[Full-Disclosure] Odd logs

Gerd Feiner gerd-fd-list at cerb.de
Wed Jun 4 16:53:44 BST 2003


On Wed, 2003-06-04 at 15:56, Scott M. Algatt wrote:
> I wasn't sure if I could get any help on this one.  I saw an odd entry in
> one of my web server log files:
> 
> GET ~1.3.3.7:1337
> 
> The server is an IIS 5.0 server.  The only thing that I locate concerning
> that port is that it was for DirectTV Catalog?

search the bugtraq-archives for this one.  there was some kind of worm
discussed there about 6 weeks ago, which used that particular port.

regards,
gerd

-- 
There are only 10 types of people in the world: 
Those who understand binary and those who don't ...

GPG-Key at: 
http://www.cerb.de/gerd/gpg-keys/pub.key
-- 
There are only 10 types of people in the world: 
Those who understand binary and those who don't ...

GPG-Key at: 
http://www.cerb.de/gerd/gpg-keys/pub.key
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030604/641deed8/attachment.bin 


Full-Disclosure is hosted and sponsored by Secunia.