[Dshield] Apache Question

Andy Stevko andy.stevko at usa.net
Wed May 11 22:26:19 GMT 2005


It looks like someone is trying to open a SSL tunnel.
as per http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9.9
Good thing your web server is returning a HTTP 405 response.
-Andy

------ Original Message ------
Received: Wed, 11 May 2005 02:22:50 PM PDT
From: Joel Esler <esler at knology.net>
To: General DShield Discussion List <list at lists.dshield.org>
Subject: [Dshield] Apache Question

> Like to get everyone's input on this one:
> 
>  From an apache log..
> 
> 82.96.96.3 - - [10/May/2005:22:52:59 -0400] "POST 
> http://82.96.96.3:802/ HTTP/1.0" 200 55296 "-" "-"
> 82.96.96.3 - - [10/May/2005:22:52:59 -0400] "CONNECT 82.96.96.3:802 
> HTTP/1.0" 405 329 "-" "-"
> 
> What do we make of this?
> 
> Joel
> 
> -------------- Sponsor Message ------------------------------------
> Join us at SANSFIRE 2005 in Atlanta!
> The Internet Storm Center Conference.
> Details: http://www.sans.org/sansfire2005
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
> 



-------------------------------------------------------
       Andy Stevko mailto:andy.stevko at usa.net
       -------------------------------------------------------
       "If you are not living on the edge, you are taking up too much space."






More information about the list mailing list