Worm/Virus alert - test-drb@ccmp.vtda.org

18 Sep 2001

...
  OK, I know this is not exactly on-topic, but I thought
it was 
 ridiculous enough to share.

 Here's what I get from the logs on my IRIX web server running apache:

  egrep "scripts/\.\..*" access_log |
grep "18/Sep/2001" | wc -l    7273

  egrep "msadc/\.\..*" access_log | grep
"18/Sep/2001" | wc -l    809

  egrep "_vti.*/\.\..*" access_log | grep
"18/Sep/2001" | wc -l    811

 so, that's 8,893 bogus MS exploit requests.  note too, that those numbers grew

...
  by about 5% in about 5 minutes.  Damn, I'm glad I
don't run a windows machine 
...
  :) 
We do, and it isn't causing us any more trouble than *nix servers. 
'Coz we patch.

Surely the *nix sysadmins spend as much time writing Perl scripts
as we do patching MS bugs...

;-)

-dq