httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joseph Loegering" <Jos...@loegering.net>
Subject Re: [users@httpd] weird connections
Date Mon, 28 Apr 2003 22:11:08 GMT

----- Original Message ----- 
From: "David Jobes" <djobes@xscanners.org>
To: <users@httpd.apache.org>
Sent: Monday, April 28, 2003 3:43 PM
Subject: [users@httpd] weird connections


> im getting bombarded by these connection in my logs, any ideas
>
> 69.11.200.37 - - [28/Apr/2003:15:42:05 +0000] "CONNECT 152.163.224.122:25
> HTTP/1.0" 200 6178
>
>
> about 1000 and counting
>
> --------------------------------------
> David Jobes - CISSP
> Web:       http://www.xscanners.org
> yahooid:   davidjobes31770
> aimid:     aggrogade
> email:     djobes@xscanners.org
>
That looks like a third party attempt to use your port 25 e-mail smtp, if
you have one. Recently I had the same type of entries in my log, and someone
had a bulk e-mail program that uploaded 250,000 e-mails to my server for
delivery. I stopped the entries by taking their IP addresses and adding them
to a space seperated list to the server docs.

    Order allow,deny
    Allow from all
    Deny from 152.163.224.122 153.166.264.162 etc.
Joseph




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message