[Dshield] Scan of my webserver

Patrick Andry patrick at goodbadmovies.com
Tue Mar 4 20:29:53 GMT 2003


Has anyone seen this before, and what is it attempting to do?
I haven't been able to find much information on Google regarding this
scan.  Manually attempting the same commands comes up 404.

Apache 1.3.x logs:

x.x.x.x - - [23/Feb/2003:16:11:45 -0500] "\x04\x01" 200 5533
x.x.x.x - - [23/Feb/2003:16:12:06 -0500] "\x05\x01" 200 5533
x.x.x.x - - [23/Feb/2003:16:12:07 -0500] "CONNECT 64.157.4.82:25
HTTP/1.1" 200 5553
-- 
Patrick Andry <patrick at goodbadmovies.com>



More information about the list mailing list