Guys,

Maybe some of you could be interested in this.

WormWarner consists of 2 Perl scripts that can be used to warn hosts that are probably infected by a worm based on the info from the apache log files. If the host can not be warned directly by the first script the second script can be used to parse the logfile from the first script. This script will then try to warn the ISP of the infected host...
Source and info here

Bye.

DKRR