[40239] in North American Network Operators' Group
Re: Code Red Hammering Away
daemon@ATHENA.MIT.EDU (Bob K)
Sat Aug 4 16:57:07 2001
Date: Sat, 4 Aug 2001 16:56:29 -0400 (EDT)
From: Bob K <melange@yip.org>
To: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.33.0108041344430.3670-100000@aplatform.com>
Message-ID: <Pine.BSF.4.21.0108041654100.66103-100000@pi.yip.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
N's versus X's on a server with a block of 5 IP's as of August 1, 4AM EDT:
4:53:42pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep NNNNN|wc -l
436
4:53:48pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep XXXXX | wc -l
6
On Sat, 4 Aug 2001 michael@aplatform.com wrote:
>
> Hello,
>
> Very interesting. Im seeing the NNNNNNNNNNNNNNNNNNNN's as it was in July.
>
> Michael...
>
> On Sat, 4 Aug 2001, Gregory (Grisha) Trubetskoy wrote:
>
> >
> >
> > I also noticed requests that use "XXXXXXXXX" instead of "NNNNNNNNNN". In
> > fact I see more X's than N's as of this morning.
> >
> > Grisha
> >
> > On Sat, 4 Aug 2001, Lou Katz wrote:
> >
> > >
> > > My little Class C seems to be getting 3-6 attempts per second to
> > > connect to Port 80 on various IPs at the present time. Is this
> > > about average?
> > >
> > > -=[L]=-
> > >
> >
>
>
--
Bob <melange@yip.org> | Yes. I know. That is, indeed, *not* mayonnaise.
