Re: [unisog] Heads up! distributed scans and attacks targeting nsiss.dll

From: Mike Iglesias (iglesiasat_private)
Date: Fri Aug 08 2003 - 13:34:51 PDT

Next message: Incist: "Re: port 445 probes continued"

Previous message: wirepair: "port 445 probes continued"
In reply to: Russell Fulton: "Heads up! distributed scans and attacks targeting nsiss.dll"
Next in thread: oherrera: "Re: Heads up! distributed scans and attacks targeting nsiss.dll"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

We just started seeing this here, from 80.135.31.233 (Deutsche Telekom)
and 211.111.132.8 (Hansol ISP Korea).  They're just doing
"GET /scripts/nsiislog.dll", unlike the POST methods you were seeing.


Mike Iglesias                          Email:       iglesiasat_private
University of California, Irvine       phone:       949-824-6926
Network & Academic Computing Services  FAX:         949-824-2069

---------------------------------------------------------------------------
----------------------------------------------------------------------------

Next message: Incist: "Re: port 445 probes continued"
Previous message: wirepair: "port 445 probes continued"
In reply to: Russell Fulton: "Heads up! distributed scans and attacks targeting nsiss.dll"
Next in thread: oherrera: "Re: Heads up! distributed scans and attacks targeting nsiss.dll"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Aug 08 2003 - 14:42:04 PDT