[cobalt-security] Lame Server messages

["Terrance Dwyer" <td@xxxxxxxx>]

I'd just like to point out that my query was not about lame server messages
in general, but about specific instances of peculiarly high traffic - 1000
lame server messages in a 1 hour period.  I get very few lame server
messages the other 23 hours of the day.  Maybe 10. It now appears to repeat
each night in the same time slot and some if not many of the ip's are .kr.

I searched the posts in this and other lists before I put my original post
up and found nothing similar to what I'm seeing here. I'd like to think that
any good admin in this list seeing a 1000 new error messages in their logs
would (again) question the security implications.  Who knows what the next
exploit looks like until it happens.

I'd still like to hear a good theory as to this sudden burst of activity.

Thanks

T. Dwyer
Indian Hill Media