This is a discussion on Apache 2.0, odd log entry? within the Apache Web Server forums, part of the Web Server and Related Forums category; I was checking my logs today and noticed the following entry in the access log: 62.117.64.130 - - [29/...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I was checking my logs today and noticed the following entry in the
access log: 62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET http://www.mozilla.org/ HTTP/1.1" 200 1628 Is this someone that was able to use my web server as a proxy successfully? Or is it nothing to worry about. Thanks. |
|
|||
|
Bradley V. Stone <bvstone@nospamyahoodot.com> wrote:
> 62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET > http://www.mozilla.org/ HTTP/1.1" 200 1628 It's possible that someone was trying to use your server as an open proxy, but the page size (1628 bytes) make me think that he just received your standard home page. Check for yourself. I'd put that IP in my firewall anyway. Davide -- | Shaw's Principle: Build a system that even a fool can use, and only a | fool will want to use it. | | |
|
|||
|
Davide Bianchi wrote:
> Bradley V. Stone <bvstone@nospamyahoodot.com> wrote: > >>62.117.64.130 - - [29/Apr/2004:08:47:23 -0500] "GET >>http://www.mozilla.org/ HTTP/1.1" 200 1628 > > > It's possible that someone was trying to use your server as an open > proxy, but the page size (1628 bytes) make me think that he just > received your standard home page. Check for yourself. I'd put that > IP in my firewall anyway. > > Davide > Thanks. I just did a test setting up my ip as a proxy in IE and got the same type of entries in my log file. It always displays my home page no matter the URL, and the size of 1628 bytes (the size of my home page). Is this the way it should function, or are there some directives I can use to not allow someome to do this? I got some other odd entires that when researched were attempted hacks and proxy usage, but the requests were denied. |
|
|||
|
Bradley V. Stone <bvstone@nospamyahoodot.com> wrote:
> Is this the way it should function Well, you could setup a Rewrite rule to send this kind of requests to a default "bug off l00ser" page, but why whorry? The little bugger tryed, got bitten and bugged off, the only thing he left was his IP address, you could also send a complain to his ISP. Davide -- | Immigration is the sincerest form of flattery. -- Jack Paar | | | |
|
|||
|
Davide Bianchi wrote:
> Bradley V. Stone <bvstone@nospamyahoodot.com> wrote: > >>Is this the way it should function > > > Well, you could setup a Rewrite rule to send this kind of requests to > a default "bug off l00ser" page, but why whorry? The little bugger > tryed, got bitten and bugged off, the only thing he left was his IP > address, you could also send a complain to his ISP. > > Davide > Ya, I guess. He's in Russia. :) |
| Thread Tools | |
| Display Modes | |
|
|