Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Security Incidents: Re: Strange Scan

Re: Strange Scan

From: Glenn Williamson <dubz_at_PROGSOC.UTS.EDU.AU>
Date: Mon, 18 Dec 2000 13:03:24 +1100

> Found this one in some logs today. Ftp server running on port 21

> [2] Sun 17Dec00 08:56:24 - (000042) GET http://www.s3.com HTTP/1.1

<snip>

> [2] Sun 17Dec00 08:56:24 - (000042) User-Agent: ProxyHunter

Proxy Hunter is a little utility I used to use to find anonymous proxies
(i.e. people that have set up WinProxy poorly). All it does is scan a range
of IP's and attempt to retrieve a web page.

Only the great man in the sky knows why this idiot is using port 21.

And dont worry about http://www.s3.com, it just happens to be the default
page that Proxy Hunter attempts to retrieve.

   gleNN
Received on Dec 19 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos