Strange log output from access.log

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Strange log output from access.log

redflag
Has anyone seen this kind of output before, and why it is happening?

10.8.0.1 - - [17/Mar/2020:16:37:07 +0100] "GET
/admin.php?content=8204;menu=040044;product_id=236431 HTTP/2.0" 200 18324
"https://app.tdom.net/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.
 php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/adm
 in.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/
 admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.p
 hp/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admi
 n.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php/admin.php?text_string=7613052442458&lang=1&active=1&search.x=25&search.y=7&manufacturer=69&year=0&season=0&collection=0&price=0&stocktype=1&stocksum=&id_string=&erp_id_string=&supplier_item_no_string=&_qf__productSearchForm=&_qfe__submit=1&content=8210&menu=040044"
"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101
Firefox/68.0" "-"

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287371,287371#msg-287371

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: Strange log output from access.log

redflag
How can I put the log message in code format so that it wraps?

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287371,287372#msg-287372

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|

Re: Strange log output from access.log

Francis Daly
In reply to this post by redflag
On Tue, Mar 17, 2020 at 11:49:25AM -0400, chrisguk wrote:

Hi there,

> Has anyone seen this kind of output before, and why it is happening?
>
> 10.8.0.1 - - [17/Mar/2020:16:37:07 +0100] "GET
> /admin.php?content=8204;menu=040044;product_id=236431 HTTP/2.0" 200 18324
> "https://app.tdom.net/admin.php/admin.php/ad
[snip]
>  min.php/admin.php/admin.php/admin.php/admin.php?text_string=7613052442458&lang=1&active=1&search.x=25&search.y=7&manufacturer=69&year=0&season=0&collection=0&price=0&stocktype=1&stocksum=&id_string=&erp_id_string=&supplier_item_no_string=&_qf__productSearchForm=&_qfe__submit=1&content=8210&menu=040044"
> "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101
> Firefox/68.0" "-"

That looks to me like a normal log line for a request that has a
silly-long referer: header.

Is this the only such line in your log file? Can you track previous
requests from this same browser/user to see if there is a real problem
that you can address?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx