Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Re: HTTP worm?
Aug 30 2007 01:04PM
bugtraq shadowstorm com
The incoming packets have a source port of 80 and a destination port ranging between 1000 and 2000. If you connect to port 80 on the IP sending the packets and issue the "HEAD" command you'll notice almost all of them will show the following;
lynx -head -dump http://18.104.22.168
[ more ]
Copyright 2010, SecurityFocus