> > [EMAIL PROTECTED] schrieb:
> > > How many have you had? According to my logs, as of right now, I've got
> > > 897. (This would be a fun competition! -- who's got the most
> > > default.ida hits?)
As long as people are checking for unique hits.
I added these lines to /root/.bashrc file (for CodeRed II only).
ACCESSLOG=/var/log/httpd/access_log
alias idalogs='grep "default.ida?X" $ACCESSLOG'
alias idacount='idalogs | cut -d" " -f1 | sort | uniq | wc -l'
alias idalist='idalogs | cut -d" " -f1,4,5 | sort | uniq'
alias idahost='idalogs | cut -d" " -f1 | sort | uniq | xargs -n 1 -xtri host {}
2>/dev/null'
And then logout and login, or run '. /root/.bashrc' to make effective.
Use 'idacount' for total hits in current access file. Code Red only hits
the ip address, not the hostname, so virtual hostnames are not contacted.
Use 'idalist' to show all IP addresses affected and the date attempted.
This can show the IP multiple times but different dates.
Use 'idahost' to show the hostnames for the IP addresses found. It will
indicate bogus IPs as well (no reverse mapping). With this I could see
that 90% of my hits came from other @home users.
Thanks... Dan.
Want to buy your Pack or Services from MandrakeSoft?
Go to http://wwww.mandrakestore.com
