Koozali.org: home of the SME Server

logwatch: Connection attempts using mod_proxy

Offline robf355

  • *
  • 70
  • +0/-0
logwatch: Connection attempts using mod_proxy
« on: June 03, 2022, 10:56:56 AM »
Hi
I've started getting these messages in the logwatch report, I notice it says  'attempts', so it may be nothing to worry about.

Connection attempts using mod_proxy:
    111.224.248.98 -> www.voanews.com:443: 2 Time(s)
    111.85.200.160 -> cn.bing.com:443: 2 Time(s)
....
    45.81.232.249 -> 45.85.218.132:4444: 2 Time(s)

In the http access.log the attempt is listed, but there is no listing in error.log

kjctechnik.com 111.224.248.98 - - [02/Jun/2022:00:01:44 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 200 161 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"

Is this anything to worry about, HTTP proxy status in server manager is set to disabled

Regards
Rob

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: logwatch: Connection attempts using mod_proxy
« Reply #1 on: June 03, 2022, 07:08:57 PM »
mod proxy is a module  of apache

the proxy option in the manager is for squid, the webproxy for your lan computer.

read this first result googling the term you pasted

https://serverfault.com/questions/286999/logwatch-connection-attempts-using-mod-proxy

and to check

https://serverfault.com/questions/589238/how-can-i-test-if-my-apache-server-is-an-open-proxy

he only answer you will get is the server redirecting you to https when you connect to port 80.

Offline robf355

  • *
  • 70
  • +0/-0
Re: logwatch: Connection attempts using mod_proxy
« Reply #2 on: June 03, 2022, 07:41:33 PM »
Thanks for the reply, I'm going away and was just concerned, the suggestion about testing using telnet just rerouted to my website, so that seems ok.
Regards
Rob