[Gllug] Puzzled

Richard Jones rich at annexia.org
Fri Sep 26 14:36:43 UTC 2003


On Fri, Sep 26, 2003 at 02:18:15PM +0100, Adrian McMenamin wrote:
> No sign of a referrer, but interestingly they appear to be all Win 98 boxes 
> running IE 5.5!

Strange. Could it be a worm infestation looking for an IIS
installation to infect?

I tried connecting to port 80 on a few of the IP addresses listed to
see if they were running IIS, but the results were inconclusive (only
1 running IIS, 1 running Kazaa).  Many of the IPs seem to be
unavailable, probably because they are dynamically allocated DSL.

Rich.

-- 
Richard Jones. http://www.annexia.org/ http://freshmeat.net/users/rwmj
Merjis Ltd. http://www.merjis.com/ - all your business data are belong to you.
"My karma ran over your dogma"

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list