Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"

A new line in my access log the other day. As far as i can tell this is most likely a phishing scam. Does anyone know if I might be wrong.

I can see little more trace on my machine of any damage. The log was recorded 3 time over the course of an hour or so.

share|improve this question
    
What happened when you emailed them? –  Michael Hampton Jul 9 at 18:17
    
I gave him my bank account details and he robbed me blind ;) –  John Jul 9 at 19:56

2 Answers 2

up vote 3 down vote accepted

It looks like somebody's robot accessing the HTTP server on your machine. My gut says it's probably harmless. Searching Google for those keyword returns other people who are seeing it in their logs, too.

It's good to be vigilant and it's good to hear that you're watching your logs so closely. In this case, I suspect you're alright.

share|improve this answer
    
I did a lot of searching on it too but could not find anything conclusive. Thanks for the reply –  John Jul 9 at 19:58

I think it is suspicious they have nothing about their company or their project on their site. To me it looks like a way to hide their scanning under a reasonable facade of respectability.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.