[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: syn-flood on port 80 GONE WILD!

At 11:17 PM 8/5/01 -0500, Lance Peterson wrote:
>My newly polished-up Debian firewall is logging so many connection attempts
>to port 80 that I truly can't believe it.  All different IP's and all
>day long.  I'm considering just DROPing all that stuff without logging,
>but I still wonder why all these people are hitting my personal IP. 
>I'm not harboring secret info or logging credit cards but you would think,
>from looking at my logs, my Debian firewall is guarding the Pentagon
>(and seems to be doing a good job of it too..hehe).

It's "code red" attacks trying to get in your web-server

nothing to worry about if you aren't running IIS

every machine on the web is getting hit by these

Reply to: