Re: fswserv.html ????
From: dev (dspezialie-NOSPAM@optusnet.com.au)
Date: 12/17/02
- Previous message: Pricher Jeffrey Contr AFCA/GCF: "FW: Lioten Worm 135-139 and 445"
- In reply to: James-lists: "fswserv.html ????"
- Next in thread: Adam Bultman: "Re: fswserv.html ????"
- Reply: Adam Bultman: "Re: fswserv.html ????"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 17 Dec 2002 09:40:32 +1000 From: dev <dspezialie-NOSPAM@optusnet.com.au> To: James-lists <hackerwacker@cybermesa.com>
James,
I haven't seen anything like this before but have you thought about
contacting the Tech for that CIDR or 'abuse@rr.com'. Other than that
try killing the connections with a firewall rule or Apache ACL, or
create a empty page so the client can request it and see if it will go
away after a successfull get request. Whois details below.
D. :)
[whois.arin.net]
OrgName: Road Runner
OrgID: RRMA
NetRange: 24.160.0.0 - 24.170.127.255
CIDR: 24.160.0.0/13, 24.168.0.0/15, 24.170.0.0/17
NetName: ROAD-RUNNER-5
NetHandle: NET-24-160-0-0-1
Parent: NET-24-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:
RegDate: 2000-06-09
Updated: 2002-08-22
TechHandle: ZS30-ARIN
TechName: ServiceCo LLC
TechPhone: +1-703-345-3416
TechEmail: abuse@rr.com
OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: +1-703-345-3416
OrgTechEmail: abuse@rr.com
OrgTechHandle: IPCON-ARIN
OrgTechName: IPControl
OrgTechPhone: +1-703-345-3416
OrgTechEmail: tconley@va.rr.com
OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com
# ARIN Whois database, last updated 2002-12-15 20:00
# Enter ? for additional hints on searching ARIN's Whois database.
James-lists wrote:
> [Mon Dec 16 15:46:54 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
> [Mon Dec 16 15:46:55 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
> [Mon Dec 16 15:46:55 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
> [Mon Dec 16 15:46:55 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
> [Mon Dec 16 15:46:56 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
> [Mon Dec 16 15:46:56 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
> [Mon Dec 16 15:46:57 2002] [error] [client 24.165.183.118]
> File does not exist:
> /var/www/docs/client/config/fswserv.html
>
> Does anyone know what fswserv.html is ? Google does not
> return anything. System is BSDi and there have been coming
> in
> all day at this rate (2 a sec).
>
> James Edwards
> jamesh@cybermesa.com
> At the Santa Fe Office: Internet at Cyber Mesa
> Store hours: 9-6 Monday through Friday
> Phone support 365 days till 10 pm via the Santa Fe office:
> 505-988-9200
>
>
>
>
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
- Next message: OBrien, Brennan: "RE: Worm on 445/tcp?"
- Previous message: Pricher Jeffrey Contr AFCA/GCF: "FW: Lioten Worm 135-139 and 445"
- In reply to: James-lists: "fswserv.html ????"
- Next in thread: Adam Bultman: "Re: fswserv.html ????"
- Reply: Adam Bultman: "Re: fswserv.html ????"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
