[prev in list] [next in list] [prev in thread] [next in thread]
List: suse-linux-uk-schools
Subject: Code Red
From: "Alex Brett" <rebuke () uktech ! eu ! org>
Date: 2001-08-12 13:54:23
[Download RAW message or body]
I am not good enough with scripts to do this but could someone write a =
script that can analyse an apache log, and generate a list of all ip =
addresses that have tried to access default.ida (the way code red =
infects) - I want to have a list so I can then go to the servers and =
contact the webmasters and tell them that there system is infected as =
the UK Tech webserver seems to be getting hit once every minute or so!
Anyone got any ideas how to do this?
Alex Brett
rebuke@uktech.eu.org
[Attachment #3 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4522.1800" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I am not good enough with scripts to do this but
could someone write a script that can analyse an apache log, and generate a list
of all ip addresses that have tried to access default.ida (the way code red
infects) - I want to have a list so I can then go to the servers and contact the
webmasters and tell them that there system is infected as the UK Tech webserver
seems to be getting hit once every minute or so!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Anyone got any ideas how to do this?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Alex Brett</FONT></DIV>
<DIV><FONT face=Arial size=2><A
href="mailto:rebuke@uktech.eu.org">rebuke@uktech.eu.org</A></FONT></DIV></BODY></HTML>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic