Strange apache access

m0rg · 02-09-2007, 09:47 AM

Hi, I've just looked at my apache access_log file and found some strange requests...

I got plenty of logs like this:

Code:

xx.xxx.xxx.xxx - - [09/Feb/2007:15:36:56 +0100] "GET / HTTP/1.0" 200 2609

When I say plenty, I mean about one thousand since december. All from the same ip address, they don't request any page other that the server's root.

There are multiple requests everyday, often occuring at a few minutes of interval...

Any idea about this?

Thanks

yodermk · 02-10-2007, 08:42 AM

Could be something phishing for email addresses to spam. You might turn on user agent logging and see if it tells you what it is.

m0rg · 02-10-2007, 09:03 AM

I'm going to try this, thanks.

I'll post the results

m0rg · 02-10-2007, 10:55 AM

In the log it says that the user-agent and referrer are undefined ....

I guess this mean this is some sort of bot testing my server, what can I do to determine what it is?

Is there any way to block those kind of requests?