okay
domain-access.log
Code:
sudo tail -20 /var/log/apache2/users/domain-access.log
62.202.27.74 - Jean-Marc [16/Dec/2008:11:16:58 +0100] "GET /administrator/templates/khepri/images/menu/icon-16-plugin.png HTTP/1.1" 200 560
62.202.27.74 - Jean-Marc [16/Dec/2008:11:16:58 +0100] "GET /administrator/templates/khepri/images/menu/icon-16-themes.png HTTP/1.1" 200 892
62.202.27.74 - Jean-Marc [16/Dec/2008:11:16:58 +0100] "GET /administrator/templates/khepri/images/menu/icon-16-language.png HTTP/1.1" 200 975
62.202.27.74 - Jean-Marc [16/Dec/2008:11:16:58 +0100] "GET /administrator/templates/khepri/images/menu/icon-16-massmail.png HTTP/1.1" 200 782
62.202.27.74 - Jean-Marc [16/Dec/2008:11:16:58 +0100] "GET /administrator/templates/khepri/images/menu/icon-16-checkin.png HTTP/1.1" 200 589
62.202.27.74 - - [16/Dec/2008:11:28:03 +0100] "GET / HTTP/1.1" 200 3596
62.202.27.74 - - [16/Dec/2008:11:28:09 +0100] "GET /contact HTTP/1.1" 404 1141
62.202.27.74 - - [16/Dec/2008:11:28:09 +0100] "GET /errors/inc/errordocs.js HTTP/1.1" 304 -
62.202.27.74 - - [16/Dec/2008:11:28:09 +0100] "GET /errors/inc/errordocs.css HTTP/1.1" 304 -
62.202.27.74 - - [16/Dec/2008:11:28:09 +0100] "GET /errors/inc/error_top.jpg HTTP/1.1" 304 -
62.202.27.74 - - [16/Dec/2008:11:28:09 +0100] "GET /errors/inc/valid_css.jpg HTTP/1.1" 304 -
62.202.27.74 - - [16/Dec/2008:11:28:09 +0100] "GET /errors/inc/valid_xhtml.jpg HTTP/1.1" 304 -
62.202.27.74 - - [16/Dec/2008:11:28:11 +0100] "GET / HTTP/1.1" 200 3596
62.202.27.74 - - [16/Dec/2008:11:28:37 +0100] "GET / HTTP/1.1" 500 1148
83.77.28.78 - - [16/Dec/2008:12:29:38 +0100] "GET / HTTP/1.1" 500 1148
83.77.28.78 - - [16/Dec/2008:12:29:38 +0100] "GET /errors/inc/errordocs.js HTTP/1.1" 304 -
83.77.28.78 - - [16/Dec/2008:12:29:39 +0100] "GET /errors/inc/errordocs.css HTTP/1.1" 304 -
83.77.28.78 - - [16/Dec/2008:12:29:39 +0100] "GET /errors/inc/error_top.jpg HTTP/1.1" 304 -
83.77.28.78 - - [16/Dec/2008:12:29:39 +0100] "GET /errors/inc/valid_css.jpg HTTP/1.1" 304 -
83.77.28.78 - - [16/Dec/2008:12:29:39 +0100] "GET /errors/inc/valid_xhtml.jpg HTTP/1.1" 304 -
/var/log/apache2/error.log
Code:
[Tue Dec 16 11:16:59 2008] [error] [client ::1] File does not exist: /htdocs
[Tue Dec 16 11:20:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "TktewgoCApQAAGcqYh0AAAAE"]
[Tue Dec 16 11:25:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "YCzj-AoCApQAAGebAG8AAAAD"]
[Tue Dec 16 11:30:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "cg2zRAoCApQAAAaEAjMAAAAA"]
[Tue Dec 16 11:35:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "g-HxnQoCApQAAAnWbf0AAAAH"]
[Tue Dec 16 11:40:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "ldDfuwoCApQAAGcqYh4AAAAE"]
[Tue Dec 16 11:45:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "p7LL8woCApQAAGebAHAAAAAD"]
[Tue Dec 16 11:50:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "uZqeugoCApQAAAaFAv8AAAAB"]
[Tue Dec 16 11:55:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "y3ZawAoCApQAAFq-A@4AAAAJ"]
[Tue Dec 16 12:00:18 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "3WfvoQoCApQAAAnTaOYAAAAF"]
[Tue Dec 16 12:05:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "70HLGQoCApQAAFq@AxwAAAAI"]
[Tue Dec 16 12:10:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "AR5HCwoCApQAAAaGA9YAAAAC"]
[Tue Dec 16 12:15:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "Ev7DLQoCApQAAAaEAjQAAAAA"]
[Tue Dec 16 12:20:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "JN1c-QoCApQAAAnWbf4AAAAH"]
[Tue Dec 16 12:25:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "NsANbgoCApQAAFrABNwAAAAK"]
[Tue Dec 16 12:30:17 2008] [error] [client 127.0.0.1] ModSecurity: Access denied with code 400 (phase 2). Pattern match "^[\\d\\.]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity2/modsecurity_crs_21_protocol_anomalies.conf"] [line "60"] [id "960017"] [msg "Host header is a numeric IP address"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/IP_HOST"] [hostname "127.0.0.1"] [uri "/"] [unique_id "SKSR8woCApQAAAnTaOcAAAAF"]
/var/log/apache2/suexec.log
Code:
sudo tail -20 /var/log/apache2/suexec.log
[2008-12-15 01:18:31]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-15 02:27:25]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-15 02:29:08]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-15 09:47:45]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-15 09:48:55]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-15 09:58:11]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 00:12:53]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 00:12:57]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 01:01:38]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 01:32:54]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 03:13:21]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 03:18:03]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 03:23:09]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 03:23:14]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 03:26:38]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 03:26:51]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 03:33:09]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 03:33:21]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
[2008-12-16 03:38:13]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-12-16 08:36:45]: uid: (vu2001/vu2001) gid: (2001/2001) cmd: php5-fcgi-starter
Search
Member List
Calendar
Help
