Thread: Question about Apache Logs
hello,
have personal server setup on home connection, increase knowledge, host small website have. have been looking in apache logs , have noticed strange entries not sure about. here examples:
67.43.228.238 - - [10/jan/2012:20:54:26 -0600] "post http://216.86.158.122:6667/http/1.0" 301 340 "-" "-"
72.250.175.16 - - [10/jan/2012:20:54:38 -0600] "connect 72.250.175.12:6667 http/1.0" 301 329 "-" "-"
212.27.60.46 - - [10/jan/2012:20:54:40 -0600] "connect 212.27.60.46:1025 http/1.0" 301 328 "-" "-"
understand returned 301 code "moved impermanently" indication, bit confused client trying do. seems trying sort of redirect? port 6667 used irc apparently , 1025 ms rpc port. know is?
if telnet server on port 80 , run this, can duplicate entry in log. trying here though?
ports 6667 , 1025 not turned on on server.
appreciated. thank you.
i think these efforts use server proxy. can make sure won't happen disabling mod_proxy , friends in /etc/apache2/mods-enabled. if don't see symlinks proxy modules, ubuntu default, should okay.
Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [ubuntu] Question about Apache Logs
Ubuntu
Comments
Post a Comment