Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Port 80 traffic: Sources Increase SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Port 80 traffic: Sources Increase
The number of sources which scan for port 80 have been increasing. Please take
a look at your web logs to check for any unusual activity.

The number of sources scanning a specific port is usually a very sensitive indicator for new self propagating attacks. Given the significant background
noise from older worms (Code Red, Nimda, Nachia), it is not easy to spot a new

76 Posts
Dec 7th 2003

Sign Up for Free or Log In to start participating in the conversation!