This shows you the differences between two versions of the page.
list_webserver_information [2011/09/09 08:16] root created |
list_webserver_information [2013/11/20 15:36] (current) root |
||
---|---|---|---|
Line 9: | Line 9: | ||
https can be used as well | https can be used as well | ||
+ | |||
+ | If curl or wget is not installed telnet can be used as well | ||
+ | |||
+ | # telnet <domain> 80 (or 443 is https is used) | ||
+ | |||
+ | Type | ||
+ | HEAD / HTTP/1.0 | ||
+ | Hit enter twice | ||
+ | |||
+ | ====== Hide webserver information ====== | ||
+ | |||
+ | Change your servers php.ini expose php parameter to:\\ | ||
+ | expose_php Off | ||
+ | |||
+ | Change/add following httpd.conf parameters:\\ | ||
+ | ServerTokens Prod | ||
+ | This will only reveal Apache in return. | ||
+ | |||
+ | ====== List IP's after number of hits ====== | ||
+ | |||
+ | awk '{print $1}' accept.log | sort | uniq -c | sort -n | ||
+ | |||
+ | ====== List Apache requests per day ====== | ||
+ | | ||
+ | awk '{print $4}' accept.log | cut -d: -f1 | uniq -c | ||
+ | | ||
+ | ====== List Apache requests per hour ====== | ||
+ | |||
+ | grep "22/Nov" accept.log | cut -d[ -f2 | cut -d] -f1 | awk -F: '{print $2":00"}' | sort -n | uniq -c | ||
+ | | ||
+ | |||
+ |