| Linode Forum https://forum.linode.com/ |
|
| Bad access. Remove ip using iptables https://forum.linode.com/viewtopic.php?f=19&t=3976 |
Page 1 of 1 |
| Author: | Symba [ Wed Mar 11, 2009 7:49 am ] |
| Post subject: | Bad access. Remove ip using iptables |
I have found this in my access.log this morning: 222.187.220.162 - - [10/Mar/2009:14:22:04 +0000] "GET http://pv.wantsfly.com/prx1.php HTTP/1.0" 404 326 "- " .... How is this ip trying to access an external site from my address? How can I stop it from happening again? Thanks |
|
| Author: | phvt [ Wed Mar 11, 2009 7:55 am ] |
| Post subject: | |
You can request anything you want via HTTP, and they did get a 404 "page not found" response from your server. However I believe what they/this virus/worm/spammer wanted was to get you to visit their site and/or share the link with others. http://en.wikipedia.org/wiki/Referer_spam |
|
| Author: | mnordhoff [ Wed Mar 11, 2009 7:57 am ] |
| Post subject: | |
It's searching for open proxies. It happens all the time. Your web server returned a 404, so it's not an open proxy. You could configure fail2ban or something to block IPs that make requests like that. Personally, I don't do anything about it. They don't do any harm, and it's not worth the effort. Edit: Oh, someone else responded first. |
|
| Author: | Symba [ Wed Mar 11, 2009 8:06 am ] |
| Post subject: | |
Thanks for you prompt responses. |
|
| Page 1 of 1 | All times are UTC-04:00 |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|