httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Roger Haase" <haas...@gmail.com>
Subject [users@httpd] Wacko Incoming URLs in Log File
Date Sat, 03 Nov 2007 16:40:55 GMT
About once a week or more often, I get some unusual entries in my apache log
file similar to these:
159.148.97.91 - - [31/Oct/2007:23:44:31 -0700] "CONNECT
195.175.37.70:8080HTTP/1.0" 302 102 "-" "-"
159.148.97.91 - - [31/Oct/2007:23:44:32 -0700] "CONNECT
159.148.96.222:80HTTP/1.0" 302 102 "-" "-"
159.148.97.91 - - [31/Oct/2007:23:44:32 -0700] "GET
http://www.hi.lv:80/counter1.php HTTP/1.0" 404 284 "-" "-"
159.148.97.91 - - [31/Oct/2007:23:44:33 -0700] "GET
http://www.hi.lv:80/counter1.php HTTP/1.0" 404 284 "-" "-"

I am in Arizona and the traffic seems to originate in Amsterdam.  The
www.hi.lv host apears to be in Latvia.  My IP address is no where near
195.175.37.70 or 159.148.96.222.  On the other occasions, the urls are
from other equally strange locations and never seem to repeat.  On
most occasions, there is only one entry at a time.

Is this misdirected internet junk that I should report to my ISP as
their problem or is this a hacker attempt?

Roger

Mime
View raw message