[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [suse-security] Identical http request in log file



> > The entries look like this:
> > aaa.bbb.ccc.ddd - - [31/Jan/2004:00:01:29 +0100] "GET /
> HTTP/1.1" 401 494
> > 65.166.64.132 - - [31/Jan/2004:00:01:30 +0100] "GET / HTTP/1.1" 401 494
> >
> > Any hint is appreciated.
>
> Lookup corresponding lines in the error_log.

There's nothing in the error.log that corresponds to the suspicous
tranfer.log entries. At this moment I decided to disconnect the server from
the internet because I'm not able to locate the source of this misbehaviour.
I'll then do a fresh install of a SuSE 9.0 and reconfigure and restart any
service I'm using now.

This whole thing won't let me come to sleep at night.

I'm sorry that I can't present any solution to you.

Regards,
Andreas


-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here