[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OT: mod_ssl (apache) log entries -- wtf?



On Thu, Feb 20, 2003 at 01:56:40AM -0600, Will Trillich wrote:
> what does this mean? are there black hats involved? (maybe even
> a gray fedora?)

i'd guess one of two things:

a - someone else has messed up a dns entry or href on a webpage
b - this computer is trying to test for exploitable weakness in
    your web server.

you could find out for sure by running the packet sniffer of your
choice and dumping the whole conversation to a log, and then look
at what kind of data the client was sending.  oh wait... https...
nevermind.  there's probably a way to turn up verbosity on apache
then :)


	sean

Attachment: pgpYrNioLpoF7.pgp
Description: PGP signature


Reply to: