Re: script kiddie probes

[Jason Slagle <raistlin () tacorp net>]

Yup, and if you want to know why people scan for that, take a look at a
simple IRC bouncer I whipped up in a few hours with a coworker at
work.  It bounces through misconfigured Squid or IIS boxes.  It was the
default on squid until recently.

Warning:  This code is horrid and likely contains a zillion buffer
overruns :D

http://raistlin.toledolink.com/~raistlin/httpbounce.tar.gz

Jason

---
Jason Slagle - CCNA - CCDA
Network Administrator - Toledo Internet Access - Toledo Ohio
- raistlin () tacorp net - jslagle () toledolink com - WHOIS JS10172
/"\ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
\ /   ASCII Ribbon Campaign  . If dreams are like movies then memories
 X  - NO HTML/RTF in e-mail  .   are films about ghosts..
/ \ - NO Word docs in e-mail .     - Adam Duritz - Counting Crows


On Mon, 27 Nov 2000, Ariel Biener wrote:

> On Mon, 27 Nov 2000, Dan Hollis wrote:
>
> re: http://www.dshield.org/topports.php
>
> port 8080 is of course not frequently used for webservers, but frequently
> used with proxy/cache servers (NetApp NetCache, Squid and alike).
>
> Sorry for the off topic comment.
>
>
> --Ariel
>
> > http://www.dshield.org/top10.php
> > http://www.dshield.org/topports.php
> >
> > Interesting stuff.
> >
> > -Dan
>
> --
> Ariel Biener
> e-mail: ariel () post tau ac il
> PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html