OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: strange HTTP requests

From: Javier Fernandez-Sanguino (jfernandezgerminus.com)
Date: Tue Sep 16 2003 - 04:27:35 CDT

Bill Carlson wrote:
> Hey all,
>
> I've been seeing a lot of server requests for the last several months,
> they look like this:
>
> GET / HTTP/1.1
> Host: vh.org
> Cache-Control: no-cache
>
>
(...)

> Anyone seen anything similiar or have an idea what's behind the traffic?

(wild guess)
Wouldn't that be a set of hosts trying to determine wether or not your
web server is setup as a(n) (anonymous) proxy?

Regards

Javi

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event. Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------