You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by sh...@matavnet.hu on 2002/08/26 18:26:56 UTC

Newbie question: weird log entries

Hi!

We have a Linux box with Squid proxy and Qmail. Last week I installed 
the Apache httpd server. The httpd.conf is mostly the default, I 
changed only the Document root. It works fine, but I have a lot of 
weird entries in access.log:

61.163.167.66 - - [09/Aug/2002:11:48:01 +0200] "GET 
http://www.compactbanner.com/adserver/468x60/start.php?site=kesbbnwt&r
otation=120 HTTP/1.0" 404 926

218.14.184.123 - - [09/Aug/2002:12:32:42 +0200] "GET 
http://directory.engine54.com/?ai=310632&ti=8&js=1 HTTP/1.0" 200 

61.53.93.86 - - [09/Aug/2002:12:46:37 +0200] "GET 
http://www.saybyebye.net/adserver/start.php3?site=rekgcui HTTP/1.0" 
404

etc etc. I have a lot of this stuff in the log, beside the "real" 
traffic. 
I really dont understand. My server is www.kdg.sulinet.hu, a web 
server only for my highschool. Why are so many GETs to outside my 
domain in my log? Is a security leak in my server? Please help me.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


[users@httpd] Re: Newbie question: weird log entries

Posted by Joshua Slive <jo...@slive.ca>.
shihaya@matavnet.hu wrote:
> Hi!
> 
> We have a Linux box with Squid proxy and Qmail. Last week I installed 
> the Apache httpd server. The httpd.conf is mostly the default, I 
> changed only the Document root. It works fine, but I have a lot of 
> weird entries in access.log:
> 
> 61.163.167.66 - - [09/Aug/2002:11:48:01 +0200] "GET 
> http://www.compactbanner.com/adserver/468x60/start.php?site=kesbbnwt&r
> otation=120 HTTP/1.0" 404 926

See:
http://httpd.apache.org/docs/misc/FAQ.html#proxyscan

Joshua.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org