Firewall Wizards mailing list archives
RE: patternmatch for scan
From: Martin Machacek <mm () i cz>
Date: Wed, 23 Feb 2000 09:33:19 +0100 (MET)
On 19-Feb-00 Kenneth_W_Fox () sbphrd com wrote:
Is anyone familiar with an attack or probe which begins or ends with scanning only ports 3128 & 8080 on a target box? I've been seeing alot of this lately in various places.
Yes, somebody is searching for open HTTP proxy. 3128 is default port for Squid and 8080 is frequently used port for HTTP proxies. Martin --- [PGP KeyID F3F409C4]
Current thread:
- RE: patternmatch for scan Daniel Brady (Feb 23)
- <Possible follow-ups>
- RE: patternmatch for scan Zimmermann, Rolf (Feb 23)
- Re: patternmatch for scan Robert Graham (Feb 23)
- Re: patternmatch for scan Anthony DeBoer (Feb 23)
- RE: patternmatch for scan Martin Machacek (Feb 23)
- Re: patternmatch for scan Rick Ballard (Feb 23)
- Re: patternmatch for scan Cliff Rayman (Feb 24)
- Re: patternmatch for scan Chuck Swiger (Feb 24)
- Re: patternmatch for scan Neil Ratzlaff (Feb 24)
- Re: patternmatch for scan Laurent LEVIER (Feb 24)