Welcome to WebmasterWorld Guest from 54.163.115.193

Forum Moderators: Ocean10000 & incrediBILL

CONNECT xxx.xxx.xxx.xxx?

   
8:07 pm on Dec 9, 2002 (gmt 0)

10+ Year Member



Hello, anyone seen this behaviour?

67.114.220.145 - - [09/Dec/2002:00:34:30 +0100] "CONNECT 207.46.181.13:25 HTTP/1.1" 400 307 "-" "-"

And I got 116 other lines vaguely similar.

Ideas?

8:15 pm on Dec 9, 2002 (gmt 0)

WebmasterWorld Senior Member jeremy_goodrich is a WebmasterWorld Top Contributor of All Time 10+ Year Member



Appears to be a bot programmed to look for open proxies.
8:27 pm on Dec 9, 2002 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Normally they would just use a GET if they were after open proxies, I'd expect to see a CONNECT used to check if the service allows connections on user-defined ports to be bounced through it.

Since CONNECT is normally disabled or unsupported if they got a good result then they could come back and do a more thorough test.

- Tony

10:04 pm on Dec 9, 2002 (gmt 0)

10+ Year Member



so otherwise put, its ok to ban the ips

Skirril..

 

Featured Threads

My Threads

Hot Threads This Week

Hot Threads This Month