HTTP CONNECT attempts

From: Dmitri Smirnov (Dmitri.Smirnovat_private)
Date: Tue Apr 16 2002 - 11:36:08 PDT

Next message: Jensenne Roculan: "Vacation Troller, Please Ignore."

Previous message: Stephen Friedl: "Re: Strange UDP Activity"
Next in thread: zeno: "Re: HTTP CONNECT attempts"
Reply: Michal Zalewski: "Re: HTTP CONNECT attempts"
Reply: nexus-mailat_private: "Re: HTTP CONNECT attempts"
Reply: Stephen: "Re: HTTP CONNECT attempts"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Morning,

need an advice. I've got more them 20 "HTTP CONNECT" IDS alerts (BugTraq id 4131) 
from 3 diff. sources for today and yesterday. Looks like some tool is out and people started to use it.
The only problem is: I don't understand why people are trying to use port 80 to connect to port 443 (which is usually open
to a world in my case).

Dmitri Smirnov, SSCP
Security Team


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Jensenne Roculan: "Vacation Troller, Please Ignore."
Previous message: Stephen Friedl: "Re: Strange UDP Activity"
Next in thread: zeno: "Re: HTTP CONNECT attempts"
Reply: Michal Zalewski: "Re: HTTP CONNECT attempts"
Reply: nexus-mailat_private: "Re: HTTP CONNECT attempts"
Reply: Stephen: "Re: HTTP CONNECT attempts"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Apr 16 2002 - 13:43:47 PDT