OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
strange http get requests in apache access logs

From: rowland onobrauche (rowland.onobrauchelegendplc.com)
Date: Fri Oct 13 2006 - 05:57:01 CDT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all.

Im getting logs such as

"GET http://www.escorts-etc.com/cgi-bin/ftop100/rankem.cgi?id=gagvault
HTTP/1.0" 200 147 "http://www.gagvault.com/linkspage.html"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

In some of my httpd access logs, even though this type of site is not
existant on the server.
Anyone seen this before??

- --
Rowland Onobrauche
Unix Systems Administrator

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFFL3D6n71Wg8vs0SURAklRAKDXR59b2olXgR/B1cs3SdNpukSP1wCdEulp
eQCeQE4zUfyEnvGBmIIb1d4=
=mVgE
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------------