[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] New (nimda) WORM [RAQ3]
- Subject: Re: [cobalt-security] New (nimda) WORM [RAQ3]
- From: "R. Hamburg" <cobalt@xxxxxxx>
- Date: Wed, 19 Sep 2001 12:56:40 +0200
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> cat /var/log/httpd/access | grep cmd.exe | wc -l
>
> I have been hit 236 times so far... is there anything i can do to stop it?
> i know its not going to infect a Cobalt server, but i'd guess its slowing
me
> down.
[drone@]$ cat /var/log/httpd/access | grep cmd.exe | wc -l
14385
We have been hit for 14385 times now. Server appears unaffected and still
speedy and running.
Some of our other servers did not come above the 253 is there any indication
why one is hit so hard and the other almost unaffected ??
--- Robbert
********************
Your representative:
R. Hamburg CIO
rhamburg@xxxxxxx
0031 15-3640268 (office)
0031 15-3640297 (fax)
0031 61-4246036 (directly)
Visit:
http://www.hava.nl
*******************