LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 02-26-2003, 02:51 PM   #1
Crashed_Again
Senior Member
 
Registered: Dec 2002
Location: Atlantic City, NJ
Distribution: Ubuntu & Arch
Posts: 3,503

Rep: Reputation: 57
More Apache Log Errors!


What exactly are these two requests trying to accomplish:

www.isecom.com.ar - - [26/Feb/2003:15:46:36 -0500] "POST http://200.69.212.165:6667/ HTTP/1.0" 200 613 "-" "-"
www.isecom.com.ar - - [26/Feb/2003:15:46:36 -0500] "CONNECT 200.69.212.165:6667 HTTP/1.0" 405 316 "-" "-"

The ip address 200.69.212.165 is not related to my network at all and as for port 6667 I have no idea what that is all about.
 
Old 02-26-2003, 08:01 PM   #2
nxny
Member
 
Registered: May 2002
Location: AK - The last frontier.
Distribution: Red Hat 8.0, Slackware 8.1, Knoppix 3.7, Lunar 1.3, Sorcerer
Posts: 771

Rep: Reputation: 30
6667 is the IRC port, if I remember right. Do you get these a lot? I have a vague idea that someone is trying to 'post' to the IRC server at the 200.x.x.x ip via your httpd. Now, that's just PURE speculation, cuz I dont know how successful these attempts would be if they were real . We'll have to see the whole packet (tcpdump) when this happens to make sure what my guess isn't too far fetched.
 
Old 02-27-2003, 05:21 AM   #3
Scrapz
LQ Newbie
 
Registered: Feb 2003
Location: Brisbane, AU
Distribution: Gentoo
Posts: 20

Rep: Reputation: 0
Some IRC servers do a sort of port scan on connect. If you look closely at the MOTD when you connect to the server, you might find something similar to this:
Quote:
--- - Please be aware that OFTC operates an open proxy detection
--- - system(http://www.blitzed.org/bopm). Please disregard
--- - connections from proxy-scan.oftc.net(216.86.139.17) as it
--- - is the detector in action. If you dislike this, please
--- - disconnect now.
Anything on port 6667 will most likely be the IRC proxy scans. Its nothing to be worried about, unless of course, you're not using IRC
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
log warnings and errors - are these serious? bcal Fedora 3 02-12-2005 04:13 PM
many errors in var/log... os2 Linux - Distributions 0 09-14-2004 11:15 AM
Strange results in /var/log/apache/access.log subt13 Linux - Security 2 08-03-2004 01:21 PM
Kernel errors in log Sillysoft Linux - General 0 07-27-2004 09:41 AM
Apache Webserver 403 Forbidden Errors (User not in apache group?) Mankind75 Mandriva 4 07-08-2004 05:30 AM


All times are GMT -5. The time now is 11:38 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration