• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

phishing analysis - help

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Anonymity // Privacy // Spam

View previous topic :: View next topic  
Author Message
browolf
Trusted SF Member
Trusted SF Member


Joined: 19 Apr 2002
Posts: 1


Offline

PostPosted: Sat Dec 03, 2005 4:19 am    Post subject: phishing analysis - help Reply with quote

I've been keeping an eye on a recent deluge my bt account is experiencing of uk banking scams. this started in nov sometime with barclays onces but has now progressed on to halifax and lloyds tsb ones.
these are all ones using port 680 or 780 and the path /rock/


i've noticed, from some i was checking out just now that they all seem to be hosted on
Apache/2.0.46 (CentOS) Server

but error pages from 3 root ips show IIS error pages.
infact netcraft shows
2 winxp
1 server 2003

so they're prob all pre-configured apache uploaded to compromised machines. so why does it mention centOS?
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Anonymity // Privacy // Spam All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register