HTTP Probe by Webserver

From: Alan Wright (AlanJWright@manx.net)
Date: Wed Oct 10 2001 - 15:31:16 PDT

Next message: Andrew Blevins: "RE: HTTP Probe by Webserver"

Previous message: Dietmar Braun: "Port 56035?"
Next in thread: Andrew Blevins: "RE: HTTP Probe by Webserver"
Reply: Andrew Blevins: "RE: HTTP Probe by Webserver"
Reply: Dean Cunningham: "RE: HTTP Probe by Webserver"
Reply: Vince Sola: "RE: HTTP Probe by Webserver"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Dear All

I have noticed tonight that BlackIce Defender has flagged up an Http probe 
from a webserver @195.10.146.197.
This comes back as a Finnish IP.
Anyone know if the server has been compromised and is randomly probing or 
is someone using it as a jump off point for some probing

Any help would be gratefully received.



All the best

Alan

{ Alan J Wright B.Sc(Hons)(Open)}
{SMS or Phone +447624462772}



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Andrew Blevins: "RE: HTTP Probe by Webserver"
Previous message: Dietmar Braun: "Port 56035?"
Next in thread: Andrew Blevins: "RE: HTTP Probe by Webserver"
Reply: Andrew Blevins: "RE: HTTP Probe by Webserver"
Reply: Dean Cunningham: "RE: HTTP Probe by Webserver"
Reply: Vince Sola: "RE: HTTP Probe by Webserver"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Oct 10 2001 - 15:35:12 PDT