Forum Moderators: phranque

Message Too Old, No Replies

Unusual errors in error logs

Has anyone seen something like this?

         

AprilS

8:55 am on Feb 11, 2004 (gmt 0)

10+ Year Member



First I want to thank the helpful respondants in this forum. Your help is appreciated!

When I view our errors logs I notice a LOT of weird requests for pages that are not on our server (500+ already this month).

Below are just a few examples of what someone/something thinks should be on our server:

/ccbill/secure/ccbill.log
/dkf_historia/sk0044/Product%20LDH.htm
/Drunk-Girls-Strip/sk2209-00/T0261P.htm
/babybumblebee.htm
/new-york-city-discount-hotels.htm

As you can see - they are quite weird requests, and NOT one is the same! I doubt someone is trying to exploit a vulnerability on our system - the pages requests are just plain WEIRD. I really have NO clue what is causing this.

We use "awstats" for our log analyzer. It doesn't provide the IP address for these 404 requests so I can't see if the requests are coming from one machine or not.

Anyone ever see anything like this... or perhpas have a clue what is causing it?

tombola

12:14 pm on Feb 11, 2004 (gmt 0)

10+ Year Member



Awstats is a great stats program, but without "raw" server log files, you don't have full control of your server.
Ask your hosting company if there's a possibility to download these server log files.

AprilS

7:55 pm on Feb 11, 2004 (gmt 0)

10+ Year Member



Oh, I have control over the log files, however, they grow so quickly we have to delete them a few times a day.

bcolflesh

8:00 pm on Feb 11, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



You should examine the raw log as previously suggested - you can also uncomment the rawlog option in AWStats, which will add a form at the top of the log pages for searching the raw log.