[Dshield] port 80 increase

Keith Bergen keith at keithbergen.com
Mon Dec 8 02:14:57 GMT 2003

Nothing unusual here. Of course, I do not submit port 80 as I run a server.

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
Of Johannes B. Ullrich
Sent: Sunday, December 07, 2003 4:44 PM
To: list at dshield.org
Subject: [Dshield] port 80 increase

A user pointed out a significant increase in the number of sources scanning
port 80. This is always a sign of "something bad". However, my web logs
don't show anything unusual.

If you run a web server, please take a couple minutes and scan for unusual

CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 786 1563            
  fax: (617) 786 1550                          jullrich at sans.org

More information about the list mailing list