Forum Moderators: DixonJones

Message Too Old, No Replies

Help Interpreting Server Log Entry

Not sure what forum to post in...

         

EarleyGirl

10:15 pm on May 14, 2007 (gmt 0)

10+ Year Member



Can anyone help me with what the below log entry means? Isn't the IP a localhost IP? If so, what does that mean? Someone has been trying to hack into the site and I'm trying to prevent it. I ran across this entry looking for the other hacker. I'm starting to get overwhelmed with these guys! Can anyone help?

127.0.0.1 - - [01/May/2007:02:00:00 -0500] "GET /images/foo.jpg HTTP/1.0" 200 6429 "http://www.foo.com/" "Mozilla/4.03 [en] (Win95; I ;Nav)"

bsterz

2:39 am on May 17, 2007 (gmt 0)

10+ Year Member



Do you have a firewall? Generally speaking, any firewall should be able to block requests trying to appear to be from non-routable IP's such as that.

I just use IPTables - if you need some code lemme know.

b

EarleyGirl

3:10 pm on May 18, 2007 (gmt 0)

10+ Year Member



Thanks, bsterz. Unfortunately, this is client's site I've taken over and they are on a shared host. So, it does appear to be a hacker, is that correct? What can be done about this? The host is not helping at all with this.

TIA,
eg