HTTPD Log

open4biz

Verified User
Joined
Mar 22, 2009
Messages
124
Hi All,

I recently updated PHP (also MySQL (last week?) and curl) in the latest version of CentOS. While clearing out a few Logwatch emails, I noticed the following. Do you think it's related to one the updates, or do I have cause for concern?

Thanks,

Ansel


--------------------- httpd Begin ------------------------

Connection attempts using mod_proxy:
95.25.3.35 -> mail.messaging.microsoft.com:25: 8 Time(s)

Requests with error response codes
401 Unauthorized
//phpMyAdmin/: 6 Time(s)
//phpmyadmin/: 5 Time(s)
404 Not Found
//PMA/: 3 Time(s)
//PMA2005/: 6 Time(s)
//admin/: 5 Time(s)
//dbadmin/: 6 Time(s)
//myadmin/: 5 Time(s)
//mysql-admin/: 6 Time(s)
//mysql/: 5 Time(s)
//mysqladmin/: 6 Time(s)
//mysqlmanager/: 6 Time(s)
//p/m/a/: 6 Time(s)
//php-my-admin/: 6 Time(s)
//php-myadmin/: 6 Time(s)
//phpMyAdmin-2.2.3/: 6 Time(s)
//phpMyAdmin-2.2.6/: 6 Time(s)
//phpMyAdmin-2.5.1/: 6 Time(s)
//phpMyAdmin-2.5.4/: 6 Time(s)
//phpMyAdmin-2.5.5-pl1/: 6 Time(s)
//phpMyAdmin-2.5.5-rc1/: 6 Time(s)
//phpMyAdmin-2.5.5-rc2/: 6 Time(s)
//phpMyAdmin-2.5.5/: 6 Time(s)
//phpMyAdmin-2.5.6-rc1/: 6 Time(s)
//phpMyAdmin-2.5.6-rc2/: 6 Time(s)
//phpMyAdmin-2.5.6/: 6 Time(s)
//phpMyAdmin-2.5.7-pl1/: 6 Time(s)
//phpMyAdmin-2.5.7/: 6 Time(s)
//phpMyAdmin-2.6.0-alpha/: 6 Time(s)
//phpMyAdmin-2.6.0-alpha2/: 6 Time(s)
//phpMyAdmin-2.6.0-beta1/: 6 Time(s)
//phpMyAdmin-2.6.0-beta2/: 6 Time(s)
//phpMyAdmin-2.6.0-pl1/: 5 Time(s)
//phpMyAdmin-2.6.0-pl2/: 6 Time(s)
//phpMyAdmin-2.6.0-pl3/: 6 Time(s)
//phpMyAdmin-2.6.0-rc1/: 6 Time(s)
//phpMyAdmin-2.6.0-rc2/: 6 Time(s)
//phpMyAdmin-2.6.0-rc3/: 6 Time(s)
//phpMyAdmin-2.6.0/: 6 Time(s)
//phpMyAdmin-2.6.1-pl1/: 5 Time(s)
//phpMyAdmin-2.6.1-pl2/: 6 Time(s)
//phpMyAdmin-2.6.1-pl3/: 5 Time(s)
//phpMyAdmin-2.6.1-rc1/: 6 Time(s)
//phpMyAdmin-2.6.1-rc2/: 5 Time(s)
//phpMyAdmin-2.6.1/: 5 Time(s)
//phpMyAdmin-2.6.2-beta1/: 3 Time(s)
//phpMyAdmin-2.6.2-pl1/: 4 Time(s)
//phpMyAdmin-2.6.2-rc1/: 8 Time(s)
//phpMyAdmin-2.6.2/: 2 Time(s)
//phpMyAdmin-2.6.3-pl1/: 4 Time(s)
//phpMyAdmin-2.6.3-rc1/: 5 Time(s)
//phpMyAdmin-2.6.3/: 9 Time(s)
//phpMyAdmin-2.6.4-pl1/: 4 Time(s)
//phpMyAdmin-2.6.4-pl2/: 5 Time(s)
//phpMyAdmin-2.6.4-pl3/: 5 Time(s)
//phpMyAdmin-2.6.4-pl4/: 6 Time(s)
//phpMyAdmin-2.6.4-rc1/: 5 Time(s)
//phpMyAdmin-2.6.4/: 5 Time(s)
//phpMyAdmin-2.7.0-beta1/: 6 Time(s)
//phpMyAdmin-2.7.0-pl1/: 5 Time(s)
//phpMyAdmin-2.7.0-pl2/: 5 Time(s)
//phpMyAdmin-2.7.0-rc1/: 5 Time(s)
//phpMyAdmin-2.7.0/: 4 Time(s)
//phpMyAdmin-2.8.0-beta1/: 5 Time(s)
//phpMyAdmin-2.8.0-rc1/: 4 Time(s)
//phpMyAdmin-2.8.0-rc2/: 6 Time(s)
//phpMyAdmin-2.8.0.1/: 4 Time(s)
//phpMyAdmin-2.8.0.2/: 6 Time(s)
//phpMyAdmin-2.8.0.3/: 6 Time(s)
//phpMyAdmin-2.8.0.4/: 4 Time(s)
//phpMyAdmin-2.8.0/: 6 Time(s)
//phpMyAdmin-2.8.1-rc1/: 5 Time(s)
//phpMyAdmin-2.8.1/: 6 Time(s)
//phpMyAdmin-2.8.2/: 4 Time(s)
//phpMyAdmin-2/: 6 Time(s)
//phpMyAdmin2/: 6 Time(s)
//phpmanager/: 6 Time(s)
//phpmy-admin/: 6 Time(s)
//phpmyadmin2/: 6 Time(s)
//pma/: 6 Time(s)
//pma2005/: 6 Time(s)
//sql/: 6 Time(s)
//sqlmanager/: 6 Time(s)
//sqlweb/: 6 Time(s)
//webadmin/: 6 Time(s)
//webdb/: 6 Time(s)
//websql/: 6 Time(s)
/admin/Y-ivrrecording.php?php=info&ip=uname: 6 Time(s)
http://boingboing.net/images/squidDSCF1415.jpg: 1 Time(s)
http://proxyjudge1.proxyfire.net/fastenv: 3 Time(s)
http://proxyjudge3.proxyfire.net/fastenv: 4 Time(s)
mail.messaging.microsoft.com:25: 8 Time(s)

---------------------- httpd End -------------------------
 
Why would it matter? I am sure there are scripts to ban for invalid 401 attempts. You will never stop this though. Just ignore it.
 
I'm not sure what activated these scripts or for what purpose. I have never seen something like this in my logs, so I'm just double-checking. On the server, it's just my collection of sites and 2 other clients who are not all that savvy (enough to do something like this).
 
Back
Top