Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What are these CONNECT messages in my log?

Tags:

http

django

I'm playing around with a free AWS EC2 instance and django.

I accidentally left my development server running overnight (on port 8080). This morning, the connection log shows a few messages like this:

# Me
[16/Aug/2012 19:16:09] "GET /static/img/banner-1.jpg HTTP/1.1" 200 68263
[16/Aug/2012 19:16:09] "GET /static/img/footer.png HTTP/1.1" 200 4261
[16/Aug/2012 19:16:09] "GET /static/img/favicon.ico HTTP/1.1" 200 1150
# Not me
[17/Aug/2012 01:33:59] "GET http://www.baidu.com/ HTTP/1.1" 404 1717
[17/Aug/2012 04:13:29] "GET http://www.google.com/search?hl=en&tbs=qdr:d&prmd=imvns&filter=0&lr=&as_epq=%KEYWORD% HTTP/1.1" 404 1815
[17/Aug/2012 04:13:30] "CONNECT www.google.com:443 HTTP/1.0" 404 1784

What are these messages?

like image 697
fredley Avatar asked Aug 17 '12 10:08

fredley


People also ask

How do you connect messages on Android?

Device Pairing. On your computer, open Messages for web in a browser, like Chrome or Safari. Settings and toggle on Remember this device after you log in. Using your phone, tap Scan QR code and hold your phone up to the QR code on the web page. When it's ready, your phone will vibrate.

Can someone read my text messages from their phone?

Yes, it's definitely possible for someone to spy on your text messages and it's certainly something you should be aware of – this is a potential way for a hacker to gain a lot of private information about you – including accessing PIN codes sent by websites used to verify your identity (such as online banking).

What does message log mean?

Message Log means a complete record of the Messages sent and received by the Intermediary, either in computer readable or hard copy format; Sample 1Sample 2Sample 3. Based on 3 documents.

What does connected to messages for web mean?

"Messages for web" is the latest messaging service. Similar to Apple's iCloud messaging, it synchronizes with the SMS Messages app on your Android phone, allowing you to send and receive text messages in any browser – even on your desktop PC.


1 Answers

Port 8080 is frequently used for http proxy servers. Some bot that found your development server tried to use it as a normal proxy (the first two GET commands), then as a transparent proxy for https (which is initiated by sending HTTP CONNECT and also explains why it was connecting to google port 443). It was testing to see if your server was an open proxy because open proxies can be used for all sorts of nefarious purposes.

like image 50
dgel Avatar answered Sep 21 '22 14:09

dgel