Re: /sumthin Revisited

From: noconflic <nocon(at)texas-shooters.com>
Date: Wed Jan 08 2003 - 02:04:45 EST

[mike@procinct.com] Tue, Jan 07, 2003 at 03:01:10PM -0800 wrote:
> At 1/7/2003 02:12 PM, Sverre H. Huseby wrote:

   I would have to agree, breifly looking through my logs, IP's attempting connetions to 443 (ssl not running on my host) most are running vulnerable versions of apache/ssl.

[...]

Trying 217.230.102.xxx...
Connected to 217.230.102.xxx.
Escape character is '^]'.

HEAD / HTTP/1.0 HTTP/1.1 200 OK
Date: Wed, 08 Jan 2003 06:52:30 GMT
Server: Apache/1.3.19 (Unix) (Red-Hat/Linux) mod_ssl/2.8.1 OpenSSL/0.9.6 DAV/1.0.2 PHP/4.0.4pl1 mod_perl/1.24_01

[...]

• nocon

  ---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Wed Jan 8 20:34:36 2003