[Gllug] Puzzled
will
will at hellacool.co.uk
Fri Sep 26 11:26:41 UTC 2003
Adrian McMenamin wrote:
> I am not the sys admin where I work, but I do run a couple of Linux boxes
> here. One is web server we use for odds and sods - eg to make available
> content at short notice, to run various perl apps etc.
>
> Activity is usually quite low - but from late August - around the time of
> SoBig - the number of hits on the front page - which tells you nothing
> (http://195.157.85.85) - have climbed massively - 5500 so far this month
> compared to just 26 for the whole of July.
>
> I can date the start of this to precisely 18 August.
>
> I see no signs whatso ever the box being owned - ie I don't think this is
> something else being downloaded, especially as the actually bandwidth usuage
> hasn't risen by much.
>
> Any ideas as to what is causing this?
Not much of an idea without seeing some of the logs. Are they all from
the same IP?
Will.
--
Gllug mailing list - Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug
More information about the GLLUG
mailing list