On Wed, 26 Sep 2007 18:51:31 -0700, Grant wrote:

> > Connection to/from localhost.  Do you have some process running on the
> > same server that's doing monitoring?  The 400 reply is even more
> > interesting.  I think the request should be "GET / HTTP/1.1" or
> > similar which is probably why it is returning a 400.  
> 
> I'm not doing any sort of monitoring like that.  What is that "470"?
> I noticed the log entries always include that, at least for the last
> 10 days.

Was this around the time your host leaked the passwords?

-- 
Neil Bothwick

The best antiques are old friends.