Apache Server configuration support - Apache 2.2.4: Strange HTTP dummy requests on SSL port

Author

Apache 2.2.4: Strange HTTP dummy requests on SSL port

Trinity Of Matrix

2007-09-20, 1:33 pm

Hi,

I got this kind of log entries in my apache logs in Apache 2.2.4:
localhost [127.0.0.1] - - [20/Sep/2007:16:35:54 +0200] "GET /" 400 534
"-" "-" 0 ssl.myhost.tld
localhost [127.0.0.1] - - [20/Sep/2007:16:35:55 +0200] "GET /" 400 534
"-" "-" 0 ssl.myhost.tld
localhost [127.0.0.1] - - [20/Sep/2007:16:35:56 +0200] "GET /" 400 534
"-" "-" 0 ssl.myhost.tld
localhost [127.0.0.1] - - [20/Sep/2007:16:35:57 +0200] "GET /" 400 534
"-" "-" 0 ssl.myhost.tld
localhost [127.0.0.1] - - [20/Sep/2007:16:35:58 +0200] "GET /" 400 534
"-" "-" 0 ssl.myhost.tld
localhost [127.0.0.1] - - [20/Sep/2007:16:35:59 +0200] "GET /" 400 534
"-" "-" 0 ssl.myhost.tld

I tried to sniff the connection but I got only this in one packet:
User-Agent: Ap

then it was cut off. The dummy requests repeats all the time and apache
responds with error 400 bad request, because this request are done on
the SSL port 443.
Does somebody knows what this is?

--
Regards,
Trinity Of Matrix
E-Mail (only for spammer): trinity.matrix@localhost.localdomain

Davide Bianchi

2007-09-20, 1:33 pm

On 2007-09-20, Trinity Of Matrix <trinity.matrix@localhost.localdomain> wrote:
> I got this kind of log entries in my apache logs in Apache 2.2.4:
> localhost [127.0.0.1] - - [20/Sep/2007:16:35:54 +0200] "GET /" 400 534
> "-" "-" 0 ssl.myhost.tld

From localhost? Some automatic procedure testing your services?

Davide

--
That's when you must acquire the skill to fart at whim... doing so will
protect the Holy Personal Space. -- Stephen S. Edwards II