Stardate 20010804.2110 (On Screen): I've been sitting here all day watching the activity light on my server blinking, and I just got into the server's management package and noticed a really strange anomaly on the referer list, which I've captured and linked to here. (It gives you all a chance to see what the Qube's management menus look like; it's a really nice system.) I reset the statistics this morning (as I do about once a week) and what you're looking at is about 12 hours. Refers from "Disenchanted" and "Cheesedip" are familiar; I get a regular stream of visitors from both of them. (Thanks, folks!) Equally, the refer from about.com is an old friend; it's linked to my CDMA FAQ. But the two which are just labeled "1264" and "252" are very puzzling. In the "most common requesters" frame (not shown here) the 1264-refers seem to be coming predominately from other RoadRunner sites. I believe that this is "Code Red" attempts to probe my server in hopes that it is running unpatched IIS. It's not happening enough to really make any difference to performance, and of course my Apache server isn't vulnerable.
(discuss)
