Re: [SLUG] worm log entries

From: Bill (selinux@home.com)
Date: Thu Jan 17 2002 - 14:53:59 EST


On Thursday 17 January 2002 13:50, you wrote:
> These just came on line. My point was there should eb NO traffic.
> It's 3MB of just this.

A couple of months ago I turned Apache on just for the fun of it. In
29 (unadvertised, content free) hours, I racked up 1,880 Nimda
queries (does WinNT wanna come out & play?) and 16 other worm / virus
queries. ALL but one were for MSFT. Someone, somewhere had entered a
compromised bind server into the fray but it absolutely couldn't keep
up with the Nimda machines.

Has anyone ever calculated the economic effect of just the internet
latency induced by these attacks?

Bill

-- 
         total       used       free     shared    buffers     cached
Mem:   1545352    1539972       5380          0      64028    1252772
Swap:   401584      18768     382816
Total: 1946936    1558740     388196
Linux a.genesis.com 2.4.14 #3 Fri Nov 9 23:14:31 EST 2001 K7 750MHz
2:49pm  up 28 days, 12:52,  3 users,  load average: 0.09, 0.14, 0.10



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:11:52 EDT