Apache 2.0, odd log entry?

This is a discussion on Apache 2.0, odd log entry? within the Apache Web Server forums, part of the Web Server and Related Forums category; I was checking my logs today and noticed the following entry in the access log: 62.117.64.130 - - [29/...


Go Back   Usenet Forums > Web Server and Related Forums > Apache Web Server

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-29-2004
Bradley V. Stone
 
Posts: n/a
Default Apache 2.0, odd log entry?

I was checking my logs today and noticed the following entry in the
access log:

62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET
http://www.mozilla.org/ HTTP/1.1" 200 1628

Is this someone that was able to use my web server as a proxy
successfully? Or is it nothing to worry about.

Thanks.


  #2 (permalink)  
Old 04-29-2004
Davide Bianchi
 
Posts: n/a
Default Re: Apache 2.0, odd log entry?

Bradley V. Stone <bvstone@nospamyahoodot.com> wrote:
> 62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET
> http://www.mozilla.org/ HTTP/1.1" 200 1628


It's possible that someone was trying to use your server as an open
proxy, but the page size (1628 bytes) make me think that he just
received your standard home page. Check for yourself. I'd put that
IP in my firewall anyway.

Davide

--
| Shaw's Principle: Build a system that even a fool can use, and only a
| fool will want to use it.
|
|
  #3 (permalink)  
Old 04-29-2004
Bradley V. Stone
 
Posts: n/a
Default Re: Apache 2.0, odd log entry?

Davide Bianchi wrote:
> Bradley V. Stone <bvstone@nospamyahoodot.com> wrote:
>
>>62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET
>>http://www.mozilla.org/ HTTP/1.1" 200 1628

>
>
> It's possible that someone was trying to use your server as an open
> proxy, but the page size (1628 bytes) make me think that he just
> received your standard home page. Check for yourself. I'd put that
> IP in my firewall anyway.
>
> Davide
>


Thanks. I just did a test setting up my ip as a proxy in IE and got the
same type of entries in my log file. It always displays my home page no
matter the URL, and the size of 1628 bytes (the size of my home page).

Is this the way it should function, or are there some directives I can
use to not allow someome to do this? I got some other odd entires that
when researched were attempted hacks and proxy usage, but the requests
were denied.


  #4 (permalink)  
Old 04-30-2004
Davide Bianchi
 
Posts: n/a
Default Re: Apache 2.0, odd log entry?

Bradley V. Stone <bvstone@nospamyahoodot.com> wrote:
> Is this the way it should function


Well, you could setup a Rewrite rule to send this kind of requests to
a default "bug off l00ser" page, but why whorry? The little bugger
tryed, got bitten and bugged off, the only thing he left was his IP
address, you could also send a complain to his ISP.

Davide

--
| Immigration is the sincerest form of flattery. -- Jack Paar
|
|
|
  #5 (permalink)  
Old 04-30-2004
Bradley V. Stone
 
Posts: n/a
Default Re: Apache 2.0, odd log entry?

Davide Bianchi wrote:

> Bradley V. Stone <bvstone@nospamyahoodot.com> wrote:
>
>>Is this the way it should function

>
>
> Well, you could setup a Rewrite rule to send this kind of requests to
> a default "bug off l00ser" page, but why whorry? The little bugger
> tryed, got bitten and bugged off, the only thing he left was his IP
> address, you could also send a complain to his ISP.
>
> Davide
>


Ya, I guess. He's in Russia. :)


 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:58 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0