The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

[Security] 408 errors

Discussion in 'Security' started by Radio_Head, Jun 18, 2003.

  1. Radio_Head

    Radio_Head Well-Known Member

    Joined:
    Feb 15, 2002
    Messages:
    2,051
    Likes Received:
    1
    Trophy Points:
    38
    This command ...

    # tail -15000 /usr/local/apache/logs/access_log | grep 408 | grep -v whm

    ..searchs on latest 15000 lines of your apache log file for 408 errors .

    For example I received this

    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    165.227.79.158 - - [04/Jun/2003:21:36:51 -0400] "-" 408 -
    64.247.53.37 - - [05/Jun/2003:00:32:07 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    165.227.79.158 - - [05/Jun/2003:18:14:57 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:55 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    163.29.31.8 - - [06/Jun/2003:23:12:58 -0400] "-" 408 -
    210.99.132.209 - - [07/Jun/2003:14:48:45 -0400] "-" 408 -
    166.114.42.10 - - [08/Jun/2003:06:02:23 -0400] "-" 408 -
    151.8.73.34 - - [08/Jun/2003:13:41:46 -0400] "-" 408 -
    151.8.73.34 - - [08/Jun/2003:13:41:47 -0400] "-" 408 -
    151.8.73.34 - - [08/Jun/2003:13:42:27 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:54 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:33:59 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:02 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:02 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:03 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:04 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:06 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -
    63.211.23.96 - - [10/Jun/2003:18:34:18 -0400] "-" 408 -

    Could be considered hacker/intrusion attempts ?
    Do you think it's a good idea to ban these ips ?

    Bye
     
  2. Radio_Head

    Radio_Head Well-Known Member

    Joined:
    Feb 15, 2002
    Messages:
    2,051
    Likes Received:
    1
    Trophy Points:
    38
    .
     
  3. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    36
    This is probably just someone scanning your machine, because if they were trying to get in I doubt they would allow the server to generate a timeout error.

    Block them if you'd like and/or just make sure that you have a decent root password.

    cPanel.net Support Ticket Number:
     

Share This Page