httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brian Cooper" <BCoo...@RNFCorp.com>
Subject [users@httpd] Weird Traffic
Date Thu, 19 Feb 2004 20:09:35 GMT
I have a load of connections into my server (30 plus guests online
showing at present)...for me this is unusual. The access log in Apache
shows a log of strange traffic, not directed to my site. Almost as if
someone was attempting to use it as a redirector (doesn't appear to be
successful). 

 

Any thoughts on what this is? Thanks

 

Apache 2.048/PHP 4.3.4/NT 4.0 sp6a (and all hot fixes)/mySql 4.0/Nuke
7.0 (with injection patch). Full symantec av operating (and clean).
Firewall with only port 80 forwarded. It WAS at apache 1.3, until I
started seeing this...

 

Log exerpt:

 

HTTP/1.0" 404 299

193.251.187.139 - - [17/Feb/2004:14:16:53 -0600] "GET
http://video.actiongirls.com/members-area/ HTTP/1.0" 404 299

68.194.241.113 - - [17/Feb/2004:14:16:54 -0600] "GET
http://www.4ebiz.us/ebay1027/traffic.php HTTP/1.0" 404 297

69.161.57.251 - - [17/Feb/2004:14:16:54 -0600] "GET
http://www.outwar.com/page.php?x=195459 HTTP/1.1" 404 287

80.144.173.20 - - [17/Feb/2004:14:16:54 -0600] "GET
http://www.verticalsmiles.com/vsmembers/index.asp HTTP/1.1" 404 306

217.74.137.179 - - [17/Feb/2004:14:16:55 -0600] "CONNECT
login.icq.com:443 HTTP/1.0" 405 318

218.92.8.27 - - [17/Feb/2004:14:16:55 -0600] "GET
http://home.qq.com/home/?uin=11318 HTTP/1.1" 404 281

141.153.206.35 - - [17/Feb/2004:14:16:59 -0600] "GET
http://destroymyface.janswebring.com/members/ HTTP/1.0" 404 302

141.153.206.35 - - [17/Feb/2004:14:17:00 -0600] "GET
http://destroymyface.janswebring.com/members/ HTTP/1.0" 404 302

81.133.75.208 - - [17/Feb/2004:14:17:00 -0600] "GET

*************************************************************************
This email address effective immediately has changed from
 name@realtymortgage.com  to  name@rnfcorp.com.  Please
 make changes to your address books as soon as possible.

The information contained in this Realty Mortgage Corporation 
(DBA RealNET Financial Corporation) e-mail message is legally
privileged and confidential information intended only for the use
of the individual or entity named above.  If the reader of this 
message is not the intended recipient, you are hereby notified
that any dissemination, distribution, or copying of this e-mail
transmittal is strictly prohibited.  If you have received this e-mail
transmission in error, please notify us by return e-mail and destroy
all copies of the original message.  Thank you.
 
Revised 06/03


Mime
View raw message