[32540] in North American Network Operators' Group
Re: script kiddie probes
daemon@ATHENA.MIT.EDU (Jason Slagle)
Mon Nov 27 16:57:46 2000
Date: Mon, 27 Nov 2000 16:34:04 -0500 (EST)
From: Jason Slagle <raistlin@tacorp.net>
To: Ariel Biener <ariel@fireball.tau.ac.il>
Cc: Dan Hollis <goemon@sasami.anime.net>,
"'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.21_heb2.09.0011272340310.11984-100000@fireball.tau.ac.il>
Message-ID: <Pine.BSO.4.21.0011271632470.22981-100000@mail.tacorp.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
Yup, and if you want to know why people scan for that, take a look at a
simple IRC bouncer I whipped up in a few hours with a coworker at
work. It bounces through misconfigured Squid or IIS boxes. It was the
default on squid until recently.
Warning: This code is horrid and likely contains a zillion buffer
overruns :D
http://raistlin.toledolink.com/~raistlin/httpbounce.tar.gz
Jason
---
Jason Slagle - CCNA - CCDA
Network Administrator - Toledo Internet Access - Toledo Ohio
- raistlin@tacorp.net - jslagle@toledolink.com - WHOIS JS10172
/"\ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
\ / ASCII Ribbon Campaign . If dreams are like movies then memories
X - NO HTML/RTF in e-mail . are films about ghosts..
/ \ - NO Word docs in e-mail . - Adam Duritz - Counting Crows
On Mon, 27 Nov 2000, Ariel Biener wrote:
>
> On Mon, 27 Nov 2000, Dan Hollis wrote:
>
> re: http://www.dshield.org/topports.php
>
> port 8080 is of course not frequently used for webservers, but frequently
> used with proxy/cache servers (NetApp NetCache, Squid and alike).
>
> Sorry for the off topic comment.
>
>
> --Ariel
>
> >
> > http://www.dshield.org/top10.php
> > http://www.dshield.org/topports.php
> >
> > Interesting stuff.
> >
> > -Dan
> >
> >
>
> --
> Ariel Biener
> e-mail: ariel@post.tau.ac.il
> PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
>
>
