Re: Are these hack attempts through server?
From: Henke (hej@hej.com)
Date: 04/23/03
- Next message: S. Pidgorny [MVP]: "Re: autenticate a user with a certificate"
- Previous message: Martin Davies: "Passport/hotmail sign -in"
- In reply to: Karl Levinson [x y], mvp: "Re: Are these hack attempts through server?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Henke" <hej@hej.com> Date: Wed, 23 Apr 2003 02:09:46 -0700
Yeah, that is a Apache & PHP problem.
>-----Original Message-----
>If you're running proxy services, you probably have a lot
of security issues
>on your computer. There are a number of security How
To's and automated
>scripts you might consider running. Also, sounds like
you may need to
>enable your firewall, install patches, etc. Linux or ANY
operating system
>with the default settings can still be pretty dangerous
to your files.
>
>
>"S. Pidgorny [MVP]" <slavickp@yahoo.com> wrote in message
>news:ev9xYBZADHA.2376@TK2MSFTNGP10.phx.gbl...
>> The server is used as a launch pad for other TCP-based
connections - and
>> CONNECT is successful! Remove HTTP proxy function from
Apache, use
>iptables
>> or another firewall to restrict access, use
authentication.
>>
>> --
>> Svyatoslav Pidgorny, MS MVP, MCSE
>> -= F1 is the key =-
>>
>> "Diane C." <nospam@juno.com> wrote in message
>> news:049701c300ef$72d1ed50$a401280a@phx.gbl...
>> > I have noticed these odd proxy scans in my "access
logs"
>> > listed below. I am on Linux with Apache. This morning
I
>> > banned their IP ranges in my .htaccess file mostly
due to
>> > the quanity of the hits. All of these are directed
>> > at "Microsoft's Servers". Should I notify Microsoft of
>> > this? And if so, to whom do I contact?
>> > Thanks,
>> > Diane
>> >
>> >
>> > 217.21.114.155 - - [12/Apr/2003:02:51:21 -0400] "\x04
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.155 - - [12/Apr/2003:02:51:41 -0400] "\x05
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.155 - - [12/Apr/2003:02:51:43 -
0400] "CONNECT
>> > 207.46.181.13:25 HTTP/1.1" 200 14393 "-" "-"
>> >
>> > 217.21.114.155 - - [10/Apr/2003:08:39:45 -0400] "\x04
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.155 - - [10/Apr/2003:08:40:05 -0400] "\x05
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.155 - - [10/Apr/2003:08:40:08 -
0400] "CONNECT
>> > 207.46.181.13:25 HTTP/1.1" 200 21693 "-" "-"
>> >
>> > 217.21.114.137 - - [08/Apr/2003:09:43:49 -0400] "\x04
>> > \x01" 500 - "-" "-"
>> > 217.21.114.137 - - [08/Apr/2003:09:44:09 -0400] "\x05
>> > \x01" 500 - "-" "-"
>> > 217.21.114.137 - - [08/Apr/2003:09:44:13 -
0400] "CONNECT
>> > 207.46.181.13:25 HTTP/1.1" 500 544 "-" "-"
>> >
>> > 217.21.114.152 - - [07/Apr/2003:06:53:10 -0400] "\x04
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.152 - - [07/Apr/2003:06:53:28 -0400] "\x05
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.152 - - [07/Apr/2003:06:53:31 -
0400] "CONNECT
>> > 207.46.181.13:25 HTTP/1.1" 200 21693 "-" "-"
>> >
>> > 217.21.114.143 - - [01/Apr/2003:03:23:22 -0500] "\x04
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.143 - - [01/Apr/2003:03:23:43 -0500] "\x05
>> > \x01" 200 14600 "-" "-"
>> > 217.21.114.143 - - [01/Apr/2003:03:23:46 -
0500] "CONNECT
>> > 207.46.181.13:25 HTTP/1.1" 200 21693 "-" "-"
>> >
>> > 207.215.127.248 - - [14/Feb/2003:17:22:01 -
0500] "CONNECT
>> > maila.microsoft.com:25 HTTP/1.0" 200 14402 "-" "-"
>> > 207.215.127.248 - - [14/Feb/2003:17:22:02 -
0500] "CONNECT
>> > maila.microsoft.com:25 HTTP/1.0" 200 14402 "-" "-"
>> > 207.215.127.248 - - [14/Feb/2003:17:22:04 -
0500] "CONNECT
>> > maila.microsoft.com:25 HTTP/1.0" 200 14402 "-" "-"
>> >
>>
>>
>
>
>.
>
- Next message: S. Pidgorny [MVP]: "Re: autenticate a user with a certificate"
- Previous message: Martin Davies: "Passport/hotmail sign -in"
- In reply to: Karl Levinson [x y], mvp: "Re: Are these hack attempts through server?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
