Web Server Scans

[dattaway at attaway.net]

On Sat, 6 Jul 2002, chuckx wrote:

> Those log entries are the result of a common IIS virus affectionately
> referred to as Nimda.
> 
> It's nothing to worry about.
> 
> If you want you logs to not be so cluttered, check out the following thread:
> http://www.webmasterworld.com/forum23/620.htm

I've heard another great way to eliminate nimda entries is to set up the
real web pages on a virtual server, leaving the default for nimda.  From
what I am told, nimda does not do hostnames, just the numbers and it will
leave all the virtual logs alone.