F19: Is this an httpd attack attempt?

Dan Thurman dant at cdkkt.com
Mon Mar 3 16:42:36 UTC 2014


It looks to me like a successful indirect connection?

The following is taken from /var/log/httpd/access_log

185.4.227.194 - - [03/Mar/2014:07:27:49 -0800] "GET 
http://24x7-allrequestsallowed.com/?PHPSESSID=1rmsxtj500143TRMUTP_ODZZWA 
HTTP/1.1" 200 5264 "-" "-"



More information about the users mailing list