Return-Path: X-Original-To: apmail-httpd-users-archive@www.apache.org Delivered-To: apmail-httpd-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id D5DC9119C1 for ; Wed, 16 Apr 2014 16:39:17 +0000 (UTC) Received: (qmail 88429 invoked by uid 500); 16 Apr 2014 16:39:14 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 88368 invoked by uid 500); 16 Apr 2014 16:39:14 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 88358 invoked by uid 99); 16 Apr 2014 16:39:14 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Apr 2014 16:39:14 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of tevans.uk@googlemail.com designates 209.85.217.170 as permitted sender) Received: from [209.85.217.170] (HELO mail-lb0-f170.google.com) (209.85.217.170) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Apr 2014 16:39:09 +0000 Received: by mail-lb0-f170.google.com with SMTP id s7so8473506lbd.1 for ; Wed, 16 Apr 2014 09:38:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=Z9UWKcRovbL6hJUND2tz3KDeXROLJ+TcrBRyDcQfXGo=; b=LKo3Jb+mR630TBUKrJaghwVEfh2SRxA1Dm95g9e6IS4ZLY2YKsyVFzCeVWG8Ep0dAT 8Ke5mbrDTo/mNb/3RtCdpaSfMbDo2/QWFHU4LUrNEQx3rrZ706PFtWw1MDjn/soFUJOf 0rf7eM+s2ktnOmoCeSsAVe0ZEkJZw91fCy2/fkkALLfFjwQFHYAh5y2ffhsqLKoZy4tM +zUtajwFU/rooMX+9iyLwWJhIAbg/fiZ9QAoAUDH2OX6gpRCaQhzBq+geeqgZCoAzWYd 3+5i086wDTfPqMtEwKgu2GAn+k58h579aaFXdK5Ro4hub+tJDUWNHLmW0a/YNVezZvmI 9iBg== MIME-Version: 1.0 X-Received: by 10.152.42.196 with SMTP id q4mr6116667lal.14.1397666328119; Wed, 16 Apr 2014 09:38:48 -0700 (PDT) Received: by 10.112.129.164 with HTTP; Wed, 16 Apr 2014 09:38:48 -0700 (PDT) In-Reply-To: References: Date: Wed, 16 Apr 2014 17:38:48 +0100 Message-ID: From: Tom Evans To: users@httpd.apache.org Content-Type: text/plain; charset=UTF-8 X-Virus-Checked: Checked by ClamAV on apache.org Subject: Re: [users@httpd] Fwd: apache hosting unknown sites !!! On Wed, Apr 16, 2014 at 1:24 PM, Mauricio Tavares > I guess I am more paranoid than many. :) The internet is noisy and full of terrors. If you put a server, particularly http server, on the internet and make it available, people will make all kinds of requests to it - not necessarily requests that you were anticipating. If you look carefully at the requests in that access log, all the requests failed. Most failed with an internal server error, others with a timed out request. OP: Are you actually running a bittorrent tracker on the server (or have you ever)? It looks like the requests for the tracker are the internal server error requests. Also, do those domain names resolve to your IP address? Has the owner of those urls mistakenly added your IP as an alias? Is this a new IP address that used to belong to them and they haven't updated their DNS? If you can't get the requests to stop, nor change to a different IP, the best you can do is to route them to a default vhost that simply rejects all requests. This ensures that only requests for your hostname are handled for your actual site; all these bad requests would be handled by the default vhost. Cheers Tom --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org