I'm seeing this in my logs....
1.2.3.4 - - [15/Nov/2007:21:38:20 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:38:21 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:38:22 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:38:23 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:38:24 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:38:25 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:38:27 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:41:28 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:42:13 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:42:14 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:42:15 +0000] "GET /" 400 525 "-" "-"
1.2.3.4 - - [15/Nov/2007:21:42:16 +0000] "GET /" 400 525 "-" "-"
As you can see, it's reasonably frequent. I should point out that
1.2.3.4 is the server itself.
Ngrepping to see what it is, we see this:
# ngrep host 1.2.3.4 -W byline -d lo
interface: lo (127.0.0.0/255.0.0.0)
filter: (ip) and ( host 1.2.3.4 )
####
T 1.2.3.4:57047 -> 1.2.3.4:443 [AP]
GET / HTTP/1.0.
User-Agent: Apache (internal dummy connection).
.
###
T 1.2.3.4:443 -> 1.2.3.4:57047 [AP]
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
Instead use the HTTPS scheme to access this URL, please.<br />
<blockquote>Hint: <a
href="https://fuzzmail.co.uk/";><b>https://fuzzmail.co.uk/</b></a></blockquote></p>
<hr>
<address>Apache Server at fuzzmail.co.uk Port 443</address>
</body></html>
#exit
16 received, 0 dropped
Notice, it's attempting to get / in plain text, on an SSL port, and is
therefore getting a 400 error.
I've googled this, and apparently it's some kinda internal
communications mechanism of some sort - can someone explain this to me
please?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
