in reply to Perl answer to the Microsoft IIS 'Code Red' infected admins

You could do your grep with awk and save an exec:

awk '/default.ida/ {print $1}' /path/to/access_log