RE: Weird Web Requests

["Ryan McDonnell" <ryan () ryanmcdonnell com>]

Weird... 8181 and 8383 are default ports used my IPSwitch's IMonitor (system
monitoring) and Web Messaging (web-based email) software, respectively.

Ryan McDonnell
ryan () ryanmcdonnell com <mailto:ryan () ryanmcdonnell com>


-----Original Message-----
From: Jonathan A. Zdziarski [mailto:jonathan.zdziarski () micromuse com]
Sent: Monday, July 23, 2001 2:37 PM
To: incidents () securityfocus com
Subject: Weird Web Requests


Has anyone ever seen web requests such as this?  Looks suspicious.

[Mon Jul 16 17:01:30 2001] [error] [client 63.148.138.2] File does not
exist: /export/home/usr/nathane/public_html/8181.com
[Mon Jul 16 17:01:40 2001] [error] [client 63.148.138.2] File does not
exist: /export/home/usr/nathane/public_html/8181
[Mon Jul 16 17:02:29 2001] [error] [client 63.148.138.2] File does not
exist: /export/home/usr/nathane/public_html/8383
[Mon Jul 16 17:44:59 2001] [error] [client 63.148.138.2] File does not
exist: /export/home/usr/nathane/public_html/mail:8181


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com