Forum Moderators: open

Message Too Old, No Replies

I Can't ID this one

209.15.170.xxx

         

bobriggs

1:40 pm on May 18, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



209.15.170.90 or
209.15.170.71 ....

It has come by every morning, always between 2:10 and 2:26 am. Only grabs the index page, never fetches robots.txt.

I can only trace it to communitech.net, a hosting service. But I'm not using communitech.

littleman

4:27 pm on May 18, 2001 (gmt 0)



net1-vlan1-sup1.KCY.hosting4u.net is the last hop before hitting the box on a traceroute.
It looks like both IPs are coming out of the same box. It is a linux box running mysql. It has telnet and ssh open, but no http server running. There's not much out there on it.

toolman

4:38 pm on May 18, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



little are you using nmap or queso?

littleman

5:48 pm on May 18, 2001 (gmt 0)



The OS ID will work with queso but you have to hit the right port -- nmap was used for the port scan.

toolman

6:09 pm on May 18, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



You'll have to teach me more someday. I have nmap and when I run some of the functions it locks up my router. I would like to learn more about the functions it does.