North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: script kiddie probes
Yup, and if you want to know why people scan for that, take a look at a simple IRC bouncer I whipped up in a few hours with a coworker at work. It bounces through misconfigured Squid or IIS boxes. It was the default on squid until recently. Warning: This code is horrid and likely contains a zillion buffer overruns :D http://raistlin.toledolink.com/~raistlin/httpbounce.tar.gz Jason --- Jason Slagle - CCNA - CCDA Network Administrator - Toledo Internet Access - Toledo Ohio - [email protected] - [email protected] - WHOIS JS10172 /"\ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . \ / ASCII Ribbon Campaign . If dreams are like movies then memories X - NO HTML/RTF in e-mail . are films about ghosts.. / \ - NO Word docs in e-mail . - Adam Duritz - Counting Crows On Mon, 27 Nov 2000, Ariel Biener wrote: > > On Mon, 27 Nov 2000, Dan Hollis wrote: > > re: http://www.dshield.org/topports.php > > port 8080 is of course not frequently used for webservers, but frequently > used with proxy/cache servers (NetApp NetCache, Squid and alike). > > Sorry for the off topic comment. > > > --Ariel > > > > > http://www.dshield.org/top10.php > > http://www.dshield.org/topports.php > > > > Interesting stuff. > > > > -Dan > > > > > > -- > Ariel Biener > e-mail: [email protected] > PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html > >
|