Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a small VPS with Apache + php on which i host just a small blog.

I've been looking through its logs and seen tons of calls that (i guess) have the hostname faked. Here's a sample. Obviously these calls have nothing to do with the site I'm hosting. I blocked about 20 ips that were showing up more often by dropping them in iptables but the log file is still getting fat.

I've looked in Apache config to make sure that ProxyRequests is set to Off.

Is there any better way to stop them?

share|improve this question
5  
Looks like standard Internet Background Radiation to me. Not much you can do, other then pulll the plug. –  Zoredache Jan 29 '12 at 21:29

1 Answer 1

up vote 4 down vote accepted

Apache is returning a 404 error in response to the proxy attempts, so that means you server is not behaving as an open proxy (yay!). For all intents and purposes, as long as they're not hurting the performance of your system (which is highly unlikely), these are harmless - just ignore them.

share|improve this answer
    
You're always gonna see background traffic like this, which shouldn't be a problem unless it's a lot. You should make sure your 404 page is lightweight, i.e. requires little to no dynamic processing to render, so you can handle a lot of this traffic without increasing your load. –  Martijn Heemels Jan 29 '12 at 21:44
    
Thanks for the answer. It was curious to find that Apache still lets these through even if the site is setup as a vhost that specifies a hostname. –  Cristian Vrabie Jan 29 '12 at 21:54
1  
Requests without a Host header will be handled by the default vhost. –  EEAA Jan 29 '12 at 22:02
    
Got it. Thanks! –  Cristian Vrabie Jan 29 '12 at 23:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.