[KLUG Members] HTTP access log entry

[Justin Buist]

On Thu, Dec 26, 2002 at 11:46:53PM -0600, Russell Dillenburg wrote:
> Found this entry in my access log and thought it seemed suspicious.  If 
> this were in your httpd access log would you suspect something foul here.
> 
> <snippet src="/var/log/httpd/access_log">
> 
> 216.111.126.169 - - [26/Dec/2002:09:40:43 -0600] "http://%a:%p/,HEAD /\r\n\r\n" 501 - "-" "-"

Did I 'twee bit of digging, and http://lists.insecure.org/lists/incidents/2000/Jul/0114.html that might answer your question.

Justin Buist