apache2 access log

[Kurt Wall]

On Tue, Aug 01, 2006 at 10:14:27PM -0700, Ken Moffat wrote:
> I'm getting a ton of of these entries in /var/log/apache2/access.log and 
> wonder if it's possible to block this stuff, even though the address 
> does not resolve to an ip address?

Yes, you can do that. But, whoever it is has an IP address, you're just
not capturing it in your log. Disable HostnameLookups in httpd.conf
and you'll get the IP from which the GET originates. As a bonus, disabling
HostnameLookups will also speed up your server. You can use some other
tool for offline look-ups (logresolve comes to mind, but there are
many such toolsl).

> web-r9-h71.globecorp.net - - [01/Aug/2006:21:58:55 -0700] "GET / 
> HTTP/1.1" 200 988 "http://www.midmojobs.com/50t9y/p5vzk.html" 

% whois midmojobs.com

   Domain Name: MIDMOJOBS.COM
   Registrar: GO DADDY SOFTWARE, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS1.COLUMBIAMO.COM
   Name Server: PLEASEDROPTHISHOST13866.MIDMISSOURI.BIZ
   Status: REGISTRAR-LOCK
   EPP Status: clientRenewProhibited
   EPP Status: clientUpdateProhibited
   EPP Status: clientDeleteProhibited
   EPP Status: clientTransferProhibited
   Updated Date: 09-Dec-2005
   Creation Date: 28-Nov-2000
   Expiration Date: 28-Nov-2007

>>> Last update of whois database: Wed, 02 Aug 2006 09:09:02 EDT <<<

[...]

Registrant:
   Premier Marketing Group
   212 Bingham
   COLUMBIA, Missouri 65203
   United States

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: MIDMOJOBS.COM
      Created on: 28-Nov-00
      Expires on: 28-Nov-07
      Last Updated on: 07-Mar-05

   Administrative Contact:
      Ott, John  jott at premiermeansbusiness.com
      Premier Marketing Group
      212 Bingham
      COLUMBIA, Missouri 65203
      United States
      573-489-5353      Fax -- 573-815-9490

   Technical Contact:
      p, s  sparker at premiermeansbusiness.com
      Premier Marketing Group
      503 Old Highway 63 N.
      Columbia, Missouri 65201
      United States
      573-449-4141      Fax --

   Domain servers in listed order:
      NS1.MIDMISSOURI.COM
      NS1.COLUMBIAMO.COM

Kurt