[Gllug] Puzzled

[will]

Adrian McMenamin wrote:
> I am not the sys admin where I work, but I do run a couple of Linux boxes 
> here. One is web server we use for odds and sods - eg to make available 
> content at short notice, to run various perl apps etc.
> 
> Activity is usually quite low - but from late August - around the time of 
> SoBig - the number of hits on the front page - which tells you nothing 
> (http://195.157.85.85) - have climbed massively - 5500 so far this month 
> compared to just 26 for the whole of July.
> 
> I can date the start of this to precisely 18 August.
> 
> I see no signs whatso ever the box being owned - ie I don't think this is 
> something else being downloaded, especially as the actually bandwidth usuage 
> hasn't risen by much.
> 
> Any ideas as to what is causing this?

Not much of an idea without seeing some of the logs.  Are they all from 
the same IP?

Will.


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug