[Dshield] port 80 "on the high side"

John Dalton dubuque1 at mchsi.com
Mon Mar 24 23:29:45 GMT 2003


Johannes,
     Interesting since I noted significant and unusuak lag this morning and
afternoon to places like my bank and such, but many other sites were ok. I
actually thought it unusual enough, along with lack of list email, to check
Dshield, ISC, and Symantec to see if I was missing something...
JD

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
Behalf Of Johannes Ullrich
Sent: Monday, March 24, 2003 4:15 PM
To: list at dshield.org
Subject: [Dshield] port 80 "on the high side"



Its a bit early to call it a problem, but port 80 scans, in particular
the number of sources, are a bit on the high site if you look at it
as percentage of total submissions:

http://www.dshield.org/port_report.php?port=80&percent=Y

Given that a WebDAV exploit was released today, please take a quick look
at your web logs if you see anything odd.


--
--------------------------------------------------------------------
jullrich at euclidian.com             Collaborative Intrusion Detection
                                         join http://www.dshield.org

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list



More information about the list mailing list