Click to See Complete Forum and Search --> : odd message in apache log


Gaccm
03-31-2001, 07:48 PM
i was looking thru my access.log and i see a bunch of "GET / HTTP/1.1" and "GET /games.html HTTP/1.1" (normal) but there is one line: "GET http://www.intel.com/ HTTP/1.1"
was the browser trying to access intel.com thru my webserver? or was it just that they typed www.intel.com (http://www.intel.com) and a buggy browser sent the packet to me (the current connection)? whats really odd, is that is the only line from that ip address.

[ 01 April 2001: Message edited by: Gaccm ]

Golden_Eternity
04-01-2001, 04:34 AM
This was probably someone looking for a web server that is (mis)configured to act as an open relay.

I believe there was some recent discussion of this on the securityfocus "incidents" mailing list recently.

John_Doh
04-02-2001, 08:33 AM
Probably someone scanning for open proxy servers.