[PLUG] Good grief, Charlie Brown (massive worm assault)

Steven A. Adams stevea at nwtechops.com
Sun May 25 18:29:02 UTC 2003


On Sun, 2003-05-25 at 15:29, Sandy Herring wrote:
> Any other webmasters logging traffic like this? Any idea what flavor of worm
> is at work? This guy consisently got redir'd since his browser reports
> neither referer nor agent...
> 

It's probably a nessus scan ( www.nessus.org ). Everything in the logs
that you included looks like it's focused at Windoze and nessus is built
to scan for these vulnerabilities and much more. If your machine isn't
an IIS box I wouldn't worry - unless this sort of stuff continues.

Steve





More information about the PLUG mailing list