Re: red worm amusement
In the depths of that dark day Sat Jul 21, the words of Wichert Akkerman were the beacon:
>
> For amusement I checked the web logs for a few debian machines to see
> if they had some red worm attempts. Seems we've been probed a fair
> bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18
> on www.debian.org. Almost all attempts were made on July 19. Aren't
> we glad we all run Linux? :)
>
I've got nothing in my web logs, but I've gotten a whole lot of these
over the past couple of days:
Jul 19 12:00:47 router kernel: IN=eth1 OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:00:00 SRC=64.152.168.173 DST=123.456.789.012 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=47979 DF PROTO=TCP SPT=1707 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
Along with the normal crop of connection attempts to ports 111 and
27374. That's life on Roadrunner.
Reply to: