Re: Interesting Apache logs

From: Alan J. Flavell (flavell@mail.cern.ch)
Date: 03/25/02 

From: "Alan J. Flavell" <flavell@mail.cern.ch>
Date: Mon, 25 Mar 2002 22:28:34 +0100

On Mar 25, Barry Margolin inscribed on the eternal scroll:

> I suspect most of the infected machines are not operated by professional
> administrators, but are simply home machines. They're more likely ignorant
> than lazy.

Indeed. However, all of them are connected somehow to the Internet,
by some provider who's supposed to know what they're doing, and who
could - and should - be preventing their users from abusing the 'net.

(My home campus for example is monitoring traffic for evidence of
code-red and similar probes, and is known to have blocked the IP of
several infected stations pending resolution of the problem.)