Re: Unknown user agent in my logs...
James Turnbull <[email protected]>
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
Clinton E. Troutman wrote: > Beginning just after 18:00 this evening, my Apache access log began to show > hits every few seconds from the same source IP. > Other than time, all lines appear to be the same... (sample given below). > > Have a read of this thread: http://www.linuxquestions.org/questions/showthread.php?t=515006 It appears to be some kind of network discovery tool - which may or may not be deployed with malicious intent. Regards James Turnbull -- James Turnbull <[email protected]> --- Author of Pro Nagios 2.0 (http://www.amazon.com/gp/product/1590596099/) Hardening Linux (http://www.amazon.com/gp/product/1590594444/) --- PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)