Incidents
strange http get requests in apache access logs Oct 13 2006 10:57AM
rowland onobrauche (rowland onobrauche legendplc com) (1 replies)
Re: strange http get requests in apache access logs Oct 13 2006 04:37PM
Rainer Duffner (rainer ultra-secure de)
rowland onobrauche wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi all.
>
> Im getting logs such as
>
> "GET http://www.escorts-etc.com/cgi-bin/ftop100/rankem.cgi?id=gagvault
> HTTP/1.0" 200 147 "http://www.gagvault.com/linkspage.html"
> "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
>
> In some of my httpd access logs, even though this type of site is not
> existant on the server.
> Anyone seen this before??
>

Checks for an open proxy.
Nothing unusual - just make sure you don't actually have an open proxy
running.

Rainer

------------------------------------------------------------------------
------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------
------

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus