Security Incidents mailing list archives
Re: Unusual entry in Apache logs
From: "Jonathan Adams" <keirre.adams () gmail com>
Date: Thu, 29 May 2008 19:45:38 -0400
Neil, take a look at this: http://www.honeynet.org/scans/scan31/sol/ On Thu, May 29, 2008 at 5:54 PM, Neil Dickey <neil () geol niu edu> wrote:
I have of late seen a few entries such as this ... 125.224.192.192 - - [29/May/2008:09:15:34 -0500] "\x05\x01" 501 3100 "-" "-" ... in my Apache webserver logs. They are the only entry in the log for the particular source IP; that is, they don't represent an anomaly in an otherwise normal session. Such entries record the only contact made by the source IP. GOOGLE hasn't told me anything interesting; does anyone know what this is? Many thanks for any ideas. Best regards, Neil Dickey, Ph.D. email: neil () geol niu edu Research Associate/Sysop Geology Department Northern Illinois University DeKalb, Illinois, U.S.A. 60115
-- ___________________________ Jon Adams web: http://www.scis.nova.edu/~jonaadam mail: keirre.adams () gmail com --------------------------------------------- "Strength does not come from physical capacity. It comes from an indomitable will." - Mohandas Gandhi
Current thread:
- Unusual entry in Apache logs Neil Dickey (May 29)
- Re: Unusual entry in Apache logs Jonathan Adams (May 30)
- Re: Unusual entry in Apache logs Jonathan Adams (May 30)
- Re: Unusual entry in Apache logs Kosala Atapattu (May 30)
- Re: Unusual entry in Apache logs Rob Thomas (May 30)
- Re: Unusual entry in Apache logs Kevin Day (May 30)
- <Possible follow-ups>
- Re: Unusual entry in Apache logs krymson (May 30)
- Re: Unusual entry in Apache logs Neil Dickey (May 30)
- Re: Unusual entry in Apache logs Jonathan Adams (May 30)