[Tfug] Question about Apache log entries.

[Leo Przybylski]

Looks to me like someone is trying to use your server as a proxy to hide 
their real location. I get those all the time. People think they can 
browse the web anonymously through my server. I save the logs and add a 
CustomLog entry so this person gets their very own log on my server. 
This way I can keep track of whatever they are doing. Just in case 
someone comes asking.

There's another thing you can do though, I don't remember it off the top 
of my head. Maybe someone else can be more enlightening.

-Leo Przybylski

Quag7 wrote:
> I was looking through my Apache logs, and I have a question.  Ordinarily
> each line in the log corresponds to a hit to a page on my server.
> 
> Letely, however I've noticed foreign http addresses showing up.  For
> example:
> 
> 24.128.170.195 - - [23/Feb/2003:01:26:59 -0500] "GET
> http://www.outwar.com/page.php?x=297382&pro=1e14c3925f8337fcb0d9b447f816493d HTTP/1.1" 302 276 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)"
> 
> I have several hundred of these hits over the course of a week. 
> outwar.com is some kind of online game.  I'm curious though why it's
> showing up as a hit to my server.
> 
>   -Quag7 
> 
> 
> _______________________________________________
> tfug mailing list
> tfug@tfug.org
> https://www.tfug.org/mailman/listinfo/tfug

-- 

-Leo Przybylski (leop at engr dot arizona dot edu)
http://foopan.nulldomain.net
http://grow.arizona.edu