On Sunday 03 June 2007, Tim wrote: > The logwatch is really only a brief summary. You want to > look at the proper webserver logs, in /var/log/httpd > (access or error logs). Use grep to find the diyproxy > entry in them. You'll probably find that someone's > trying to see if they can use your webserver as a proxy, > for their own nefarious purposes. Tim thanks for pointing me to the appropriate log file. What is the AP that 69.28.79.34 or http://www.diyproxy.com/ was looking for as recorded in my error log [Fri Jun 01 19:15:28 2007] [error] [client 69.28.79.34] File does not exist: /var/www/html/ap I know the next entry from Asia 222.216.28.147 or http://www.loanscandyloans.com/ was up to no good [Sat Jun 02 22:14:26 2007] [error] [client 222.216.28.147] File does not exist: /var/www/html/php This favicon.ico error happens a lot both internally and externally what would be causing this? I have nothing on my pages that would be pointing a browser to a favicon.ico file or image. [Sun Jun 03 01:10:45 2007] [error] [client 64.53.219.226] File does not exist: /var/www/html/favicon.ico -- Registered Linux User 342662 http://counter.li.org