Worm Report 1

From: aleph1at_private
Date: Mon Oct 01 2001 - 14:44:50 PDT

  • Next message: aleph1at_private: "Anubis 1.0.2 (Stable)"

    Worm Report 1
      by Robert S. Muhlestein (http://freshmeat.net/users/rmuhlestein/)
      Thursday, September 20th 2001 04:24
    Categories: Internet :: WWW/HTTP, Internet :: WWW/HTTP :: HTTP Servers,
    Internet :: WWW/HTTP :: Site Management, Security, System :: Logging,
    System :: Monitoring, System :: Systems Administration, Utilities
    About: Worm Report is a very simple Perl script to filter out  the known
    worm hits from the access log, and put  them into their own files named for
    the IP/Host  that has been "wormed". A basic report containing  the count,
    hostname, ip, and a guess at the parent  domain is then printed to STDOUT
    to facilitate  contacting these individuals. This script is useful in  the
    short term to get the info to the people who  need it. Adding a new worm
    requires adding a new  worm hit string to the DATA section of the script, 
    nothing so fancy (or exhaustive) as an Apache  module. 
    Changes: Initial release. Helpful for tracking hits from sites wormed with
    Code Red, Code Red II, and NIMDA.
    License: Public Domain
    URL: http://freshmeat.net/projects/wormreport/
    Elias Levy
    Si vis pacem, para bellum

    This archive was generated by hypermail 2b30 : Mon Oct 01 2001 - 16:17:09 PDT