Security Incidents mailing list archives

HTTP CONNECT attempts


From: "Dmitri Smirnov" <Dmitri.Smirnov () roundheaven com>
Date: Tue, 16 Apr 2002 11:36:08 -0700

Morning,

need an advice. I've got more them 20 "HTTP CONNECT" IDS alerts (BugTraq id 4131) 
from 3 diff. sources for today and yesterday. Looks like some tool is out and people started to use it.
The only problem is: I don't understand why people are trying to use port 80 to connect to port 443 (which is usually 
open
to a world in my case).

Dmitri Smirnov, SSCP
Security Team


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


Current thread: