Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: Proxy Attempts in Log?
PostPosted: Sun Apr 21, 2013 3:27 am 
Offline
Senior Newbie

Joined: Mon Feb 18, 2013 4:37 pm
Posts: 5
I recently started noticing some odd entries in my Apache log with a 200 return code, for example ones like -

89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"


All of them are 10437 bytes, which I'm not certain is the exact size of my index page.
I was just concerned seeing the successful 200 return code in the log.

I am trying to determine whether I am in fact somehow maliciously being used as a proxy.
In Firefox I entered my domain as a proxy on port 80 and tried to browse the web, but my browser just displays the index page from my site.

Would this mean therefore that I am not being used as a proxy then?


Top
   
PostPosted: Sun Apr 21, 2013 8:02 am 
Offline
Senior Member

Joined: Sun Mar 07, 2010 7:47 pm
Posts: 1970
Website: http://www.rwky.net
Location: Earth
That's a pretty normal thing to see in your logs, you can do it with any site (try it with google) all you'll get is your home page coming up. As long as you can't navigate to another site when using yours as a proxy you're fine.

_________________
Paid support
How to ask for help
1. Give details of your problem
2. Post any errors
3. Post relevant logs.
4. Don't hide details i.e. your domain, it just makes things harder
5. Be polite or you'll be eaten by a grue


Top
   
PostPosted: Sun Apr 21, 2013 8:06 am 
Offline
Senior Member

Joined: Mon Dec 07, 2009 6:46 am
Posts: 331
JamesC wrote:
I recently started noticing some odd entries in my Apache log with a 200 return code, for example ones like -

89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"


Those are not proxy requests. GET / is a valid request to your site. The http entry is the referrer. Unless your site is linked from that URL, that's just referrer spam.


Top
   
PostPosted: Sun Apr 21, 2013 5:11 pm 
Offline
Senior Newbie

Joined: Mon Feb 18, 2013 4:37 pm
Posts: 5
Thanks for the information. I don't think my website is listed on any of these sites, but I was just concerned after seeing the 200 return code.

So hopefully then these are typical spam related entries.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group