The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
61 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
0
votes
1answer
36 views

GET Request for /server-status every second

I'm using an Linux server running Apache and Plesk and in the access_log, I'm seeing the following every 1 second; 127.0.0.1 - - [08/Sep/2014:14:20:06 +0000] "GET /server-status HTTP/1.1" 200 15843 ...
0
votes
2answers
30 views

Access logs of sftp on centos

Is it possible to log the sftp logged in informations (Who accessed, when and from where ) Like which sftp user have logged on to the file server , This may also contain information such as ip ...
0
votes
0answers
75 views

Nginx shows no user agent string

I have been dealing with an issue on one of my servers for quite a while now. In short, the server receives massive spikes in load - up to 50 - but the site gets almost no traffic. I know this can be ...
1
vote
0answers
101 views

Where does cPanel, Apache, or Nginx log php script access?

Synopsis Earlier today a website went down due to some database issues. After some investigation I found out that some tables were missing data. In order for me to rule out "accidental deletion" by ...
0
votes
0answers
218 views

Why do Apache access logs sometimes have two host ip addresses?

I have been trying to parse apache access logs but for some reason there are two host ip addresses separated by a comma and a space. I am thinking of just removing the second ip address, does it mean ...
0
votes
1answer
64 views

Awstats - outputting stats for merged Access_logs only producing stats for one server's log

I've been attempting this for two weeks and I've accessed countless number of sites on this issue and it seems there is something I'm not getting here and I'm at a lost. I manged to figure out how to ...
2
votes
3answers
543 views

Parseable NGINX accesslog files with delimiters

The default NGINX format is this: log_format combined '$remote_addr - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" ...
0
votes
1answer
404 views

Plesk 11.5.30 keeps re-creating access_log.processed

One of my accounts in Plesk is running dangerously low on disc space. The source seems to be the file logs/access_log.processed, which weights 1.9G. I keep deleting this file manually but Plesk ...
0
votes
0answers
547 views

How do I log the true client IP with Apache's CustomLog and the X-Forwarded-For header?

I am currently logging the contents of the X-Forwarded-For header using a CustomLog declaration in Apache. The problem is that every proxy and load balancer along the request path will add its IP to ...
2
votes
1answer
90 views

/var/log/httpd/access_log no longer being written

On a centos server, For some reason the httpd access log is no longer being written to. It is located at... /var/log/httpd/access_log I have logs in there from a couple of days ago but then they ...
-3
votes
1answer
397 views

What does mod_pagespeed exactly do? [closed]

I happen to see in my apache log files that my server is getting hit by a specific IP address. and all the pages that are requested from this IP address has an entry in the apache file as ...
0
votes
2answers
177 views

Unusual traffic with POST status

Here's a sample log that came from my apache access log 83.46.27.159 - - [29/Aug/2013:18:20:03 +0800] "POST / HTTP/1.1" 301 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" ...
0
votes
1answer
41 views

Referrer in access.log is a directory

It seems that the referrer on the following log is a folder. 112.200.208.5 - - [29/Jul/2013:20:43:14 +0800] "GET /sites/default/files/download/argie/pos-code.zip HTTP/1.1" 206 294677 ...
0
votes
1answer
547 views

How to block Bad robots, spiders, crawlers and harvesters

I'm sick and tired of this bad robots, spiders, crawlers and harvesters. I have already configured my server to block IP connected for 5 minutes and with maxretry of 250 using fail2ban. But still some ...
2
votes
1answer
115 views

I'm seeing website that is not mine in access.log

I'm just wondering why there are some website on my access.log that is not mine. Can anyone tell me if my site is used as a proxy? Here's the log: 121.54.66.50 - - [22/Jul/2013:08:23:56 +0800] "GET ...
1
vote
2answers
127 views

access log to contain indication when someone telnet my server and typed garbage

I have apache 2.2.22 server installed on ubuntu linux. I created a virtual host on port 443 and I want all telnet indications to that port to be listed in the access log. so for example if I telnet ...
0
votes
2answers
100 views

Should I be concerned with seeing this in my logs?

The following requests (this is about half of them) in my Nginx access log have all come over the span of a few minutes from an IP that is registered to an ISP in Vietnam (I could provide the IP, but ...
1
vote
1answer
151 views

access.log awk command to view bandwidth out per virtualhost

My access log lists multiple domains. What awk command could I use to view each domain's bandwidth individually? It would also be nice to specify a date range.
1
vote
1answer
135 views

How to log a request to apache access log if it's cached by Varnish

I have a service based on parsing apache access logs, so I need to log there even when Vanish is turned on. No I just simply tell Varnish to do not cache specific urls: if (req.url ~ "(foo|bar)") ...
0
votes
1answer
97 views

Apache - filter urls into separate log files

With apache, is it possible to filter out log requests into separate files based on the URL? So for example: 127.0.0.1 - - [08/Apr/2013:17:06:26 +0100] "GET /this/is/a/url.html HTTP/1.1" 200 67486 ...
1
vote
1answer
39 views

Nginx keeps logging on main access_log

I have setup nginx in my server as a reverse proxy to haproxy. I have configured my own log_format and assigned it to every virtual host I have. However I have not turned off main access_log in ...
0
votes
1answer
108 views

Large Number of 206 codes in Access Log

I'm finding a lot of 206 access codes in my Apache access log. After looking at the access log it seems that a number of IPs would hit the server multiple time for partial content on a number of large ...
0
votes
1answer
95 views

Apache reports status 200 but file doesn't exist in the server

In Apache access log I have these lines repeating all over the file: 186.44.190.132 - - [22/Feb/2013:23:41:34 +0100] "POST /includes/wishlistcwh.php HTTP/1.1" 200 42416 "-" "Mozilla/5.0" ...
0
votes
1answer
369 views

How can I get unique IPv4 and IPv6 visitor counts on nginx access.log in shell?

How do I get some stats on unique IPv4 and IPv6 visitors by looking at a nginx access.log with UNIX CLI? I use the standard combined pre-defined format for access_log.
1
vote
1answer
234 views

Strange code in server access log

So I found this in my logs earlier today: 174.0.111.178 - - [17/Feb/2013:17:39:49 -0900] ...
0
votes
1answer
311 views

Some weird stuff in access_log

I decided to take a look at /opt/lampp/logs/access_log today on my server and found a number of requests like this: ***.***.**.10 - - [03/Nov/2012:12:57:45 +0000] "GET ...
1
vote
2answers
384 views

Nginx 400 errors due to random encoded string starting with “\x” from random IP addresses

I assume these are some sort of bots, but would like to know what are they trying to do to my server. The logs in questions are below and the IP address has been changed from the original. ...
0
votes
3answers
11k views

Where is the Apache Access Log File located (Mac Apache)?

I did a little reading online, and I think that the Apache Access Log contains all of the requests sent to the server. However, I couldn't gather from the websites whether this is actually stored in ...
3
votes
1answer
3k views

How to completely disable apache access log? [closed]

I'm running WAMP server on Windows Server 2003, Apache 2.2, and I would like to completely disable writing into the access log. It would be neat if I could do the following, but I'm on Windows: ...
0
votes
3answers
273 views

Apache access log and server outages

I've happened accross a odd issue this morning and I'm not sure where to go from here. We use a couple of site up time monitoring services (pingdom, siteuptime) that essentially ping our server to ...
8
votes
1answer
2k views

Empty/Null Apache request entries in access log

This entry got logged in a Apache access log: IP ADDRESS - - [00/00/0000:00:00:00 -0000] " " 301 - "-" "-" It was detected by LogWatch as a null HTTP Response and also got marked as a successful ...
0
votes
1answer
324 views

Apache returns 400 instead of 200 at DocumentRoot

I am seeing a lot of these odd entries in my Apache access log: SOME IP ADDRESS - - [23/Feb/2012:03:06:38 -0800] "GET /" 400 460 "-" "-" If I try to access the Apache document root, I get: MY IP ...
1
vote
1answer
78 views

Weird entries in access logs

2-5 times per day my web server gets the same number of requests, and the same requests, but appears to have no impact on.. anything. The requests are here http://pastebin.com/3J6FUNr9 It looks ...
1
vote
3answers
2k views

Disable access logging for domains. (Using CentOS & Apache)

I am trying to disable access logging for domains on my dedicated server for over 10 HOURS. I read over 70 pages while I'm searching. I asked on Parallel's forum, I asked stackoverflow in another ...
2
votes
0answers
67 views

How to disable access_log for DOMAINS? [duplicate]

Possible Duplicate: Disable access logging for domains. (Using CentOS & Apache) I can disable access_log for server BUT I can't disable access_log for domains. Do you have any solution? ...
1
vote
2answers
120 views

unidentifiable httpd log rotator

I have my own server instance which is centos 5.7 and have installed apache some time ago. Now I noticed that my log files are rotating. I couldn't remember if I had set up something or not since ...
1
vote
2answers
609 views

How to find out why a request takes long to appear in apache access log?

I have a client software which calls and apache httpd server installed on the same machine. Before calling the apache logs a log entry: 2011-11-23 13:27:43,777 | 8323|1381677376 | root | DEBUG | ...
0
votes
1answer
41 views

Server responce 200 to url that does not exist

I have such records in my Apache 2.2 one of the virtual hosts access_log file: GET /index.php/image-gallery/animals/57-wobbegone?c=2&s=8&p=384&l=ru HTTP/1.1" 200 19549 "-" "Mozilla/5.0 ...
0
votes
2answers
327 views

Is this weird Apache access log a security risk?

Below is a copy of a weird access log I found in my Apache logs folder: 127.0.0.1 - - [24/Oct/2010:13:49:45 +0200] "GET /x64 HTTP/1.1" 301 229 127.0.0.1 - - [24/Oct/2010:13:49:48 +0200] "GET /x64/ ...
1
vote
4answers
765 views

Solution for DDOS [duplicate]

My server is under DDoS attacks. I see my access log and get something: 968966 93-97-53-41.zone5.bethere.co.uk - - [27/Jul/2011:12:13:58 +0700] "GET /forum/forum.php HTTP/1.1" 200 91231 "-" ...
2
votes
1answer
1k views

Should I keep access_log turned on in Nginx?

Just thinking here from performance perspective that maybe turning access_log off; for my websites would improve the loading speed (even though it could be very minimal) but yea anyway how could ...
0
votes
1answer
2k views

/var/log/squid/access.log is empty when I use proxy from remote computers

I have configured squid to work as NAT using apt-get install squid iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.0.1:3128 iptables -t nat -A ...
0
votes
2answers
80 views

Only view access_log entries from a certain IP in SSH

I've got a large multi-year access_log and I need to view all of the entries for a certain IP address from SSH. The format is: 111.111.111.111 - ... 222.222.222.222 - ... 111.111.111.111 ...
5
votes
2answers
769 views

List top 404 URLs in Apache access_log

I'm looking for a command to list the 10 or 20 top 404 error URLs out of my apache access_log. Can anyone help me with this? thanks
0
votes
1answer
82 views

What are these isolated resource requests in Apache's access_log?

I was looking at my Apache access log and came across some strange requests. A single IP address will access several resources (mostly css style sheets and images), but no actual pages. Sometimes ...
0
votes
4answers
202 views

Strange URLs in access log. What could it be?

I am currently investigating an instability problem in my customer's web site. While looking through the access log I noticed a sudden burst of activity from one particular IP. It started off ...