Re: [Full-disclosure] Signature for new bot?



On 28/10/06 09:31 -0700, Line Noise wrote:
I recognize that there has been an upswing in spam, and that a large
part of this is botnets. I have also heard of a few people seeing
entries such as the following in their logs.

POST http://mtrap.freenet.de:25 HTTP/1.0 with response code(s) 200

Is this familiar? I don't (yet) know of a tool that might cause this

Ancient. Just spammers looking for open HTTP proxies.

Devdas Bhagat

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • Re: Odd semi-crash or hang
    ... More details after reboot. ... Cannot find anything specific in logs, ... are some odd entries earlier this morning, ... Trying to reach it through remote desktop, ...
    (microsoft.public.windows.server.sbs)
  • Re: Determine When a User Logged In
    ... The Run entries in HKLM are executed for every user that logs in, ... Special privileges assigned to new logon: ...
    (microsoft.public.vb.general.discussion)
  • Re: Help with a shell script
    ... > I have about a years worth of text logs that have the following format: ... > I need to change the entries in the file to be semicolon separated. ... So your sed command file will look something like this, ...
    (comp.unix.shell)
  • Re: my log files-is there any problem
    ... >I am little concerned with these 2 means are these the normal entries ... >root 313 times isn't it too much. ... For the sendmail logs, nothing much to worry as a relaying attempt was ...
    (Fedora)
  • Re: slow slow windows start up
    ... No errorshould exist in either System or the Application logs. ... There will always be Informational type entries, ... It has the same layout as Windows ... >> time Left Click System Then look in the Right Pane ...
    (microsoft.public.windowsxp.general)