Security Incidents mailing list archives
Re: Unusual entry in Apache logs
From: "Kosala Atapattu" <kosala.atapattu () gmail com>
Date: Fri, 30 May 2008 19:10:23 +0300
If you don't mind can you tell us your apache version. I once managed to reproduced the same result with apache 2.0 but with 2.2 it's not working. Kosala On Fri, May 30, 2008 at 12:54 AM, Neil Dickey <neil () geol niu edu> wrote:
I have of late seen a few entries such as this ... 125.224.192.192 - - [29/May/2008:09:15:34 -0500] "\x05\x01" 501 3100 "-" "-" ... in my Apache webserver logs. They are the only entry in the log for the particular source IP; that is, they don't represent an anomaly in an otherwise normal session. Such entries record the only contact made by the source IP. GOOGLE hasn't told me anything interesting; does anyone know what this is? Many thanks for any ideas. Best regards, Neil Dickey, Ph.D. email: neil () geol niu edu Research Associate/Sysop Geology Department Northern Illinois University DeKalb, Illinois, U.S.A. 60115
-- Kosala -------------------------------------------- Disclaimer: Views expressed in this mail are my personal views and they would not reflect views of the employer. -------------------------------------------- blog.kosala.net www.linux.lk/~kosala/ www.kosala.net
Current thread:
- Unusual entry in Apache logs Neil Dickey (May 29)
- Re: Unusual entry in Apache logs Jonathan Adams (May 30)
- Re: Unusual entry in Apache logs Jonathan Adams (May 30)
- Re: Unusual entry in Apache logs Kosala Atapattu (May 30)
- Re: Unusual entry in Apache logs Rob Thomas (May 30)
- Re: Unusual entry in Apache logs Kevin Day (May 30)
- <Possible follow-ups>
- Re: Unusual entry in Apache logs krymson (May 30)
- Re: Unusual entry in Apache logs Neil Dickey (May 30)
- Re: Unusual entry in Apache logs Jonathan Adams (May 30)