[bopm] False positive?

Erik Fears strtok at strtok.net
Wed Mar 29 16:44:02 UTC 2006


> [Mar 28 16:21:57 2006] SCAN -> OPEN PROXY
> Titiz!VilainZ at AMarseille-151-1-13-148.w82-122.abo.wanadoo.fr
> 82.122.204.148:1080 (SOCKS4) [default]

^^ This -ONLY- occurs if bopm reads the target stream from 82.122.204.148 1080. My guess is that this proxy is very very broken and sometimes allows this. The second scan ends prematurely after reading 39 bytes; this is probably the proxy denying the bopm access on the second run.

-erik 


More information about the bopm mailing list