[Gllug] codered?

[Ian Norton]

hiya folks,

i noticed my little p133 server here (spare room at home) has been getting code
red style http requests/

<logfile>

[Wed Aug  8 01:51:50 2001] [error] [client 196.40.59.70] File does not exist:
/home/httpd/html/default.ida
[Wed Aug  8 02:12:39 2001] [error] [client 211.60.58.24] File does not exist:
/home/httpd/html/default.ida
[Wed Aug  8 02:41:51 2001] [error] [client 195.146.59.228] File does not exist:
/home/httpd/html/default.ida

</logfile>

im a little confused as i am on a dynamic IP dialup, and i redialed (got
different ip) at 0200, 

my thought was just co-incidence? or maybe my windows box is infected and doing
scanning, but if that was the case wouldnt the client ips be that of my windows
pc? or does code red have some ip spoofing kit in it?

bredrollu  

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug