RE: Weird Web Requests

From: Ryan McDonnell (ryanat_private)
Date: Tue Jul 24 2001 - 00:43:38 PDT

  • Next message: Ross Oldbury: "Re: GET x HTTP/1.0"

    Weird... 8181 and 8383 are default ports used my IPSwitch's IMonitor (system
    monitoring) and Web Messaging (web-based email) software, respectively.
    
    Ryan McDonnell
    ryanat_private <mailto:ryanat_private>
    
    
    -----Original Message-----
    From: Jonathan A. Zdziarski [mailto:jonathan.zdziarskiat_private]
    Sent: Monday, July 23, 2001 2:37 PM
    To: incidentsat_private
    Subject: Weird Web Requests
    
    
    Has anyone ever seen web requests such as this?  Looks suspicious.
    
    [Mon Jul 16 17:01:30 2001] [error] [client 63.148.138.2] File does not
    exist: /export/home/usr/nathane/public_html/8181.com
    [Mon Jul 16 17:01:40 2001] [error] [client 63.148.138.2] File does not
    exist: /export/home/usr/nathane/public_html/8181
    [Mon Jul 16 17:02:29 2001] [error] [client 63.148.138.2] File does not
    exist: /export/home/usr/nathane/public_html/8383
    [Mon Jul 16 17:44:59 2001] [error] [client 63.148.138.2] File does not
    exist: /export/home/usr/nathane/public_html/mail:8181
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Jul 24 2001 - 08:07:42 PDT