Full Disclosure mailing list archives

Re: Any particular reason why MS is scanning me for port 80?


From: adam <adam () papsy net>
Date: Tue, 22 Oct 2013 17:45:12 -0500

If you're really curious, why not just run Apache for a day or so and see
exactly what it's looking for, what it's user-agent is, etc? That'd likely
tell you way more than any of us can. For example, if it turns out to be
looking for /someobscuredir - then there's a good chance Gary is right.
Meanwhile, if it's only attempting to access generic paths (e.g. / or
robots.txt) - and nothing super specific, then it's likely closer to
Bobby's answer.


On Tue, Oct 22, 2013 at 5:44 AM, Bobby Broughton <bobby () invehosting com>wrote:

Bing may be scanning the whole ip range that you are in.


Thanks!

Bobby Broughton
Chief Executive Officer
Inve Hosting, Inc

Sent from my iPhone 5. Please excuse my brevity or typos.

On Oct 22, 2013, at 6:09 AM, "silence_is_best () hushmail com" <
silence_is_best () hushmail com> wrote:

Good call...however I don't host/have a site...very interesting ;)

On Monday, October 21, 2013 at 2:38 PM, "Bobby Broughton" <
bobby () invehosting com> wrote:

Are you sure that isn't like bing crawling?

Thanks!

Bobby Broughton
Chief Executive Officer
Inve Hosting, Inc

Sent from my iPhone 5. Please excuse my brevity or typos.

On Oct 21, 2013, at 4:35 PM, "silence_is_best () hushmail com" <
silence_is_best () hushmail com> wrote:

[2049398.163651] IN=ppp0 OUT= MAC= SRC=65.55.52.88 DST=my.xt.ip LEN=48
TOS=0x02 PREC=0x00 TTL=119 ID=27234 DF PROTO=TCP SPT=36925 DPT=80
WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0

WTH...I didn't send any Skype messages or anything ;)

<ATT00001.c>

<ATT00001.c>


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: