[Dshield] Is This Depicting a Security Hole in HTTPD?

David Cary Hart DShield at TQMcube.com
Tue Dec 6 17:16:34 GMT 2005


I don't like the look of these log prints. Are these successful attempts
to relay mail through Apache?

59.104.54.157 - - [06/Dec/2005:11:58:09 -0500] "CONNECT 210.200.181.193:25 HTTP/1.0" 200 4702 "-" "-"
59.104.54.157 - - [06/Dec/2005:11:58:30 -0500] "CONNECT 210.200.181.194:25 HTTP/1.0" 200 4702 "-" "-"
59.104.54.157 - - [06/Dec/2005:11:58:34 -0500] "CONNECT 210.200.181.193:25 HTTP/1.0" 200 4702 "-" "-"

-- 
Our DNSRBL - 
       Eliminate Spam: http://www.TQMcube.com/spam_trap.php
        Zombie Graphs: http://www.TQMcube.com/zombies.php
          GeoGraphics: http://www.TQMcube.com/origins.php


More information about the list mailing list