[Dshield] Got an interesting one trapped in the tarpit...

Tom Liston tliston at premmag.com
Mon Sep 23 13:42:42 GMT 2002


Ed-

AnalogX WebProxy.

http://www.analogx.com/contents/download/network/proxy.htm

-TL

On 23 Sep 2002 at 6:46, Ed Truitt wrote:

> This morning, when I checked LaBrea, I noticed one IP (66.230.215.244) with
> 56 threads caught. Checking it out further, I noticed that it was trying to
> hit the following ports:  80, 3128, 8080, and 6588.  I know what the first
> three are for, but the last one I am unfamiliar with.  Any ideas as to what
> type of attack this is, what "script" the kiddies are using here?  I have
> not seen this one before.
> 
> Cheers,
> Ed Truitt
> PGP fingerprint:  5368 D25E 468C A250 9833  CCD6 DBAE 9C25 02F9 0AB9
> http://www.etee2k.net
> http://www.bsatroop148.org
> 
> "Note to spammers:  my 'delete' key is connected to YOUR ISP.
>  Also, if you send me UCE, I reserve the right to post your spew
> on my Web site, with the appropriate color commentary, so that
> others may have a good laugh at your expense."
> 
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list





More information about the list mailing list