Tilted Forum Project Discussion Community - View Single Post

Realizm · 12-11-2003, 03:37 PM

Windows XP Pro SP 1 Including all available patches on windowsupdate
Port used for server: 80

I am very new to servers, but have been setting up and working on learning/running Apache 2 web server.

Today in the logs I had some weird connections which I'll show below.

The ones I'm most wierded out by are the "1.3.3.7:1337" connections. I know this isn't a random grouping of numbers (leet) so it makes me wonder if there is a possibility that someone could have done some bad things on my server? I can't understand the status codes (405, 235, 200, 489)

Thanks for your assistance:

67.20.204.16 - - [11/Dec/2003:09:16:51 -0600] "CONNECT 1.3.3.7:1337 HTTP/1.0" 405 235

209.218.69.253 - - [09/Dec/2003:20:59:02 -0600] "CONNECT 209.218.69.253:802 HTTP/1.0" 405 235
209.218.69.253 - - [09/Dec/2003:20:59:02 -0600] "POST http://209.218.69.253:802/ HTTP/1.0" 200 489

62.49.122.2 - - [11/Dec/2003:16:41:22 -0600] "CONNECT 1.3.3.7:1337 HTTP/1.0" 405 235

216.194.70.12 - - [11/Dec/2003:12:00:32 -0600] "CONNECT 216.194.70.6:6000 HTTP/1.0" 405 235
216.194.70.12 - - [11/Dec/2003:12:00:32 -0600] "POST http://216.194.70.6:6000/ HTTP/1.0" 200 489
62.49.122.2 - - [11/Dec/2003:16:41:22 -0600] "CONNECT 1.3.3.7:1337 HTTP/1.0" 405 23

12-11-2003, 03:37 PM	#1 (permalink)
Realizm Insane Location: A fuzzy cloud.	Odd entries in my Apache logs... Windows XP Pro SP 1 Including all available patches on windowsupdate Port used for server: 80 I am very new to servers, but have been setting up and working on learning/running Apache 2 web server. Today in the logs I had some weird connections which I'll show below. The ones I'm most wierded out by are the "1.3.3.7:1337" connections. I know this isn't a random grouping of numbers (leet) so it makes me wonder if there is a possibility that someone could have done some bad things on my server? I can't understand the status codes (405, 235, 200, 489) Thanks for your assistance: 67.20.204.16 - - [11/Dec/2003:09:16:51 -0600] "CONNECT 1.3.3.7:1337 HTTP/1.0" 405 235 209.218.69.253 - - [09/Dec/2003:20:59:02 -0600] "CONNECT 209.218.69.253:802 HTTP/1.0" 405 235 209.218.69.253 - - [09/Dec/2003:20:59:02 -0600] "POST http://209.218.69.253:802/ HTTP/1.0" 200 489 62.49.122.2 - - [11/Dec/2003:16:41:22 -0600] "CONNECT 1.3.3.7:1337 HTTP/1.0" 405 235 216.194.70.12 - - [11/Dec/2003:12:00:32 -0600] "CONNECT 216.194.70.6:6000 HTTP/1.0" 405 235 216.194.70.12 - - [11/Dec/2003:12:00:32 -0600] "POST http://216.194.70.6:6000/ HTTP/1.0" 200 489 62.49.122.2 - - [11/Dec/2003:16:41:22 -0600] "CONNECT 1.3.3.7:1337 HTTP/1.0" 405 23 Last edited by Realizm; 12-11-2003 at 03:44 PM..