SPAM coming from my IP address

basil60 · Oct 13, 2012

A few weeks ago, with help from this forum, I checked my PC for malware - the result was negative.

Mys ISP contacted me again, about unsolicited email, which led me to believe it may have been my server causing the problem - Ubuntu 11.04, running apache and OpenSim and a MOO.

I checked the Apache log, and I'm a bit concerned about some of the entries, although I am a linux noob, and security noob too.

The lines that worry me are 208 and 238.

Once again, I'd appreciate any advice.

chaslang · Oct 14, 2012

The reference to Morfeus can be explained just by searching on the string you saw. For example, see the below:

Morfeus

http://serverfault.com/questions/337450/how-are-these-bad-bots-finding-my-closed-webserver

It is a vulnerability in web page code.

Line 238 has IP = 85.190.0.3 I don't know anything good or bad about this address. Only know that it appears to belong to a site in Germany.

You can lookup any addess you want here: http://cqcounter.com/whois/

Log in or Sign up

SPAM coming from my IP address

basil60 Private E-2

Attached Files:

access (1).log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

SPAM coming from my IP address

basil60 Private E-2

Attached Files:

access (1).log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches