homepage Welcome to WebmasterWorld Guest from 54.166.116.36
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

    
CONNECT xxx.xxx.xxx.xxx?
skirril

10+ Year Member



 
Msg#: 1533 posted 8:07 pm on Dec 9, 2002 (gmt 0)

Hello, anyone seen this behaviour?

67.114.220.145 - - [09/Dec/2002:00:34:30 +0100] "CONNECT 207.46.181.13:25 HTTP/1.1" 400 307 "-" "-"

And I got 116 other lines vaguely similar.

Ideas?

 

jeremy goodrich

WebmasterWorld Senior Member jeremy_goodrich us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 1533 posted 8:15 pm on Dec 9, 2002 (gmt 0)

Appears to be a bot programmed to look for open proxies.

Dreamquick

WebmasterWorld Senior Member 10+ Year Member



 
Msg#: 1533 posted 8:27 pm on Dec 9, 2002 (gmt 0)

Normally they would just use a GET if they were after open proxies, I'd expect to see a CONNECT used to check if the service allows connections on user-defined ports to be bounced through it.

Since CONNECT is normally disabled or unsupported if they got a good result then they could come back and do a more thorough test.

- Tony

skirril

10+ Year Member



 
Msg#: 1533 posted 10:04 pm on Dec 9, 2002 (gmt 0)

so otherwise put, its ok to ban the ips

Skirril..

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved