Worm Report 1 by Robert S. Muhlestein (http://freshmeat.net/users/rmuhlestein/) Thursday, September 20th 2001 04:24 Categories: Internet :: WWW/HTTP, Internet :: WWW/HTTP :: HTTP Servers, Internet :: WWW/HTTP :: Site Management, Security, System :: Logging, System :: Monitoring, System :: Systems Administration, Utilities About: Worm Report is a very simple Perl script to filter out the known worm hits from the access log, and put them into their own files named for the IP/Host that has been "wormed". A basic report containing the count, hostname, ip, and a guess at the parent domain is then printed to STDOUT to facilitate contacting these individuals. This script is useful in the short term to get the info to the people who need it. Adding a new worm requires adding a new worm hit string to the DATA section of the script, nothing so fancy (or exhaustive) as an Apache module. Changes: Initial release. Helpful for tracking hits from sites wormed with Code Red, Code Red II, and NIMDA. License: Public Domain URL: http://freshmeat.net/projects/wormreport/ -- Elias Levy SecurityFocus http://www.securityfocus.com/ Si vis pacem, para bellum
This archive was generated by hypermail 2b30 : Mon Oct 01 2001 - 16:17:09 PDT