LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-01-2014, 06:58 AM   #1
battles
Member
 
Registered: Apr 2014
Distribution: Debian GNU/Linux 7.5 (wheezy)
Posts: 258

Rep: Reputation: Disabled
Unusual server accesses


I hope this is the right forum for this question.

What are these web site accesses? Are they some kind of hack probes/attempts? (I changed the last part of the ip address to .0 .) There is no GET or other access type in the record.

69.64.58.0 - - [01/Sep/2014:04:25:23 +0000] "-" 400 0 "-" "-"
50.57.125.0 - - [01/Sep/2014:04:26:05 +0000] "-" 400 0 "-" "-"
50.57.125.0 - - [01/Sep/2014:04:26:47 +0000] "-" 400 0 "-" "-"
69.51.77.0 - - [01/Sep/2014:04:27:55 +0000] "-" 400 0 "-" "-"
62.145.68.0 - - [01/Sep/2014:04:28:12 +0000] "-" 400 0 "-" "-"
31.3.155.0 - - [01/Sep/2014:04:28:33 +0000] "-" 400 0 "-" "-"
103.28.148.0 - - [01/Sep/2014:04:29:20 +0000] "-" 400 0 "-" "-"
91.184.13.0 - - [01/Sep/2014:04:29:38 +0000] "-" 400 0 "-" "-"
62.196.72.0 - - [01/Sep/2014:04:30:01 +0000] "-" 400 0 "-" "-"
1.9.47.0 - - [01/Sep/2014:04:30:53 +0000] "-" 400 0 "-" "-"
112.186.26.0 - - [01/Sep/2014:04:31:03 +0000] "-" 400 0 "-" "-"
194.154.216.0 - - [01/Sep/2014:04:32:53 +0000] "-" 400 0 "-" "-"
 
Old 09-01-2014, 09:40 AM   #2
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Bad Requests:

The request could not be understood by the server due to malformed syntax. The client SHOULD NOT repeat the request without modifications.[1]

You could let us see some entire entries for the log?
Sanitize your IP but not theirs.
 
Old 09-01-2014, 10:24 AM   #3
battles
Member
 
Registered: Apr 2014
Distribution: Debian GNU/Linux 7.5 (wheezy)
Posts: 258

Original Poster
Rep: Reputation: Disabled
I was thinking about banning such, but I have found since that these same records are found along with legit GET records with the same IP.

Thanks
 
Old 09-01-2014, 12:53 PM   #4
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
OK...?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Unusual Apache issue on my server !!! gadikota Linux - Server 5 03-20-2013 01:39 PM
[SOLVED] application which can pop up like gtalk when some one accesses my server tkmsr Linux - Server 12 02-26-2011 01:47 PM
[SOLVED] Monitoring files a certain process accesses dave222 Linux - General 7 10-25-2009 03:38 AM
LXer: Know when someone accesses your files in GNOME LXer Syndicated Linux News 0 07-25-2009 01:11 AM
does PHPDoc parse database accesses? dping Programming 2 07-04-2009 12:47 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:51 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration