I'm seeing this in my logs.... 1.2.3.4 - - [15/Nov/2007:21:38:20 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:38:21 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:38:22 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:38:23 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:38:24 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:38:25 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:38:27 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:41:28 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:42:13 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:42:14 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:42:15 +0000] "GET /" 400 525 "-" "-" 1.2.3.4 - - [15/Nov/2007:21:42:16 +0000] "GET /" 400 525 "-" "-"As you can see, it's reasonably frequent. I should point out that 1.2.3.4 is the server itself.
Ngrepping to see what it is, we see this: # ngrep host 1.2.3.4 -W byline -d lo interface: lo (127.0.0.0/255.0.0.0) filter: (ip) and ( host 1.2.3.4 ) #### T 1.2.3.4:57047 -> 1.2.3.4:443 [AP] GET / HTTP/1.0. User-Agent: Apache (internal dummy connection). . ### T 1.2.3.4:443 -> 1.2.3.4:57047 [AP] <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>400 Bad Request</title> </head><body> <h1>Bad Request</h1> <p>Your browser sent a request that this server could not understand.<br /> Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /><blockquote>Hint: <a href="https://fuzzmail.co.uk/";><b>https://fuzzmail.co.uk/</b></a></blockquote></p>
<hr> <address>Apache Server at fuzzmail.co.uk Port 443</address> </body></html> #exit 16 received, 0 droppedNotice, it's attempting to get / in plain text, on an SSL port, and is therefore getting a 400 error.
I've googled this, and apparently it's some kinda internal communications mechanism of some sort - can someone explain this to me please?
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|