those requests are almost guaranteed to be due to a worm. i get hundreds of these requests a day. just ignore them.
if you're really worried about intrusion attempts i would highly suggest installing an intrusion detection system and signing up for the securityfocus ARIS service (http://aris.securityfocus.com). it makes reading and reporting incidents a lot easier. Regards, Cade Cairns On Wed, 18 Dec 2002, Aaron J. Seigo wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Wednesday 18 December 2002 04:58, Richard Jenniss wrote: > > I used to run SSHD on port 80. I would see stuff like that in my logs all > > the time. Once, 12 attempts by the same individual. > > this isn't always a persistant person, but a persistent worm that has infected > a system and is doing it's job of auomatically attacking other systems. > > - -- > Aaron J. Seigo > GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA EE75 D6B7 2EB1 A7F1 DB43 > > "Everything should be made as simple as possible, but not simpler" > - Albert Einstein > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.7 (GNU/Linux) > > iD8DBQE+ANRP1rcusafx20MRAlpNAJ9Jmwiem66uClUS50dGPHUPvof28ACgnPrH > I0Si9BRaGzBGJSVPgDk4n+0= > =zxGk > -----END PGP SIGNATURE----- >
