[logs] Unknown user agent in my logs...
James Turnbull
james at lovedthanlost.net
Mon Apr 9 01:37:57 PDT 2007
Clinton E. Troutman wrote:
> Beginning just after 18:00 this evening, my Apache access log began to show
> hits every few seconds from the same source IP.
> Other than time, all lines appear to be the same... (sample given below).
>
>
Have a read of this thread:
http://www.linuxquestions.org/questions/showthread.php?t=515006
It appears to be some kind of network discovery tool - which may or may
not be deployed with malicious intent.
Regards
James Turnbull
--
James Turnbull <james at lovedthanlost.net>
---
Author of Pro Nagios 2.0
(http://www.amazon.com/gp/product/1590596099/)
Hardening Linux
(http://www.amazon.com/gp/product/1590594444/)
---
PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)
More information about the LogAnalysis
mailing list