[Scottish] Checked your proxy lately?

andrew white andrew.white at darknet.demon.co.uk
Sun Jan 9 05:42:37 UTC 2011


On 01/07/2011 11:02 PM, Colin McKinnon wrote:
> Hi all,
> 
> While I'm sure you've all got your systems setup securely, I've noticed that 
> recently there is more noise in my logs from HTTP proxy requests than I get 
> for ssh attacks. AFAIK, I'm not running an open proxy. 
> 
> The origin of these requests are primarily China. Do I nned to spell out the 
> risks here?
> 
<snip snip>


I get crap loads of these in apache. I guess most of them are checking
scripts to see if its open.

I moved my ssh server off the standard port to get rid of the constant
poking it got and that simply killed all the noise.



More information about the Scottish mailing list