Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"

A new line in my access log the other day. As far as i can tell this is most likely a phishing scam. Does anyone know if I might be wrong.

I can see little more trace on my machine of any damage. The log was recorded 3 time over the course of an hour or so.

share|improve this question
    
What happened when you emailed them? –  Michael Hampton Jul 9 at 18:17
1  
I gave him my bank account details and he robbed me blind ;) –  John Jul 9 at 19:56

2 Answers 2

up vote 3 down vote accepted

It looks like somebody's robot accessing the HTTP server on your machine. My gut says it's probably harmless. Searching Google for those keyword returns other people who are seeing it in their logs, too.

It's good to be vigilant and it's good to hear that you're watching your logs so closely. In this case, I suspect you're alright.

share|improve this answer
    
I did a lot of searching on it too but could not find anything conclusive. Thanks for the reply –  John Jul 9 at 19:58

I think it is suspicious they have nothing about their company or their project on their site. To me it looks like a way to hide their scanning under a reasonable facade of respectability.

share|improve this answer

protected by Community Nov 13 at 14:45

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.