full-disclosure - Odd logs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1054750540.383.83.camel@peterjm>
From: peter at ucsc.edu (peter moody)
Subject: Odd logs

The connect method can be used to turn a web server into an open proxy.

open proxies are the new open relays.  If the connect method had
succeeded, I can guarantee that your web server would be getting used to
spam right now.

-Peter

On Wed, 2003-06-04 at 09:31, Mark wrote:
> The exert from my log files which had the same (but cant say it caused
> me
> any concern)
> 
> dhpp.csudh.edu - - [01/Jun/2003:21:27:08 +0100] "CONNECT 1.3.3.7:1337
> HTTP/1.0" 405 303 "-" "-"
> 
> 
>                          Mark
>                 www.vulndev.org/~mark/
>    If you know yourself, knowing the enemy does not matter.
>                 -- Sun Tzu - The Art of War
>                         (Adapted)
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-- 
Peter Moody                             <peter@...c.edu>
InfoSec Administrator                   831/459.5409
Communications and Technology Services. http://mustard.ucsc.edu/pubkey
UC, Santa Cruz.
:wq
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030604/148dd469/attachment.bin