Re: suspicious http log

From: bugtraq (bugtraqat_private)
Date: Mon Oct 22 2001 - 04:45:34 PDT

Next message: Joe Smith: "Slow FTP scan"

Previous message: Emre Yildirim: "suspicious http log"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Just a cgi scanner.
If you run any of those program I would make sure your patched
by visiting the vendor. People get scans like that all the time. I get about 3 a day
on average.

- zenoat_private

> 
> The above is obviously some sort of tool, or an infected host perhaps? This is all followed
> by the usual Code Red II stuff.  Anyone know what it is?
> 
> 
> 
> -- 
> Emre Yildirim <emreat_private>
> GPG KeyID 0xF9E4A1D1 (keyserver.pgp.com)
> 
> 
> 
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management 
> and tracking system please see: http://aris.securityfocus.com
> 
> 


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Joe Smith: "Slow FTP scan"
Previous message: Emre Yildirim: "suspicious http log"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Oct 22 2001 - 08:44:14 PDT