|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
RE: [suse-security] Identical http request in log file
From: Andreas Jägermann (ajaegermann
helimail.de)
Date: Tue Feb 03 2004 - 13:54:50 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
> > The entries look like this:
> > aaa.bbb.ccc.ddd - - [31/Jan/2004:00:01:29 +0100] "GET /
> HTTP/1.1" 401 494
> > 65.166.64.132 - - [31/Jan/2004:00:01:30 +0100] "GET / HTTP/1.1" 401 494
> >
> > Any hint is appreciated.
>
> Lookup corresponding lines in the error_log.
There's nothing in the error.log that corresponds to the suspicous
tranfer.log entries. At this moment I decided to disconnect the server from
the internet because I'm not able to locate the source of this misbehaviour.
I'll then do a fresh install of a SuSE 9.0 and reconfigure and restart any
service I'm using now.
This whole thing won't let me come to sleep at night.
I'm sorry that I can't present any solution to you.
Regards,
Andreas
--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]