log connect

Virtualmin
1

Hi guys I have just found this in the logs for one of my sites. Can anyone give me some idea what it means and what, if anything needs to be done to stop it?

Thanks
Allan

89.238.192.238 - - [01/Aug/2010:07:40:24 +0800] “CONNECT 205.188.251.1:443 HTTP/1.0” 405 438 “-” “-”
89.238.192.238 - - [01/Aug/2010:08:35:06 +0800] “CONNECT 205.188.251.11:443 HTTP/1.0” 405 439 “-” “-”
89.238.192.238 - - [01/Aug/2010:09:29:14 +0800] “CONNECT 205.188.251.16:443 HTTP/1.0” 405 439 “-” “-”
89.238.192.238 - - [01/Aug/2010:10:24:01 +0800] “CONNECT 205.188.251.21:443 HTTP/1.0” 405 439 “-” “-”
89.238.192.238 - - [01/Aug/2010:11:18:29 +0800] “CONNECT 205.188.251.26:443 HTTP/1.0” 405 439 “-” “-”

2

Howdy,

Well, the “405” status code at the end of those lines suggests that whatever it is, it was disallowed by Apache.

So, while I’m not entirely certain what it is, whatever it was wasn’t successful. With that in mind, I don’t think I’d do anything differently on your system, it looks like the Apache security is working properly.

-Eric

3

Thanks Eric
I thought it looked like it was taken care of, but it is always best to ask. If any one has any further ideas I would be interested.

thanks
Allan