Re: HTTP connections

• Previous message: Penn, Toby (IT.Ops Security Services): "Host Unreachable Scan"
• In reply to: Gillard, Paul: "HTTP connections"
• Next in thread: David E. Weekly: "Other China Hack Attempts Concurrent With Code Red"
• Reply: David E. Weekly: "Other China Hack Attempts Concurrent With Code Red"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 19 Jul 2001, Gillard, Paul wrote:

>
> Has anybody any ideas on why this should increase so suddenly? Maybe
> attempts from "code red" infected machines?
>

Most likely.  On my home machine, I've gone from usually about 0 port 80
per day, to 19 in the last 3 hours.  I started listening on port 80 with
netcat, and it's CodeRed so far in every case.  This thing is running
pretty rampant.

					Ryan



----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com

• Next message: Royans Tharakan: "RE: slice3 question"
• Previous message: Penn, Toby (IT.Ops Security Services): "Host Unreachable Scan"
• In reply to: Gillard, Paul: "HTTP connections"
• Next in thread: David E. Weekly: "Other China Hack Attempts Concurrent With Code Red"
• Reply: David E. Weekly: "Other China Hack Attempts Concurrent With Code Red"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jul 19 2001 - 20:12:51 PDT