Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am baffled by some entries in my server logs, specifically the web-server logs. Other than normal, expected traffic, I have noticed three types of request errors (eg 404, etc.):

  1. Broken links, ie links from old, external pages that point to pages that are no longer here
  2. Sequences of probes, ie some jerk trying to hack in by scanning my server for a series of exploitable admin type pages and such
  3. What appear to be completely random requests for things that have never existed on the server or even have anything to do with the server, and appear by themselves (ie not a series of requests like the probes)

Could it somehow be a mistyped URL or IP? That’s about the only thing that I can think of, but still, how could I get a request on say, foobar.dyndns.org (12.34.56.78) for something like www.wantsfly.com/prx2.php or /MNG/LIVE or http://ant.dsabuse.com/abc.php?auth=45V456b09m&strPassword=X%5BMTR__CBZ%40VA&nLoginId=43. (Those are a few actual requests from my logs.)

Can someone please explain scenario three to me? Thanks.

share|improve this question

1 Answer 1

Those are probably attempts to use your web server as a web proxy.

share|improve this answer
    
Thanks for the suggestion; I’ll look into it today. –  Synetech Mar 15 '10 at 12:07

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.