RE: [expert] Strange Hits

2002-10-16 Thread Franki
 it might still be codered or nimda,, my port 80 is still getting hammered by them.. you can tell by starting your web server, opening your firewall on port 80, then checking your server log. /var/log/httpd/error_log if you see a heap of calls to a file called cmd.exe or default.ida

Re: [expert] Strange Hits

2002-10-15 Thread Angus Beath
dude, you are probably being portscanned by a range of machines that have been infected with a virus - klez or slapper or something similar. Your firewall should cover you quite nicely. Angus On Wed, 2002-10-16 at 12:07, Sevatio wrote: LM8.2 service: attbi I keep getting hits on