[Dshield] scrooge.ibsys.com?

Deb Hale haled at pionet.net
Thu Aug 21 18:04:01 GMT 2003


Are you in the Bay Area?  Do you have a TV Station KTVU?  The only thing I
could find on Google is a reference to this site in regards to this tv
station and their instant weather update (kinda' like weatherbug).  Perhaps
you have someone that has a weather update program running?

Deborah F Hale
Certified Business Continuity Professional/Computer Security Specialist
BCP Enterprise, Inc
Telephone: (712) 252-0361
www.bcpenterprise.com
 


-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
Of walter woodrow
Sent: Thursday, August 21, 2003 12:35 PM
To: list at dshield.org
Subject: [Dshield] scrooge.ibsys.com?


Hello,
Has anyone heard about scrooge.ibsys.com?  My box seems to be sending data
to that host via port 80.  I tried to open with a web browser, but nothing
there.  I can telnet to it on that port.  Just wondering if anyone knew
anything about this host.  My box started sending it data about 4 days ago.
I have about 136 hits in my linksys logs. When data is been sent, it seems
to do it every several minutes, but in some cases it is every min.  I am
going to try to put a sniffer on it and see if I can catch some of the
packet info.  I may not understand it, but will post it for some feedback.
 
Thanks.


---------------------------------
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list






More information about the list mailing list