homepage Welcome to WebmasterWorld Guest from 107.21.186.38
register, login, search, subscribe, help, library, PubCon, announcements, recent posts, open posts,
Pubcon Platinum Sponsor
Visit PubCon.com
Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library : Charter : Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

    
CONNECT xxx.xxx.xxx.xxx?
skirril




msg:408336
 8:07 pm on Dec 9, 2002 (gmt 0)

Hello, anyone seen this behaviour?

67.114.220.145 - - [09/Dec/2002:00:34:30 +0100] "CONNECT 207.46.181.13:25 HTTP/1.1" 400 307 "-" "-"

And I got 116 other lines vaguely similar.

Ideas?

 

jeremy goodrich




msg:408337
 8:15 pm on Dec 9, 2002 (gmt 0)

Appears to be a bot programmed to look for open proxies.

Dreamquick




msg:408338
 8:27 pm on Dec 9, 2002 (gmt 0)

Normally they would just use a GET if they were after open proxies, I'd expect to see a CONNECT used to check if the service allows connections on user-defined ports to be bounced through it.

Since CONNECT is normally disabled or unsupported if they got a good result then they could come back and do a more thorough test.

- Tony

skirril




msg:408339
 10:04 pm on Dec 9, 2002 (gmt 0)

so otherwise put, its ok to ban the ips

Skirril..

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About
WebmasterWorld ® and PubCon ® are a Registered Trademarks of Pubcon Inc.
© Pubcon Inc. 1996-2012 all rights reserved