[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: red worm amusement

In the depths of that dark day Sat Jul 21, the words of Wichert Akkerman were the beacon:
> For amusement I checked the web logs for a few debian machines to see
> if they had some red worm attempts. Seems we've been probed a fair
> bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18
> on www.debian.org. Almost all attempts were made on July 19. Aren't
> we glad we all run Linux? :)

I've got nothing in my web logs, but I've gotten a whole lot of these
over the past couple of days:

Jul 19 12:00:47 router kernel: IN=eth1 OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:00:00 SRC= DST=123.456.789.012 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=47979 DF PROTO=TCP SPT=1707 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0

Along with the normal crop of connection attempts to ports 111 and
27374.  That's life on Roadrunner.

Reply to: