LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 12-04-2016, 08:25 PM   #1
packets
Member
 
Registered: Oct 2005
Posts: 328

Rep: Reputation: 32
apache lots of GET logs. is this ok?


I am seeing lots of GET on my apache logs. I am not sure if this is ok. Should I worry about this?

Code:
192.168.1.12 - - [05/Dec/2016:10:22:23 +0800] "GET /g20161584-bstsux-zgdg-lhbjw-cepu-dxgs-vdwco-uukpfs-b43909-chnk-vhns/ HTTP/1.1" 404 232461
192.168.1.12 - - [05/Dec/2016:10:22:39 +0800] "GET /ywwkh-yiccjf-pxhyzi-g20161587-qzoyblpl/lbvf-oxwxpb-ewzyo-b36412-hutnugah-swabvlvl.cgi HTTP/1.1" 404 232461
192.168.2.12 - - [05/Dec/2016:10:22:57 +0800] "GET /b1410-kfbbcrrq-stodh/g20161582-bjdrmyf-vyecbi-ujkdpvih/ HTTP/1.1" 404 232461
192.168.2.12 - - [05/Dec/2016:10:23:14 +0800] "GET /nmpjnq-dsuhnjqk-hhaevmej-mjnvsx-andgqrg-qabilavx-ajfcb-b34261-oxwsqf-g20161583-ekhhma/ HTTP/1.1" 404 232461
192.168.2.12 - - [05/Dec/2016:10:23:33 +0800] "GET /jpsdal-gtek-knkyl-othf-goed-zrgye-ixyrdj-ikdn-rtvf-g20161589-b38609-pepuvc/ HTTP/1.1" 404 232461
 
Old 12-04-2016, 08:42 PM   #2
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 9,235
Blog Entries: 4

Rep: Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262Reputation: 3262
Why would this traffic be coming, apparently, from inside your local network, at 192.168.1.12 or 192.168.2.12?

After all, "192.168.0.0/16" is a non-routable, internal only network address. It would superficially seem that this traffic is not coming from the Internet.

Obviously, there is something funny going on here.
 
Old 12-04-2016, 08:48 PM   #3
packets
Member
 
Registered: Oct 2005
Posts: 328

Original Poster
Rep: Reputation: 32
I have a load balancer and that IP is local. That explains the local ips.
 
Old 12-05-2016, 01:10 AM   #4
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 5,676
Blog Entries: 3

Rep: Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908Reputation: 2908
Quote:
Originally Posted by packets View Post
I have a load balancer and that IP is local. That explains the local ips.
There are two Apache modules that can adjust the headers so that your logs can show the external IP number instead of that of the proxy / load balancer. They are mod_remoteip and mod_rpaf. One does more, but both do the job.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Back up logs file and create a script showing the backed up logs and the running logs Billy_6052 Programming 5 12-13-2014 02:32 AM
Zoneminder issues with Provideo PV-981-16. - Lots of logs and Descriptions Marty4344 Ubuntu 1 02-23-2012 08:56 AM
Apache hanged with lots of process in processlist tanveer Linux - Server 2 02-19-2009 07:53 PM
lots of outbound SYN_SENT from apache mercyop Linux - Networking 10 01-17-2006 08:30 AM
Apache logs - ???Linux logs??? mylo2003 Linux - General 3 08-07-2003 04:49 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 11:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration