Security Basics mailing list archives

Re: Odd log messages

From: Devdas Bhagat <devdas () dvb homelinux org>
Date: Tue, 4 Mar 2003 08:14:46 +0530

On 27/02/03 14:02 -0500, Allan Schon wrote:

I saw something in my Apache access log that I don't know how to interpret.  
Can anyone let me know what the following means?

the.guys.hostname - - [26/Feb/2003:22:59:49 -0500] "\x04\x01" 501 -
the.guys.hostname - - [26/Feb/2003:23:00:11 -0500] "\x05\x01" 501 -
the.guys.hostname - - [26/Feb/2003:23:00:13 -0500] "CONNECT 207.46.181.13:25 HTTP/1.1" 405 321

This is someone trying to use your Apache installation as a proxy to
relay spam.
The 405 error means that it has not gone through.

Devdas Bhagat

Current thread:

Odd log messages Allan Schon (Mar 03)
- Re: Odd log messages Devdas Bhagat (Mar 04)