Forum Moderators: phranque
I have noticed some wierd entries in my access log and was wondering if someone could have a look and tell me what is going on here....
I have strictly refused access to my server from ip addresses beginning with 210, 218, 221 and others because of this activity, that is the reason for the 403.
What is it that is trying to be done here?
210.***.188.168 - - [21/Mar/2005:18:38:05 -0600] "POST http://24.**.41.199:25/ HTTP/1.1" 403 224 "-" "-"
221.***.124.109 - - [21/Mar/2005:18:38:14 -0600] "GET http://search.ep****.com/getresults.asp?aff=journal&ip=24.72.54.151&pagesize=25&keyword=domain+
registration++ HTTP/1.1" 403 322 "http://reade-*******.com/search.php?keywords=domain+registration++" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT 5.2)"
221.***.216.125 - - [21/Mar/2005:18:38:17 -0600] "GET http://www.go*******.com/search.php?username=index&keywords=guitars HTTP/1.0" 403 272 "http://www.go*******.com" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.1)"
<snip>
[edited by: jdMorgan at 11:12 pm (utc) on Mar. 22, 2005]
[edit reason] Snipped, obscured specifics, fixed wrap. [/edit]
DUH
