Apache error_log repeated attempts to access forum.php

Posted by bMon on Server Fault See other posts from Server Fault or by bMon
Published on 2011-02-20T00:13:55Z Indexed on 2011/02/20 7:27 UTC
Read the original article Hit count: 573

Filed under:
|
|
|
|

About every two seconds I am getting:

[Sat Feb 19 19:00:01 2011] [error] [client 69.239.204.217] script '/var/www
/html/forum.php' not found or unable to stat
[Sat Feb 19 19:00:04 2011] [error] [client 69.239.204.217] File does not exist: /var/www/html/404.shtml

..in my /var/log/httpd/error_log file.

Sometimes the request will be for forum_asp.php.

I'm assuming its a bot trying to access insecure forum files, but I'm not so sure since it appears each is a unique IP and not just a few rouge IPs hitting it consecutively. And whois results of the ip's aren't all the classic ISP in Russia or China, they are more end user address (comcast, etc).

Any insight into whats going on here would be appreciated.

Also, any techniques people use to do a "live monitor" of web traffic would be appreciated. Right now I'm doing a:

tail -f error_log

Thanks.

© Server Fault or respective owner

Related posts about centos

Related posts about apache2