3 Feb
2004
3 Feb
'04
19:54
The entries look like this: aaa.bbb.ccc.ddd - - [31/Jan/2004:00:01:29 +0100] "GET / HTTP/1.1" 401 494 65.166.64.132 - - [31/Jan/2004:00:01:30 +0100] "GET / HTTP/1.1" 401 494
Any hint is appreciated.
Lookup corresponding lines in the error_log.
There's nothing in the error.log that corresponds to the suspicous tranfer.log entries. At this moment I decided to disconnect the server from the internet because I'm not able to locate the source of this misbehaviour. I'll then do a fresh install of a SuSE 9.0 and reconfigure and restart any service I'm using now. This whole thing won't let me come to sleep at night. I'm sorry that I can't present any solution to you. Regards, Andreas