Re: logwatch reports "connection attempts using mod_proxy"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2005-07-04 at 10:23 -0400, Matt Morgan wrote:
> The httpd section of my logwatch reports:
> 
> Connection attempts using mod_proxy:
>    141.155.241.10 -> 1.3.3.7:1337 : 2 Time(s)
> 
> I have no idea what this means, and the message is resistant to my
> attempts to google it (or find it in the list archives). Any hints?
> Neither IP address bears any relation to the server reporting the
> connection attempt.

See Here -> http://httpd.apache.org/docs/mod/mod_proxy.html

Basically apache can also act as a proxy and they're searching for an
open proxy to connect to. 

> 
> I can't help noticing that the port (1337) spells "leet," i.e.,
> "elite," in script-kiddie nerdspeak. So I'm guessing it's some kind of
> bug exploit, but I don't know this one.
> 
> Thanks,
> Matt
> 

-- 
Ow Mun Heng
Gentoo/Linux on DELL D600 1.4Ghz 1.5GB RAM
98% Microsoft(tm) Free!! 
Neuromancer 22:25:42 up 2:13, 5 users, load average: 2.45, 1.80, 1.59 



[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux