Solved access_log missing domain name

S

sufiyanshaikh

Verified User
Joined
Aug 14, 2019
Messages
181
Hello,

I always had a problem in finding which domain is under attack by checking access logs /var/log/httpd/access_log
Now I want to know how to find which domain is access_log is referring to by looking at the below log

xx.xx.xx.xx - - [01/Apr/2021:21:34:56 +0530] "GET /wp-login.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
xx.xx.xx.xx - - [01/Apr/2021:21:34:56 +0530] "GET /wp-login.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
xx.xx.xx.xx - - [01/Apr/2021:21:34:56 +0530] "GET /wp-login.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
xx.xx.xx.xx - - [01/Apr/2021:21:34:56 +0530] "GET /wp-login.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
xx.xx.xx.xx - - [01/Apr/2021:21:34:58 +0530] "GET /wp-login.php HTTP/1.1" 404 481 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
 
If I'm not mistaken, the access log is for the main apache or server ip. So that is under attack and that is quite "normal".
Try try anything to get access to the server, however, on the server itself there is no wordpress running, so it's logical you get the 404 (not found) error in the log.
I have hundreds of them, Only 404 or 301 so nothing to worry about.
 
Richard G said:
If I'm not mistaken, the access log is for the main apache or server ip. So that is under attack and that is quite "normal".
Try try anything to get access to the server, however, on the server itself there is no wordpress running, so it's logical you get the 404 (not found) error in the log.
I have hundreds of them, Only 404 or 301 so nothing to worry about.
Click to expand...
Thanks for the clarification @Richard G
Really appreciate your reply
 
You must log in or register to reply here.
Back
Top