Darksat IT Security Forums
January 13, 2026, 12:16:35 pm
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Darksat IT Security Forum
From Firewall Support, AntiVirus Questions, Spyware problems, Linux and Windows Security, Black Hat SEO right down to Website Design and Multimedia
 
  Home Help Search Gallery Links Staff List Login Register  

Weird request in my server log

Pages: [1] 2 3 4 ... 21
  Print  
Author Topic: Weird request in my server log  (Read 5785 times)
Darksat
Administrator
Master
*******
Posts: 3303



View Profile WWW
« on: November 16, 2007, 06:22:13 pm »


I think it was a probe.
As far as I can see they managed to punch a hole in the hamiltonjones system and were/are connecting that to the second server which lies at the other side of the chinese firewall.
Eg Superoureland.org is hosted from a server in a chinese city of Taiyuan near Beijing and hamiltonjones is located in the US.
Thats your tunnel out right there, im guessing once they got out they stated looking for another system to run a connection through in case the first one got discovered, which is why they were looking for open SSH connections, the get google request was simply them seing if they could establish another connection through your machine.
Remember, they cant run port scans from inside the firewall so they will have to use the first tunnel to establish secondary connections.
« Last Edit: November 16, 2007, 06:25:29 pm by Darksat » Report Spam   Logged

Pages: [1] 2 3 4 ... 21
  Print  
 
Jump to:  

Powered by EzPortal
eXTReMe Tracker
Security Forum
Bookmark this site! | Upgrade This Forum
SMF For Free - Create your own Forum


Powered by SMF | SMF © 2016, Simple Machines
Privacy Policy
Page created in 0.026 seconds with 10 queries.