216.240.58.140:80 76.173.170.88 - - [18/Jan/2012:17:10:17 -0800] "-" 408 0 "-" "-" The failed request above shows up in my logs a lot and is flagged in the Logwatch as an attempt to use a known hack. What exactly are they doing? It looks like the connection timed out without the client sending a request. Thanks, -- Knute Johnson