I was looking through the error log of my server and see that there are some really strange URL errors, it's like the path for the requested document actually ends in some bits of code from text styles. There are a series of about 60 'File does not exist:' errors all from the same IP address, there are no other (Correct) page requests from this ip address, here are some sample lines of errors:
File does not exist: /home/user/public_html/some_folder_on_my_site/e</some_folder_on_my_site/index.php
File does not exist: /home/user/public_html/some_folder_on_my_site/ans-serif;
File does not exist: /home/user/public_html/some_folder_on_my_site/t-family:
File does not exist: /home/user/public_html/some_folder_on_my_site/}.middle
File does not exist: /home/user/public_html/some_folder_on_my_site/S="verdana12White"
File does not exist: /home/user/public_html/some_folder_on_my_site/Typewriter;
File does not exist: /home/user/public_html/some_folder_on_my_site/ans-serif;
File does not exist: /home/user/public_html/some_folder_on_my_site/olor:
File does not exist: /home/user/public_html/some_folder_on_my_site/rdana,Arial,Helvetica,sans-serif;
File does not exist: /home/user/public_html/some_folder_on_my_site/ER=0
File does not exist: /home/user/public_html/some_folder_on_my_site/FFFFF;}.grey
File does not exist: /home/user/public_html/some_folder_on_my_site/OWNER
File does not exist: /home/user/public_html/some_folder_on_my_site/0px;height:
I tried tracing the IP address where the requests came from but it seems it doesn't exist.
Anyone know what might be happening here?
Thanks
Strange requests in error log - (Apache, Linux)
Moderator: General Moderators
- feyd
- Neighborhood Spidermoddy
- Posts: 31559
- Joined: Mon Mar 29, 2004 3:24 pm
- Location: Bothell, Washington, USA
what other logs of this happening do you have? Such as the access logs, agent logs and such.. It may lead to some clues.
It may also be a case of someone testing a script on a remote host to see if it'd work (for doing something, I'm not sure) ... it may help to see the full page code it was being run against (final rendering sent to browser)
It may also be a case of someone testing a script on a remote host to see if it'd work (for doing something, I'm not sure) ... it may help to see the full page code it was being run against (final rendering sent to browser)
This is one of the lines from the raw access log, same IP and time as the errors from the error log:
38.118.25.60 - - [23/Jan/2006:05:30:54 +0000] "GET /some_folder_on_server/0 HTTP/1.1" 404 13399 "http://www.domain.com/some_folder_on_se ... 8fd555711b" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
Does this help any more apart from telling the Browser and platform?
Thanks
38.118.25.60 - - [23/Jan/2006:05:30:54 +0000] "GET /some_folder_on_server/0 HTTP/1.1" 404 13399 "http://www.domain.com/some_folder_on_se ... 8fd555711b" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
Does this help any more apart from telling the Browser and platform?
Thanks