GET /BIBA.IDA

From: Tulchinskiy, Sasha (STulchinskiyat_private)
Date: Mon Jul 30 2001 - 09:49:54 PDT

Next message: h8macsat_private: "RE: Increase in Sub7 scans"

Previous message: Mike Peterson: "Code Red and ISS Internet Scanner"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

Our boxes started logging hits such as

2001-07-30 13:38:36 213.41.15.35 - GET /biba.ida 404 251 133 0 ColdFusion -
<our site URL as referrer>

Have anybody got something like this? For me it looks like scanning for HTTP
response for IDA request.

Sasha.



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: h8macsat_private: "RE: Increase in Sub7 scans"
Previous message: Mike Peterson: "Code Red and ISS Internet Scanner"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jul 30 2001 - 11:01:52 PDT