[Dshield] Scan of my webserver
dshield at kaspermachine.com
Wed Mar 5 13:01:28 GMT 2003
Someone posted a very similar log on the security basics list on
The only difference is it was rejected.
Here's what they posted:
I saw something in my Apache access log that I don't know how to interpret.
Can anyone let me know what the following means?
the.guys.hostname - - [26/Feb/2003:22:59:49 -0500] "\x04\x01" 501 -
the.guys.hostname - - [26/Feb/2003:23:00:11 -0500] "\x05\x01" 501 -
the.guys.hostname - - [26/Feb/2003:23:00:13 -0500] "CONNECT 18.104.22.168:25
HTTP/1.1" 405 321
eMail: mailto:tnewman at kaspermachine.com
More information about the list