Those could be either nimda or code red. Basically, an infected computer is sending out probes to infect more computers. If you're not running IIS (Microsoft's web server) you have nothing to worry about. If you are running IIS, I hope you've patched it!

What can you do about it? You can send a copy of your firewall logs to the ISP. You can also report it on this site: http://www.incidents.org/.

What will that do? Probably nothing.. but *maybe* if enough complaints are generated, the ISP will shut the user down.. most likely not.. but that's about all you can do about this..

Read http://www.incidents.org/ for more information about code red and nimda.

got feedback? got feedback?

Any feedback you provide is sent to the owner of this FAQ for possible incorporation and shown publically as well.

by nil