Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Wed Mar 11, 2009 7:49 am 
Offline
Newbie

Joined: Sun Mar 01, 2009 8:25 pm
Posts: 4
I have found this in my access.log this morning:
222.187.220.162 - - [10/Mar/2009:14:22:04 +0000] "GET http://pv.wantsfly.com/prx1.php HTTP/1.0" 404 326 "- " ....

How is this ip trying to access an external site from my address? How can I stop it from happening again?

Thanks


Top
   
 Post subject:
PostPosted: Wed Mar 11, 2009 7:55 am 
Offline
Senior Member

Joined: Mon Feb 28, 2005 7:21 pm
Posts: 76
You can request anything you want via HTTP, and they did get a 404 "page not found" response from your server.

However I believe what they/this virus/worm/spammer wanted was to get you to visit their site and/or share the link with others.

http://en.wikipedia.org/wiki/Referer_spam


Top
   
 Post subject:
PostPosted: Wed Mar 11, 2009 7:57 am 
Offline
Senior Member

Joined: Sat May 03, 2008 4:01 pm
Posts: 568
Website: http://www.mattnordhoff.com/
It's searching for open proxies. It happens all the time. Your web server returned a 404, so it's not an open proxy.

You could configure fail2ban or something to block IPs that make requests like that. Personally, I don't do anything about it. They don't do any harm, and it's not worth the effort.

Edit: Oh, someone else responded first.


Top
   
 Post subject:
PostPosted: Wed Mar 11, 2009 8:06 am 
Offline
Newbie

Joined: Sun Mar 01, 2009 8:25 pm
Posts: 4
Thanks for you prompt responses.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group