Re: [CentOS] Strange queries in httpd log

2012-02-24 Thread Jussi Hirvi
On 24.2.2012 12.22, Markus Falb wrote: > It was a check for proxy. > you can try something like this: > > $ telnetwww.my_real_domain.com 80 > Trying ... > Connected towww.my_real_domain.com. > Escape character is '^]'. > GEThttp://financeande.com/feed/feed.php HTTP/1.1 > host:www.my_real_domain.c

Re: [CentOS] Strange queries in httpd log

2012-02-24 Thread Markus Falb
On 24.2.2012 10:17, Jussi Hirvi wrote: > On 24.2.2012 10.27, John R Pierce wrote: >> On 02/24/12 12:10 AM, Jussi Hirvi wrote: >>> ...when the DNS shows that the domain financeande.com is hosted >>> elsewhere? What kind of query can they have used? >> >> a forged one with a bogus vhost. > > I get a

Re: [CentOS] Strange queries in httpd log

2012-02-24 Thread Jussi Hirvi
On 24.2.2012 10.27, John R Pierce wrote: > On 02/24/12 12:10 AM, Jussi Hirvi wrote: >> ...when the DNS shows that the domain financeande.com is hosted >> elsewhere? What kind of query can they have used? > > a forged one with a bogus vhost. I get almost similar entry, if I hit this on the browser:

Re: [CentOS] Strange queries in httpd log

2012-02-24 Thread John R Pierce
On 02/24/12 12:10 AM, Jussi Hirvi wrote: > ...when the DNS shows that the domain financeande.com is hosted > elsewhere? What kind of query can they have used? a forged one with a bogus vhost. -- john r pierceN 37, W 122 santa cruz ca mid-left

[CentOS] Strange queries in httpd log

2012-02-24 Thread Jussi Hirvi
How is it possible that I get this kind of queries on my webserver (extract from httpd access log): 58.218.199.250 - - [22/Feb/2012:15:23:06 +0200] "GET http://financeande.com/feed/feed.php HTTP/1.1" 404 291 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" ...when the DNS shows that th