What is this web site trying to do?

linuxmaillists at charter.net linuxmaillists at charter.net
Sun Jun 3 21:54:37 UTC 2007


On Sunday 03 June 2007, Tim wrote:
> The logwatch is really only a brief summary.  You want to
> look at the proper webserver logs, in /var/log/httpd
> (access or error logs).  Use grep to find the diyproxy
> entry in them.  You'll probably find that someone's
> trying to see if they can use your webserver as a proxy,
> for their own nefarious purposes.

Tim thanks for pointing me to the appropriate log file.

What is the AP that 69.28.79.34 or http://www.diyproxy.com/ 
was looking for as recorded in my error log

[Fri Jun 01 19:15:28 2007] [error] [client 69.28.79.34] File 
does not exist: /var/www/html/ap

I know the next entry from Asia 222.216.28.147 or 
http://www.loanscandyloans.com/ was up to no good

[Sat Jun 02 22:14:26 2007] [error] [client 222.216.28.147] 
File does not exist: /var/www/html/php

This favicon.ico error happens a lot both internally and 
externally what would be causing this? I have nothing on my 
pages that would be pointing a browser to a favicon.ico 
file or image.

[Sun Jun 03 01:10:45 2007] [error] [client 64.53.219.226] 
File does not exist: /var/www/html/favicon.ico


-- 
Registered Linux User 342662
http://counter.li.org




More information about the users mailing list