LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-11-2005, 12:04 PM   #1
hywaydave
Member
 
Registered: Dec 2004
Location: Omaha, NE
Distribution: RH9
Posts: 31

Rep: Reputation: 15
httpd access log entries


Here's a couple entries that were out of the norm in my access_log files. Do these mean anything?

205.188.116.139 - - [23/Jan/2005:20:53:22 -0500] "HEAD / HTTP/1.0" 200 - "-" "-"
205.188.116.67 - - [23/Jan/2005:20:53:25 -0500] "HEAD /hottub.jpg HTTP/1.0" 200 - "-" "-"
152.163.100.139 - - [26/Jan/2005:19:03:47 -0500] "HEAD / HTTP/1.0" 200 - "-" "-"
152.163.100.66 - - [26/Jan/2005:19:03:50 -0500] "HEAD /hottub.jpg HTTP/1.0" 200 - "-" "-"
 
Old 02-11-2005, 02:41 PM   #2
masand
Guru
 
Registered: May 2003
Location: INDIA
Distribution: Ubuntu, Solaris,CentOS
Posts: 5,522

Rep: Reputation: 58
what i can think is that ur webserver was accessed by these ip addresses on the given time


regards
 
Old 02-11-2005, 03:19 PM   #3
hywaydave
Member
 
Registered: Dec 2004
Location: Omaha, NE
Distribution: RH9
Posts: 31

Original Poster
Rep: Reputation: 15
Thanks.... I got that part.... I was more concerned about these entries with the dashes, was someone trying something????

HEAD / HTTP/1.0" 200 - "-" "-"
 
Old 02-11-2005, 03:39 PM   #4
masand
Guru
 
Registered: May 2003
Location: INDIA
Distribution: Ubuntu, Solaris,CentOS
Posts: 5,522

Rep: Reputation: 58
this is from

http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

HEAD the entity-header fields corresponding to the requested resource are sent in the response without any message-body;


what happens is that first u get this request and 200 signifies that the webserver replies OK
next it tries to access the jpg files

regards
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] noob with httpd-access.log (Attempting to Crack me?) kwlskwlguy Linux - Security 6 08-10-2005 06:47 AM
/var/log/auth.log entries buehler Linux - Security 1 04-23-2005 04:45 PM
What are these entries in the cups access log? fclifton Linux - General 0 09-22-2004 08:34 PM
log entries robert1963 Linux - Security 1 03-28-2004 04:37 PM
concerned about log entries complus Linux - Security 6 03-08-2004 09:14 AM


All times are GMT -5. The time now is 09:16 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration