[rescue] New worm?

[Bill Bradford]

On Wed, Sep 19, 2001 at 11:35:35PM -0400, Steve Pacenka wrote:
>Your local subnet may not have infectable servers.  90% of the worm traffic to 
> my little server (about 3000 probes per day this week) is from machines in my 
>132.236.*.* subnet.  A couple of dozen nearby machines are generating a lot of 
> traffic.

bash-2.03$ grep cmd.exe combined_log |wc -l
    5776

Thats 3 days.

bill

-- 
Bill Bradford
mrbill at mrbill.net
Austin, TX