Web Servers on Unix and Linux - Strange entry in Apache LOG

This is Interesting: Free IT Magazines  
Home > Archive > Web Servers on Unix and Linux > March 2005 > Strange entry in Apache LOG





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Strange entry in Apache LOG
stefanPL

2005-03-01, 8:47 pm

I found this strange entry in my Apache log, can anyone expain it to
me and tell me is it dangerous and how can I secure against it?

61.31.158.236 - - [28/Feb/2005:22:39:29 +0100] "CONNECT
news98.idv.tw:25 HTTP/1.0" 200 3853 "-" "-"

I guess someone is trying to use my computer as a mail server, but I
don't have mail server installed. Maybe there is a Windows XP hole that
makes it possible to use Win XP as a mail server remotely or sth like
that.

My computer is visible on the Internet on port 80 (www), I use it to
test my web pages and show them to other testers so I need externeal
(static) IP number.
My Apache 1.3.33 also has php 4.3.9 support
I checked this also with Apache 2.0.53 and it is the same

in both my Apaches proxy modules are disabled (commented in conf file)
system is Windows XP

Please advise
Chris

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com