Strange listing in Error logs...

[XJnick]

Hi,

I'd been noticing my BBclone counter tracking an IP address over the last few days that would always hit my site once and get my custom 404 error page.

Upon looking through my error.log for the past few days, I notice two IP addresses hitting my site once each at the end of every hour and getting the error page.

This is what a small part of the log looks like for today:

[Fri Dec 26 04:52:08 2003] [error] [client 202.79.98.155] File does not exist: /www/f/myname/htdocs/e9e476a16de63e11bfb1ce3ddf594781
[Fri Dec 26 04:52:09 2003] [error] [client 210.193.14.176] File does not exist: /www/f/myname/htdocs/e9e476a16de63e11bfb1ce3ddf594781
[Fri Dec 26 05:52:07 2003] [error] [client 202.79.98.155] File does not exist: /www/f/myname/htdocs/e9e476a16de63e11bfb1ce3ddf594781
[Fri Dec 26 05:52:08 2003] [error] [client 210.193.14.176] File does not exist: /www/f/myname/htdocs/e9e476a16de63e11bfb1ce3ddf594781
[Fri Dec 26 06:52:06 2003] [error] [client 202.79.98.155] File does not exist: /www/f/myname/htdocs/e9e476a16de63e11bfb1ce3ddf594781
[Fri Dec 26 06:52:13 2003] [error] [client 210.193.14.176] File does not exist: /www/f/myname/htdocs/e9e476a16de63e11bfb1ce3ddf594781


It is these same two IP addresses over and over near the end of every hour... I did a whois on them and get some Asian network for both.

Is this some sort of Hacking attempt? Should I be at all concerned about this? Obviously the file or whatever that they keep looking for doesn't exist.

Thanks for any advice :D

[alphadesk]

Is this some sort of Hacking attempt? Should I be at all concerned about this? Obviously the file or whatever that they keep looking for doesn't exist.Hard to say what they are looking for, but like the error code says ... "file does not exist", so I wouldn't worry about it.

[Croc Hunter]

Could be some site monitoring service like Hyperspin checking to see if port 80 is open.

[XJnick]

Your right Croc,

I completely forgot that the Hyperspin FAQ does say they use a fake file to test the server. ....Duh! :o

I almost forgot I had hyperspin still on, seeing as how www01 has been UP for so long, I've not been getting e-mails from them saying the server is down :p

Oh well, "problem" solved :D