Re: Strange entries in Apache access_log

From: //Stany (stany@NotBSD.org)
Date: 09/01/01 

Date: Sat, 1 Sep 2001 14:24:07 -0400 (EDT)
From: //Stany <stany@NotBSD.org>
To: Jose Nazario <jose@biocserver.BIOC.cwru.edu>
Subject: Re: Strange entries in Apache access_log
Message-ID: <Pine.GSO.4.30.0109011420590.28807-100000@Llewella.NotBSD.org>

On Thu, 30 Aug 2001, Jose Nazario wrote:
> On Thu, 30 Aug 2001, Bart Haezeleer wrote:

> > 63.251.5.46 - - [30/Aug/2001:09:20:04 +0200] "GET
> > http://www.yahoo.com/index.html HTTP/1.1" 200 2890
> some sort of screwup? the 200 return code is interesting ...

Looks like this was a search for web proxies.

> > Is this something to worry about?
> not much. just a scanner.

I would be concerned - not only they are using your bandwidth, they can
also use your system for "carding" something on the internet, and shift
the blame onto you. Or use your system to bypass access restrictions. Or
any of the miriad of other things.

Signed:
//Stany 

-- 
+-------+ Stanislav N Vardomskiy - Procurator Odiosus Ex Infernis[TM] +-------+
| "Backups we have; it's restores that we find tricky." Richard Letts at ASR  |
| This message is powered by JOLT!  For all the sugar and twice the caffeine. |
+--------+ My words are my own.  LARTs are provided free of charge. +---------+

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • Re: Monitoring network traffic per process
    ... I understand that it doesn't have much use with Apache and sorts ... Problem was on one server there are spikes in the traffic, ... My guesses are some sort of hack/attack ... there are an extremely large amount of this kinda packets flying through the ...
    (comp.os.linux.networking)
  • Re: Cheap Hardware for Home Network
    ... > apache, sftp, printer server, a fileserver, etc. ... > sort of hardware setups people could ... > I want to neglect the latter two- what sort of specs should I be ... > a mobo with onboard gigabit ethernet, video, and sound (only the first ...
    (freebsd-questions)
  • Re: [opensuse] How can I setup live viewing of logs via a web browser?
    ... without changing the log file? ... (like sort the output via .conf file in ... apache to do the sort. ...
    (SuSE)
  • Re: Strange entries in Apache access_log
    ... On Thu, 30 Aug 2001, Bart Haezeleer wrote: ... Level Access) ... some sort of screwup? ...
    (Incidents)
  • Re: PHP - HTML
    ... Some sort of rewrite? ... Probably easiest with Apache's MultiViews (assuming you use Apache, ...
    (comp.lang.php)