Can somebody help me to understand the strange GET requests logged in access.log and error.log ?

Carlo Traversa <traversa.carlo@xxxxxxxxx> · Sat, 11 Aug 2012 12:33:33 +0200

Hi all.
This is the first time I'm writing on this mailing list so I hope this
is the right place to ask help for my problem.

As in the subject If I check the access.log and error.log I see a huge
number of CONNECT, GET, POST requests that make no sense to me (please
see *.log files in logs.zip). No one of those requests are related to
any of my hosted sistes. They aren't dangerous for apache server (or I
hope so) because the reverse proxying is disabled (is it right?) but
they are band consuming. Is there any way to avoid to receive those
requests working on apache configuration? Or maybe there is something
wrong in my configuration files?

I use Apache Named-based Virtual Host with Tomcat 6.x webapps and my
server configuration is the following:

Server details:
- Ubuntu 10.04 64 bit
- Apache/2.2.14
- Tomcat 6.x

modules enabled:
mod_proxy, mod_proxy_http, mod_proxy_ajp

Configuration details:
/etc/apache2/apache2.conf
Standard configuration ......... plus at the end the log file for virtual hosts
CustomLog /var/log/apache2/other_vhosts_access.log vhost_combined

/etc/apache2/proxy.conf
<IfModule mod_proxy.c>
    ProxyRequests Off
    <Proxy *>
        AddDefaultCharset off
        Order deny,allow
        Deny from all
    </Proxy>
    ProxyVia Block
</IfModule>

/etc/apache2/sites-enabled/mysite1
<VirtualHost *:80>
    ServerName mysite1.tld
    ServerAlias www.mysite1.tld
    DocumentRoot /var/www/mysite1/
    DirectoryIndex index.html index.jsp
    <Proxy *>
        Order Allow,Deny
        Allow from all
    </Proxy>
    ProxyPass /mysite1 ajp://ip_address_tomcat1:8009/mysite1
    ProxyPassReverse /mysite1 ajp://ip_address_tomcat1:8009/mysite1
</VirtualHost>

/etc/apache2/sites-enabled/mysite2
<VirtualHost *:80>
    ServerName mysite2.tld
    ServerAlias www.mysite2.tld
    DocumentRoot /var/www/mysite2/
    DirectoryIndex index.html index.jsp
    <Proxy *>
        Order Allow,Deny
        Allow from all
    </Proxy>
    ProxyPass /mysite2 ajp://ip_address_tomcat2:8009/mysite2
    ProxyPassReverse /mysite2 ajp://ip_address_tomcat2:8009/mysite2
</VirtualHost>

/var/www/mysite1/index.html
<html>
<head>
<SCRIPT LANGUAGE="JavaScript">
<!--
window.location="http://www.mysite1.tld/mysite1/";;
// -->
</script>
</head>
<body>
        <div style="visibility:hidden;">
                <a href="http://www.mysite1.tld/mysite1/"; />
        </div>
</body>

/var/www/mysite2/index.html
<html>
<head>
<SCRIPT LANGUAGE="JavaScript">
<!--
window.location="http://www.mysite2.tld/mysite2/";;
// -->
</script>
</head>
<body>
        <div style="visibility:hidden;">
                <a href="http://www.mysite2.tld/mysite2/"; />
        </div>
</body>