[Dshield] Apache Question

Roland Green rgreen at plannedbuy.com
Wed May 11 21:28:25 GMT 2005


Looks like some one set your webserver/port in their browser http proxy 
settings.  Either that or someone has written a script to see if you are 
using a proxy server.  What there actual intentions are, who knows that 
part is all noise.

Joel Esler wrote:

> Like to get everyone's input on this one:
>
> From an apache log..
>
> 82.96.96.3 - - [10/May/2005:22:52:59 -0400] "POST 
> http://82.96.96.3:802/ HTTP/1.0" 200 55296 "-" "-"
> 82.96.96.3 - - [10/May/2005:22:52:59 -0400] "CONNECT 82.96.96.3:802 
> HTTP/1.0" 405 329 "-" "-"
>
> What do we make of this?
>
> Joel
>
> -------------- Sponsor Message ------------------------------------
> Join us at SANSFIRE 2005 in Atlanta!
> The Internet Storm Center Conference.
> Details: http://www.sans.org/sansfire2005
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list