Burp community forum

Collaborator Log Messages

John | Last updated: Aug 05, 2015 06:20PM UTC

We are testing a private collaboration server that is exposed to the Internet. When I came back from lunch I saw this in the console: 2015-08-05 12:40:12.508 : Request received: 9869010000010000000000010233340233300234360332303707696E2D6164647204617270610000FF0001000029FFFF000000000000 2015-08-05 12:40:12.513 : Sending response: 2015-08-05 12:40:12.514 : 9869810500010000000000000233340233300234360332303707696E2D6164647204617270610000FF0001 Is this a polling check or did someone find the server on the Internet and start probing it? (Monitoring not setup yet) Thanks

PortSwigger Agent | Last updated: Aug 10, 2015 08:27AM UTC

This logging output is disabled by default, so I assume you enabled it via your configuration file. It looks like these log entries were generated because your server received a DNS query, so it is in the "interaction" category rather than the "polling" category. It might be that someone has come across your server. Alternatively, if you have configured your domain name's DNS server with your registrar, then they or someone else might have performed a lookup as a result.

Burp User | Last updated: Aug 14, 2015 03:06PM UTC

Thanks

You need to Log in to post a reply. Or register here, for free.