Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

[Security] 408 errors

Discussion in 'Security' started by Radio_Head, Jun 18, 2003.

  1. Radio_Head

    Radio_Head Well-Known Member

    Joined:
    Feb 15, 2002
    Messages:
    2,051
    Likes Received:
    1
    Trophy Points:
    343
    This command ...

    # tail -15000 /usr/local/apache/logs/access_log | grep 408 | grep -v whm

    ..searchs on latest 15000 lines of your apache log file for 408 errors .

    For example I received this

    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    64.247.53.37 - - [05/Jun/2003:00:32:07 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:55 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    210.99.132.209 - - [07/Jun/2003:14:48:45 -0400] "-" 408 -
    166.114.42.10 - - [08/Jun/2003:06:02:23 -0400] "-" 408 -
    151.8.73.34 - - [08/Jun/2003:13:41:46 -0400] "-" 408 -
    151.8.73.34 - - [08/Jun/2003:13:41:47 -0400] "-" 408 -
    151.8.73.34 - - [08/Jun/2003:13:42:27 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:02 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:02 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:03 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:04 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -

    Could be considered hacker/intrusion attempts ?
    Do you think it's a good idea to ban these ips ?

    Bye
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Radio_Head

    Radio_Head Well-Known Member

    Joined:
    Feb 15, 2002
    Messages:
    2,051
    Likes Received:
    1
    Trophy Points:
    343
    .
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    166
    This is probably just someone scanning your machine, because if they were trying to get in I doubt they would allow the server to generate a timeout error.

    Block them if you'd like and/or just make sure that you have a decent root password.

    cPanel.net Support Ticket Number:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice