0

I have a small VPS with Apache + php on which i host just a small blog.

I've been looking through its logs and seen tons of calls that (i guess) have the hostname faked. Here's a sample. Obviously these calls have nothing to do with the site I'm hosting. I blocked about 20 ips that were showing up more often by dropping them in iptables but the log file is still getting fat.

I've looked in Apache config to make sure that ProxyRequests is set to Off.

Is there any better way to stop them?

Improve this question
1

1 Answer 1

Reset to default
4

Apache is returning a 404 error in response to the proxy attempts, so that means you server is not behaving as an open proxy (yay!). For all intents and purposes, as long as they're not hurting the performance of your system (which is highly unlikely), these are harmless - just ignore them.

Improve this answer
3
  • You're always gonna see background traffic like this, which shouldn't be a problem unless it's a lot. You should make sure your 404 page is lightweight, i.e. requires little to no dynamic processing to render, so you can handle a lot of this traffic without increasing your load.
    – Martijn Heemels
    Jan 29, 2012 at 21:44
  • Thanks for the answer. It was curious to find that Apache still lets these through even if the site is setup as a vhost that specifies a hostname.
    – Cristian Vrabie
    Jan 29, 2012 at 21:54
  • 1
    Requests without a Host header will be handled by the default vhost.
    – EEAA
    Jan 29, 2012 at 22:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .