Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

Weird log entry

 
   Web Hosting and Web Master Forums (Home) -> Apache RSS
Next:  Large website logs  
Author Message
John P Reber

External


Since: Jan 25, 2006
Posts: 1



(Msg. 1) Posted: Wed Jan 25, 2006 1:42 pm
Post subject: Weird log entry
Archived from groups: alt>apache>configuration (more info?)

I recently set up an Apache (2.2.0) webserver om Red Hat FC4.

I started getting these weird log entries.

::1 - - [25/Jan/2006:13:45:24 -0500] "GET / HTTP/1.0" 200 4340

They seem to come in spurts, 1 per second, about 20-30 hits every few
minutes.

Is this some DOS attack?

What can I do to prevent this?

 >> Stay informed about: Weird log entry 
Back to top
Login to vote
mikedawg

External


Since: Jan 24, 2006
Posts: 20



(Msg. 2) Posted: Wed Jan 25, 2006 7:53 pm
Post subject: Re: Weird log entry [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

It is the killer "F5" DoS. That is someone retrieving the "root" of
your web directory. Maybe someone is going to your website and hitting
refresh/reload a bunch of times.

 >> Stay informed about: Weird log entry 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
access log entry - According to the access log, a certain visitor had an ip address of 24.69.xx.xx. I recognize this as our local cable isp, and that would be ok for this visitor. According to apache server-status, the same visitor is reported as 70.69.xx.xx, which is als...

Apache 2.0, odd log entry? - I was checking my logs today and noticed the following entry in the access log: 62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET http://www.mozilla.org/ HTTP/1.1" 200 1628 Is this someone that was able to use my web server as a proxy su...

acces_log entry?? - why do I have this in my acces_log coming from my ISP? 66.177.159.205 - - [16/Dec/2003:21:29:25 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 66.177.159.205 - - [16/Dec/2003:21:29:26 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0&q...

Strange Log-entry? - 212.239.184.174 - - [03/Oct/2003:11:48:34 +0200] "\xe8\xd8\x0e\xfc\x9d\xfd\xc7\x8a\xa6\x17\xdd\xc1" 200 10061 "-" "-" 213.36.86.13 - - [03/Oct/2003:22:04:43 +0200] "\x16,\x84^/\xa4\xab\xf8\xb14\x91M\xcd" 200 10061...

[OT] Unusual log entry - Group, Sorry to post this, but Google and Symantec searches came up empty. Here's a line from my access_log: 200.154.128.74 - - [24/Aug/2003:18:50:39 -0400] "\x92X\xf1\xef\xeb\xdf4\x86\b\t X" 400 - The IP shows to a .br domain, and there's ...
   Web Hosting and Web Master Forums (Home) -> Apache All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]