[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] New (nimda) WORM [RAQ3]
- Subject: RE: [cobalt-security] New (nimda) WORM [RAQ3]
- From: "Joe Llewelyn" <Joe@xxxxxxxx>
- Date: Wed, 19 Sep 2001 11:36:35 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
One of my NT clusters has been scanned some 15,000 times this morning.
I called one sysadmin who was leading the pack (some 20 servers in their
company range scanning) and he did not even know what a worm virus was.
-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of Sean Chester
Sent: 19 September 2001 10:59
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: [cobalt-security] New (nimda) WORM [RAQ3]
cat /var/log/httpd/access | grep cmd.exe | wc -l
I have been hit 236 times so far... is there anything i can do to stop
it?
i know its not going to infect a Cobalt server, but i'd guess its
slowing me
down.
_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security