Wacko Incoming URLs in Log File

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



About once a week or more often, I get some unusual entries in my apache log file similar to these:

159.148.97.91 - - [31/Oct/2007:23:44:31 -0700] "CONNECT 195.175.37.70:8080 HTTP/1.0" 302 102 "-" "-"
159.148.97.91 - - [31/Oct/2007:23:44:32 -0700] "CONNECT 159.148.96.222:80 HTTP/1.0" 302 102 "-" "-"
159.148.97.91 - - [31/Oct/2007:23:44:32 -0700] "GET http://www.hi.lv:80/counter1.php HTTP/1.0" 404 284 "-" "-"
159.148.97.91 - - [31/Oct/2007:23:44:33 -0700] "GET http://www.hi.lv:80/counter1.php HTTP/1.0" 404 284 "-" "-"
I am in Arizona and the traffic seems to originate in Amsterdam.  The 
www.hi.lv host apears to be in Latvia.  My IP address is no where near 195.175.37.70 or 159.148.96.222.  On the other occasions, the urls are from other equally strange locations and never seem to repeat.  On most occasions, there is only one entry at a time.
Is this misdirected internet junk that I should report to my ISP as their problem or is this a hacker attempt?
Roger

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux