it
might still be codered or nimda,,
my
port 80 is still getting hammered by them..
you
can tell by starting your web server, opening your firewall on port 80, then
checking your server log.
/var/log/httpd/error_log
if you
see a heap of calls to a file called cmd.exe or default.ida
dude,
you are probably being portscanned by a range of machines that have been infected with a virus - klez or slapper or something similar. Your firewall should cover you quite nicely.
Angus
On Wed, 2002-10-16 at 12:07, Sevatio wrote:
LM8.2
service: attbi
I keep getting hits on