Security Incidents mailing list archives
Java 1.1.8 paired probes
From: Jackie <JackieJ () Syllables com>
Date: Thu, 16 Aug 2001 10:00:52 -0400
Over the last 2 days ONLY, I have been seeing 63.85.124.6 - - [16/Aug/2001:09:04:21 -0400] "GET / HTTP/1.0" 200 453 "-" "Java1.1.8" 203.194.146.46 - - [16/Aug/2001:09:04:25 -0400] "GET / HTTP/1.0" 200 453 "-" "Java1.1.8" These probes are ALWAYS paired, always from the same 2 IP addresses, the second ALWAYS within seconds of the first. Sorry if this has been covered here previously. Can someone give me a thumbnail of what's going on? Also note the 200 response from our Linux box. Thanks. ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Unsuspected "named" behaviour Gustav (Aug 07)
- Re: Unsuspected "named" behaviour dewt (Aug 07)
- Java 1.1.8 paired probes Jackie (Aug 16)
- Re: Unsuspected "named" behaviour dewt (Aug 07)