Nonsensical Web Log Entries

[Michael Ross]

Am 09.03.2011, 21:40 Uhr, schrieb <peter at vfemail.net>:

>>
>> Does this entry change your conclusion:
>>
>>     188.134.62.20 - - [09/Mar/2011:12:15:04 -0500] "GET  
>> http://images.google.com/ HTTP/1.1" 200 13134 "-" "-"
>>

If I do:

	%telnet localhost 80

and enter:

	GET / HTTP/1.1
	Host: images.google.com

I get this in my logfile:

	127.0.0.1 images.google.com - [09/Mar/2011:22:06:48 +0100] "GET /  
HTTP/1.1" 200 2257 "-" "-"

My vhost-Setup serves the default host in the requested host is unknown,
thus 200 OK.

>
> Here's another entry that's too bizarre for words:
>
>      218.172.209.123 - - [09/Mar/2011:15:38:29 -0500] "\x16\x03\x01" 200  
> 13107 "-" "-"
>

"Talking ssl to a non-ssl vhost". Google that one.



Regards,
Michael