[logs] Unknown user agent in my logs...

James Turnbull james at lovedthanlost.net
Mon Apr 9 01:37:57 PDT 2007


Clinton E. Troutman wrote:
> Beginning just after 18:00 this evening, my Apache access log began to show 
> hits every few seconds from the same source IP. 
> Other than time, all lines appear to be the same... (sample given below).
>
>   
Have a read of this thread:

http://www.linuxquestions.org/questions/showthread.php?t=515006

It appears to be some kind of network discovery tool - which may or may 
not be deployed with malicious intent.

Regards

James Turnbull

-- 
James Turnbull <james at lovedthanlost.net>
---
Author of Pro Nagios 2.0
(http://www.amazon.com/gp/product/1590596099/)

Hardening Linux
(http://www.amazon.com/gp/product/1590594444/)
---
PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)



More information about the LogAnalysis mailing list