Incidents
Unusual entry in Apache logs May 29 2008 09:54PM
Neil Dickey (neil geol niu edu) (3 replies)
Re: Unusual entry in Apache logs May 30 2008 06:59PM
Rob Thomas (robt cymru com) (1 replies)
Hi, Neil.

> 125.224.192.192 - - [29/May/2008:09:15:34 -0500] "\x05\x01" 501 3100 "-" "-"

This IP has been sending spam since at least 2008-04-24 15:34:38 UTC.
It's also been scanning for the typical proxy ports lately (most
recently 2008-05-29 02:34:16 UTC), e.g. TCP 8080, TCP 3128, TCP 1080,
and TCP 80. I suspect this is what it was doing when it visited your
server. Possibly it's a bot.

Thanks,
Rob.
--
Rob Thomas
Team Cymru
The WHO and WHY team
http://www.team-cymru.org/

[ reply ]
Re: Unusual entry in Apache logs May 30 2008 08:21PM
Kevin Day (toasty dragondata com)
Re: Unusual entry in Apache logs May 30 2008 04:10PM
Kosala Atapattu (kosala atapattu gmail com)
Re: Unusual entry in Apache logs May 29 2008 11:45PM
Jonathan Adams (keirre adams gmail com) (1 replies)
Re: Unusual entry in Apache logs May 29 2008 11:50PM
Jonathan Adams (keirre adams gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus