[Dshield] error log entries every 15 minutes
trancedylan at blueyonder.co.uk
Thu Jun 13 17:41:17 GMT 2002
My ISP (Blueyonder broadband, UK) has recently installed a scanner.
ZoneAlarm is picking up a series of hits from it every 45mins probing ports
25, 119, 1080 and 6588 (6 times each).
I have spoken to a 'techie' at the ISP and they claim they are trying to
trap users infected with various trojans and mass-mailers.
----- Original Message -----
From: "Frank Rizzo" <frankrizzocalled at hotmail.com>
To: <list at dshield.org>
Sent: Wednesday, June 12, 2002 2:43 PM
Subject: [Dshield] error log entries every 15 minutes
> Can anyone identify what this is all about? It appears every 15 minutes
> has done so for a few weeks.
> 213.253.xx.xx - - [02/Jun/2002:05:57:24 +0100] "GET / HTTP/1.0" 200 4110
> "check_http/184.108.40.206 (netsaint-plugins 1.2.9-4)"
> I dont know if its a genuine link checker or site exists validator but
> 15 minutes seems excessive to do that kind of checking.
> I have emailed the ISP but they havent got back yet.
> Send and receive Hotmail on your mobile device: http://mobile.msn.com
More information about the list