Date: Fri, 28 Sep 2001 09:07:45 +1000 From: Edwin Groothuis <edwin@mavetju.org> To: freebsd-questions@FreeBSD.ORG Subject: Re: Apache server log Message-ID: <20010928090745.D482@k7.mavetju.org> In-Reply-To: <20010927142147.B15312@acadia.ne.mediaone.net>; from leblanc%2Bfreebsd@acadia.ne.mediaone.net on Thu, Sep 27, 2001 at 02:21:48PM -0400 References: <20010927152824.55499.qmail@web12501.mail.yahoo.com> <005801c14769$73498220$49e9b5ce@quasi> <20010927142147.B15312@acadia.ne.mediaone.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 27, 2001 at 02:21:48PM -0400, Louis LeBlanc wrote: > On 09/27/01 11:30 AM, Marius Kirschner sat at the `puter and typed: > > Yep, that's Nimda, alright. Nothing you have to worry about if you run > > a unix system. > > Correct. However, there's no reason you can't do something about it. > You've heard of Apache::CodeRed? Well, it's a mod_perl handler. It > handles the requests for default.ida by looking up the requesting IP > and sending a warning to the web admin and abuse authorities as well > as securityfocus.com. I've created a Code Red & Nimda spammer, which does the same (sending messages about it to the webadmin, abuse, postmaster and the information coming from DNS and whois) but it isn't real-time. See http://www.mavetju.org/networking/tools.phtml for it. Edwin -- Edwin Groothuis | Personal website: http://www.MavEtJu.org edwin@mavetju.org | Interested in MUDs? Visit Fatal Dimensions: ------------------+ http://www.FatalDimensions.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010928090745.D482>