Re: fswserv.html ????

From: dev (dspezialie-NOSPAM@optusnet.com.au)
Date: 12/17/02

  • Next message: OBrien, Brennan: "RE: Worm on 445/tcp?"
    Date: Tue, 17 Dec 2002 09:40:32 +1000
    From: dev <dspezialie-NOSPAM@optusnet.com.au>
    To: James-lists <hackerwacker@cybermesa.com>
    
    

    James,

    I haven't seen anything like this before but have you thought about
    contacting the Tech for that CIDR or 'abuse@rr.com'. Other than that
    try killing the connections with a firewall rule or Apache ACL, or
    create a empty page so the client can request it and see if it will go
    away after a successfull get request. Whois details below.

    D. :)

    [whois.arin.net]

    OrgName: Road Runner
    OrgID: RRMA

    NetRange: 24.160.0.0 - 24.170.127.255
    CIDR: 24.160.0.0/13, 24.168.0.0/15, 24.170.0.0/17
    NetName: ROAD-RUNNER-5
    NetHandle: NET-24-160-0-0-1
    Parent: NET-24-0-0-0-0
    NetType: Direct Allocation
    NameServer: DNS1.RR.COM
    NameServer: DNS2.RR.COM
    NameServer: DNS3.RR.COM
    NameServer: DNS4.RR.COM
    Comment:
    RegDate: 2000-06-09
    Updated: 2002-08-22

    TechHandle: ZS30-ARIN
    TechName: ServiceCo LLC
    TechPhone: +1-703-345-3416
    TechEmail: abuse@rr.com

    OrgTechHandle: IPTEC-ARIN
    OrgTechName: IP Tech
    OrgTechPhone: +1-703-345-3416
    OrgTechEmail: abuse@rr.com

    OrgTechHandle: IPCON-ARIN
    OrgTechName: IPControl
    OrgTechPhone: +1-703-345-3416
    OrgTechEmail: tconley@va.rr.com

    OrgAbuseHandle: ABUSE10-ARIN
    OrgAbuseName: Abuse
    OrgAbusePhone: +1-703-345-3416
    OrgAbuseEmail: abuse@rr.com

    # ARIN Whois database, last updated 2002-12-15 20:00
    # Enter ? for additional hints on searching ARIN's Whois database.

    James-lists wrote:
    > [Mon Dec 16 15:46:54 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    > [Mon Dec 16 15:46:55 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    > [Mon Dec 16 15:46:55 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    > [Mon Dec 16 15:46:55 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    > [Mon Dec 16 15:46:56 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    > [Mon Dec 16 15:46:56 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    > [Mon Dec 16 15:46:57 2002] [error] [client 24.165.183.118]
    > File does not exist:
    > /var/www/docs/client/config/fswserv.html
    >
    > Does anyone know what fswserv.html is ? Google does not
    > return anything. System is BSDi and there have been coming
    > in
    > all day at this rate (2 a sec).
    >
    > James Edwards
    > jamesh@cybermesa.com
    > At the Santa Fe Office: Internet at Cyber Mesa
    > Store hours: 9-6 Monday through Friday
    > Phone support 365 days till 10 pm via the Santa Fe office:
    > 505-988-9200
    >
    >
    >
    >
    >
    >
    > ----------------------------------------------------------------------------
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management
    > and tracking system please see: http://aris.securityfocus.com
    >

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com



    Relevant Pages

    • Re: VampX Family History Revealed
      ... OrgName: Verizon Internet Services Inc. ... NameServer: NS1.BELLATLANTIC.NET ... OrgAbuseHandle: VISAB-ARIN ... OrgTechHandle: ZV20-ARIN ...
      (alt.guitar)
    • Re: [NDC] Cheneys trying to spy on me!
      ... NameServer: F4.NSTLD.COM ... OrgTechHandle: DNSAD52-ARIN ... Felons or not, the fact that they came over the border illegally makes them ... That may be true, but there are all sorts of criminals, some worse ...
      (rec.music.gdead)
    • Re: ping Tedd Jacobs
      ... OrgName: Verizon Internet Services Inc. ... NameServer: NS1.BELLATLANTIC.NET ... OrgAbuseHandle: VISAB-ARIN ... OrgTechHandle: ZV20-ARIN ...
      (rec.aquaria.freshwater.misc)
    • Re: VampX Family History Revealed
      ... OrgName: Verizon Internet Services Inc. ... NameServer: NS1.BELLATLANTIC.NET ... OrgAbuseHandle: VISAB-ARIN ... OrgTechHandle: ZV20-ARIN ...
      (alt.guitar)
    • Re: VampX Family History Revealed
      ... OrgName: Verizon Internet Services Inc. ... NameServer: NS1.BELLATLANTIC.NET ... OrgAbuseHandle: VISAB-ARIN ... OrgTechHandle: ZV20-ARIN ...
      (alt.guitar)