In the depths of that dark day Sat Jul 21, the words of Wichert Akkerman were the beacon: > > For amusement I checked the web logs for a few debian machines to see > if they had some red worm attempts. Seems we've been probed a fair > bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18 > on www.debian.org. Almost all attempts were made on July 19. Aren't > we glad we all run Linux? :) >
I've got nothing in my web logs, but I've gotten a whole lot of these over the past couple of days: Jul 19 12:00:47 router kernel: IN=eth1 OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:00:00 SRC=64.152.168.173 DST=123.456.789.012 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=47979 DF PROTO=TCP SPT=1707 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0 Along with the normal crop of connection attempts to ports 111 and 27374. That's life on Roadrunner.
