Cloud mapping experiment. Contact research@pdrlabs.net in the access logs

Question

54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"

A new line in my access log the other day. As far as i can tell this is most likely a phishing scam. Does anyone know if I might be wrong.

I can see little more trace on my machine of any damage. The log was recorded 3 time over the course of an hour or so.

I gave him my bank account details and he robbed me blind ;) — John, Jul 09 '14 at 19:56

score 9 · Accepted Answer · answered Jul 09 '14 at 18:17

9

It looks like somebody's robot accessing the HTTP server on your machine. My gut says it's probably harmless. Searching Google for those keyword returns other people who are seeing it in their logs, too.

It's good to be vigilant and it's good to hear that you're watching your logs so closely. In this case, I suspect you're alright.

answered Jul 09 '14 at 18:17

Evan Anderson

141,881
20
196
331

2

I did a lot of searching on it too but could not find anything conclusive. Thanks for the reply – John Jul 09 '14 at 19:58
I setup an enabled Fail2Ban and saw this in my logs because I'm blocking the HEAD method. Best to be safe. – John the Ripper Apr 23 '17 at 16:53

score 2 · Answer 2 · answered Jul 14 '14 at 21:23

2

I think it is suspicious they have nothing about their company or their project on their site. To me it looks like a way to hide their scanning under a reasonable facade of respectability.

answered Jul 14 '14 at 21:23

boatcoder

548
2
5
19

interesting point. Add a three letter Acronym, followed by "labs". – asgs Mar 29 '17 at 22:03

Cloud mapping experiment. Contact research@pdrlabs.net in the access logs

2 Answers2