search server logs for patterns of behavior. What pages do visitors go to?

[researcherben]

What can be learned from the logs available on the server?

~/proofofconcept/v7_pickle_web_interface/flask/logs$ ls -Shal
-rw-r--r--  1 pdg pdg 343M Feb 18 17:54 gunicorn_error.log
-rw-r--r--  1 pdg pdg 203M Feb 18 17:54 gunicorn_access.log
-rw-r--r--  1 pdg pdg 202M Feb 18 17:54 nginx_access.log
-rw-r--r--  1 pdg pdg  33M Feb 18 17:54 nginx_error.log

[researcherben]

the format of ~/proofofconcept/v7_pickle_web_interface/flask/logs/nginx_access.log is set in https://github.com/allofphysicsgraph/proofofconcept/blob/gh-pages/v7_pickle_web_interface/services/nginx/nginx.conf#L20

the format of ~/proofofconcept/v7_pickle_web_interface/flask/logs/gunicorn_access.log is set in https://github.com/allofphysicsgraph/proofofconcept/blob/gh-pages/v7_pickle_web_interface/gunicorn.config.py#L38

There is https://github.com/allofphysicsgraph/proofofconcept/blob/gh-pages/v7_pickle_web_interface/flask/templates/monitoring.html but the corresponding page doesn't seem to work.

[researcherben]

https://physicsderivationgraph.blogspot.com/2020/11/log-analysis-of-nginx-access-using.html

[bhpayne]

See https://bastian.rieck.me/blog/posts/2022/server/ and https://news.ycombinator.com/item?id=30661852 for tips on securing a web server

[bhpayne]

https://nishtahir.com/i-looked-through-attacks-in-my-access-logs-heres-what-i-found/ https://news.ycombinator.com/item?id=39165711