[Dshield] port 80 increase

Johannes B. Ullrich jullrich at sans.org
Sun Dec 7 21:43:41 GMT 2003


A user pointed out a significant increase in the number of sources
scanning port 80. This is always a sign of "something bad". However, my
web logs don't show anything unusual.

If you run a web server, please take a couple minutes and scan for
unusual activity.

-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 786 1563            
  fax: (617) 786 1550                          jullrich at sans.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20031207/0b75c484/attachment.bin


More information about the list mailing list