<a href="http://g.adspeed.net/ad.php?do=clk&zid=14678&wd=728&ht=90&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=14678&wd=728&ht=90&pair=as" alt="i" width="728" height="90"/></a>

Nmap Security Scanner

Docs
Security Lists

Full Disclosure

More
Security Tools

Packet crafters

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

edgeos

Security Incidents: Detecting Cisco IOS probes

Detecting Cisco IOS probes

From: Mark Ryan del Moral Talabis <talabis_at_gmail.com>
Date: Tue, 7 Mar 2006 10:37:27 +0800

Detecting Cisco IOS probes

We have detected activity directed towards Cisco IOS sytems via http.
Most likely, the said activity are probes looking for live Cisco
machines with vulnerable Cisco IOS software accessible via its HTTP
server. Based on the signature of the probes, it seems that the
following tool is being used: cisco scanner v0.2.

Full analysis:
http://www.philippinehoneynet.org/dataarchive.php?date=2006-02-16

Ryan Talabis
Philippine Honeynet Project
http://www.philippinehoneynet.org
Received on Mar 06 2006

This message: [ Message body ]
Next message: Fergie: "Re: Detecting Cisco IOS probes"
Previous message: gregs_at_sloop.net: "Re: Re: Bot net? SPAM Bounces... - Follow-up"
Next in thread: Fergie: "Re: Detecting Cisco IOS probes"
Maybe reply: Fergie: "Re: Detecting Cisco IOS probes"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]