nanog mailing list archives

Re: Code Red Hammering Away


From: Av <lists-nanog () silverwraith com>
Date: Sat, 4 Aug 2001 22:05:48 +0100 (BST)


On Sat, 4 Aug 2001, Bob K wrote:


N's versus X's on a server with a block of 5 IP's as of August 1, 4AM EDT:

4:53:42pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep NNNNN|wc -l
     436
4:53:48pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep XXXXX | wc -l
       6


I've started seeing LOTS of XXXXX hits as of approx 1 hour ago.
5 in one hour and counting...


Current thread: