[nsp-sec] ACK AS44038 - Open proxy reports

[Smith, Donald]

I did netflow for the one 209 ip reported and didn't see any proxy traffic (destination port 80 from the proxy).
This ip is a webserver but I didn't see anything that looked like proxied traffic to me.

Still appreciate the headsup Jussi!


Sharing: Author's permission required.
Donald.Smith at qwest.com


> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-
> bounces at puck.nether.net] On Behalf Of Jan Boogman
> Sent: Friday, July 08, 2011 2:58 PM
> To: Jussi Eronen
> Cc: NSP nsp-security
> Subject: Re: [nsp-sec] ACK AS44038 - Open proxy reports
>
> ----------- nsp-security Confidential --------
>
> ACK
>
> Jan
>
> > 44038   | 213.180.164.77   | 80              | BLUEWIN-AS Swisscom
> > (Schweiz) AG
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-
> security
> community. Confidentiality is essential for effective Internet security
> counter-measures.
> _______________________________________________

This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.