From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1IanvJ-0007Wh-P3 for garchives@archives.gentoo.org; Thu, 27 Sep 2007 07:36:38 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.1/8.14.0) with SMTP id l8R7QuLO021878; Thu, 27 Sep 2007 07:26:56 GMT Received: from mail.digimed.co.uk (82-69-83-178.dsl.in-addr.zen.co.uk [82.69.83.178]) by robin.gentoo.org (8.14.1/8.14.0) with ESMTP id l8R7MlU9017539 for ; Thu, 27 Sep 2007 07:22:47 GMT Received: from zaphod.digimed.co.uk (zaphod.digimed.co.uk [192.168.1.1]) by mail.digimed.co.uk (Postfix) with ESMTP id 355B33957 for ; Thu, 27 Sep 2007 08:22:45 +0100 (BST) Date: Thu, 27 Sep 2007 08:22:31 +0100 From: Neil Bothwick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] {OT} Strange apache2 access_log entries Message-ID: <20070927082231.785c21cf@zaphod.digimed.co.uk> In-Reply-To: <49bf44f10709261851s15b35799vb007ce039e3bf095@mail.gmail.com> References: <49bf44f10709261330m23c74923l8165853e9785e811@mail.gmail.com> <1190846931.30856.26.camel@localhost> <49bf44f10709261851s15b35799vb007ce039e3bf095@mail.gmail.com> Organization: Digital Media Production X-Mailer: Claws Mail 3.0.1cvs28 (GTK+ 2.12.0; x86_64-pc-linux-gnu) X-GPG-Fingerprint: 7260 0F33 97EC 2F1E 7667 FE37 BA6E 1A97 4375 1903 Sender: neil@digimed.co.uk Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/IDwz5YIj1BaObaHZYwVgycx"; protocol="application/pgp-signature"; micalg=PGP-SHA1 X-Archives-Salt: d3cfea3e-1f4f-4726-8ca7-8f0bb8028043 X-Archives-Hash: 4ec0ee9797520eadd0e4c1cfe371e838 --Sig_/IDwz5YIj1BaObaHZYwVgycx Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Wed, 26 Sep 2007 18:51:31 -0700, Grant wrote: > > Connection to/from localhost. Do you have some process running on the > > same server that's doing monitoring? The 400 reply is even more > > interesting. I think the request should be "GET / HTTP/1.1" or > > similar which is probably why it is returning a 400. =20 >=20 > I'm not doing any sort of monitoring like that. What is that "470"? > I noticed the log entries always include that, at least for the last > 10 days. Was this around the time your host leaked the passwords? --=20 Neil Bothwick The best antiques are old friends. --Sig_/IDwz5YIj1BaObaHZYwVgycx Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) iD8DBQFG+1pAum4al0N1GQMRAuxFAJwPNDhckBoG+7oi8NPjpOVKym9GIACgzGcM dHAEz+XhFQzQL86POnIKL2k= =K7zC -----END PGP SIGNATURE----- --Sig_/IDwz5YIj1BaObaHZYwVgycx-- -- gentoo-user@gentoo.org mailing list