homepage Welcome to WebmasterWorld Guest from 54.204.94.228
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

    
CONNECT xxx.xxx.xxx.xxx?
skirril




msg:408336
 8:07 pm on Dec 9, 2002 (gmt 0)

Hello, anyone seen this behaviour?

67.114.220.145 - - [09/Dec/2002:00:34:30 +0100] "CONNECT 207.46.181.13:25 HTTP/1.1" 400 307 "-" "-"

And I got 116 other lines vaguely similar.

Ideas?

 

jeremy goodrich




msg:408337
 8:15 pm on Dec 9, 2002 (gmt 0)

Appears to be a bot programmed to look for open proxies.

Dreamquick




msg:408338
 8:27 pm on Dec 9, 2002 (gmt 0)

Normally they would just use a GET if they were after open proxies, I'd expect to see a CONNECT used to check if the service allows connections on user-defined ports to be bounced through it.

Since CONNECT is normally disabled or unsupported if they got a good result then they could come back and do a more thorough test.

- Tony

skirril




msg:408339
 10:04 pm on Dec 9, 2002 (gmt 0)

so otherwise put, its ok to ban the ips

Skirril..

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved