Tagged Questions

0
votes
1answer
478 views

Logwatch httpd - hacks and probes

Sometimes in my daily logwatch report, I notice that there is a section under httpd for "attempts to use known hacks..." and another section about how many sites probed the server. I have a few ...
5
votes
1answer
552 views

Empty/Null Apache request entries in access log

This entry got logged in a Apache access log: IP ADDRESS - - [00/00/0000:00:00:00 -0000] " " 301 - "-" "-" It was detected by LogWatch as a null HTTP Response and also got marked as a successful ...
0
votes
1answer
233 views

Apache logs on Debian GNU/Linux shows windows executable files

I use logwatch to watch my server logs. It shows this in httpd log section: 19033 Windows executable files (502.53 MB) This is a Debian GNU/Linux server. So it shouldn't be any Windows executables. ...
0
votes
1answer
790 views

Logwatch: connection attempts using mod_proxy

Today I noticed this entry in my log file: Connection attempts using mod_proxy: 175.180.113.83 -> 66.135.210.61:80: 1 Time(s) This is something I do not normally see in my logs. I have a few ...
0
votes
1answer
2k views

How can I get logwatch to process alternate apache logs?

CentOS 5 | Apache 2.2.3 | LogWatch 7.3 Hello All, I have Apache running on a CentOS box and am hosting multiple VirtualHosts. Each of these virtual hosts has a separate access log. For example: ...
2
votes
5answers
1k views

Including hostname in apache logwatch reports

When hosting multiple domains with apache it's useful to see the logwatch apache output with the virtual host name included, but I only get: --------------------- httpd Begin ...