[40241] in North American Network Operators' Group
Re: Code Red Hammering Away
daemon@ATHENA.MIT.EDU (Av)
Sat Aug 4 17:07:03 2001
Date: Sat, 4 Aug 2001 22:05:48 +0100 (BST)
From: Av <lists-nanog@silverwraith.com>
To: Bob K <melange@yip.org>
Cc: "nanog@merit.edu" <nanog@merit.edu>
In-Reply-To: <Pine.BSF.4.21.0108041654100.66103-100000@pi.yip.org>
Message-ID: <20010804220456.S33111-100000@apple.silverwraith.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Sat, 4 Aug 2001, Bob K wrote:
>
> N's versus X's on a server with a block of 5 IP's as of August 1, 4AM EDT:
>
> 4:53:42pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep NNNNN|wc -l
> 436
> 4:53:48pm|melange@host:/home/melange> grep default.ida /var/log/httpd-access.log | grep XXXXX | wc -l
> 6
I've started seeing LOTS of XXXXX hits as of approx 1 hour ago.
5 in one hour and counting...
