it
might still be codered or nimda,,
my
port 80 is still getting hammered by them..
you
can tell by starting your web server, opening your firewall on port 80, then
checking your server log.
/var/log/httpd/error_log
if you
see a heap of calls to a file called cmd.exe or default.ida
LM8.2
service: attbi
I keep getting hits on port 80 from the following addresses. I'm
curious if any of you know why. I don't have a apache running but have
a firewall up that catching these hits. Why would they keep visiting
even when I don't have my server running?
These are the IP
dude,
you are probably being portscanned by a range of machines that have been infected with a virus - klez or slapper or something similar. Your firewall should cover you quite nicely.
Angus
On Wed, 2002-10-16 at 12:07, Sevatio wrote:
LM8.2
service: attbi
I keep getting hits on
