|[email protected]:/home/melange> grep default.ida /var/log/httpd-access.log | grep XXXXX | wc -l
> > >        6
> > 
> > I've started seeing LOTS of XXXXX hits as of approx 1 hour ago.
> > 5 in one hour and counting...
> 
> Just for reference, here's the logs of this new variant:

Pretty interesting, maybe all nanog-post subscribers could share their
experience with this worm too. Especially if you've seen a lot of non-[XN]
alphanumerical chars.

Sorry, but this worm caused more damages to mailing lists than anything
else, on the Internet. Looks more like a chain-letter...