Re: Strange httpd/access_log entry

[Gary <medmanks@mcleodusa.net>]

On Thu, Apr 11, 2002 at 01:33:54PM -0400 or thereabouts, William Underwood wrote:
> He-heh, sorry.  I was just indicating that my comments were inline, as opposed to stuck at the top, or bottom, of my reply email.

hee, hee.. funny.... 
 
> >> >What is really weird is in a browser, if I type file://64.163.212.171/
> >> >I get the entire listing for my HD
> >> Is that your IP, or someone else's?  And is your client a Windows box, or Linux, or what?
> >No, that is a pacbell address invader... not, mine... 
> Hmm.. Well, pacbell has a lot of DSL users, and that IP is one of them.  Chances are, it's some idiots box, totally unpatched, with a run away Nimda going... 

Yes, I see now
 
> >I'm using RH 7.2
> Oooh.. you're sooo kewl!  ;-)  Do the browser and platform you're using support the file: protocol?  
I just opened the standard Mozilla that is in RH

> >This guy ain't too smart.. I did a cursory nmap on him 
> Neither is that... Never nmap a host that's not yours.. Just send your logs to pacbells security contact.
Why is that. It is not illegal to nmap a strange host, in stealth mode
or open..   


-- 
Best regards,
Gary   

Today's thought: BREAKFAST.COM Halted - Cereal port not responding.

-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.