strange openoffice crawling in user apache.log

**fulltilt** · Dec 4th 2014

because of high apache CPU load ... I checked a customer domain access.log (wordpress installation)
as you can see it connects every sec ...
## edit ##
seems to be an aggressive crawler ... blocked it w/ iptables and mod_security

Code

xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:27 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:27 +0100] "HEAD / HTTP/1.1" 200 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:28 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:28 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:28 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:28 +0100] "HEAD / HTTP/1.1" 200 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:29 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:29 +0100] "HEAD / HTTP/1.1" 200 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:30 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:30 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:30 +0100] "GET / HTTP/1.1" 200 5580 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:31 +0100] "HEAD / HTTP/1.1" 200 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:31 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:31 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:32 +0100] "GET / HTTP/1.1" 200 5581 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:33 +0100] "HEAD / HTTP/1.1" 200 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:33 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:33 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:34 +0100] "HEAD / HTTP/1.1" 200 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:34 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:34 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:35 +0100] "PROPFIND / HTTP/1.1" 403 585 "-" "OpenOffice/4.1.1"
xxx.xxx.xx.xxx - - [04/Dec/2014:11:45:35 +0100] "HEAD /fr/images/spacer.gif HTTP/1.1" 301 - "-" "OpenOffice/4.1.1"

Display More

strange openoffice crawling in user apache.log

Share

Daily visitors