RE: .ida Intrusion Attempt

["Colby Rice" <crice () 180096hotel com>]

Has anyone else noticed that it is only hitting www. servers? or am I
just lucky? I am getting many many attempts but ONLY on my
www.<whatever> servers I DO have servers with port 80 open to the
outside world that ARE NOT getting hit. from everything I have read on
this worm it is picking its IP's at random and if that is the case then
I should have been hit on something OTHER then these (few) www.
servers.. 

(or am I missing something?)

                CR


----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:

http://aris.securityfocus.com