in one of my websites I am logging all url requests made to the server. I log that data for stats purpose to improve the website.
The logs look like
http://example.com/search 2016-01-12 23:03:09
http://example.com/post/1234 2016-01-12 23:03:12
..........
So, that looks normal. I've now spotted in the logs something that doesn't make sense to me, I have few hundreds entries with a different domain
http://dhg.example.org/httptest.php 2016-01-10 20:12:15
And in the past I had a few similar to that, with my domain or with the server IP address
http://example.com/httptest.php
http://192.0.123.12/httptest.php
I was wondering how is that possible that requests made to my server have that url and not my website url or server IP.
Should I be worried? Is that some kind of attack to my server?
Edit
To be specific, the app that's running on the server is logging those urls, not the server per se. So on each page request my script is logging the url in the $_SERVER
array