From: david nicol (whatever@davidnicol.com)
Date: 07/06/02


Message-ID: <3D27927B.A7A8428D@davidnicol.com>
Date: Sat, 6 Jul 2002 19:47:58 -0500
From: david nicol <whatever@davidnicol.com>
Subject: Re: Web Server Scans


it's a worm. use traceroute to determine who is responsible for
the IP the scans are originating from and send mail to {HOST}@abuse.net
informing them that one of their users has an infected machine.

Jonathan Hutchins wrote:
>
> I'm getting hit by wave after wave of requests on my web server