[Dshield] Re: Dshield digest, Vol 1 #629 - 15 msgs

Eelco Lempsink eelco at wideview.33lc0.net
Sat May 25 21:51:08 GMT 2002


* John Sage [jsage at finchhaven.com] wrote:
> Use something like wget:
> 
> for x in `cat ip_list.txt`; do wget -S -t1 --spider -a responses.txt $x; done

Wget can read a list of url's from a file with the -i option too.

I used netcat do the trick:

$ for i in `cat sql_worm`; do echo -e "HEAD / HTTP/1.0\r" | nc $i \
  80 | egrep "^Server:" 2>>sql_worm_report >>sql_worm_report; done

After that I formatted the report (yes, by hand, with vim :) after
running 'sort' over it)

74 : 54.4% : Refused/Time out/Unreachable
46 : 47.1% : Microsoft-IIS/5.0
9  :  6.6% : Microsoft-IIS/4.0
2  :  1.5% : Microsoft-IIS/5.1
1  :  0.7% : Apache/1.3.19 (Win32) mod_jk
1  :  0.7% : Apache/1.3.22 (Win32) PHP/4.0.6
1  :  0.7% : Cougar 4.1.0.3857
1  :  0.7% : Cougar 4.1.0.3917
1  :  0.7% : WebSitePro/2.5.8

-- 
Eelco Lempsink  --  (w(w|idevie)w)?\.33lc0\.net
++++[>++++<-]>+[>++++++>++++++>+++>++++<<<<-]>-..>++++++.<--.
>+++.>>----.<..<---.<.>>---.--.<++.<++.>++++++.[-]++++++++++.




More information about the list mailing list