homepage Welcome to WebmasterWorld Guest from 54.237.134.62
register, free tools, login, search, subscribe, help, library, announcements, recent posts, open posts,
Subscribe to WebmasterWorld
Visit PubCon.com
Home / Forums Index / Code, Content, and Presentation / Apache Web Server
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL & phranque

Apache Web Server Forum

    
Strange apache log entries
GET http://www.mysite.com/file/name
Peter




msg:1521139
 2:19 pm on Feb 22, 2005 (gmt 0)

Hello,

I'm getting some curious log entries in the form:
"GET ht*p://www.mysite.com/file/name HTTP/1.0" 200 1234 (instead of "GET /file/name")

It seems to be a scaper and I've banned it, but I'm curious to know what it's doing to give this result in the logs.

Playing around with a browser, the closest I can make is:
"GET /ht*p://www.mysite.com/file/name HTTP/1.1" 404 (with a / before the http)

Thanks for any enlightenment.

Peter.

 

jdMorgan




msg:1521140
 7:33 pm on Feb 22, 2005 (gmt 0)

It's a test to see if your server will function as a proxy. As long as your server returns a 404 response, you're OK.

Jim

Peter




msg:1521141
 8:07 pm on Feb 22, 2005 (gmt 0)

Thanks for your reply, Jim.

The (shared) server is, in fact, returning a 200 - but it's valid pages on the same site that are being requested, so it would seem that someone is using my site as a proxy to access my site. Strange.

Forgive my ignorance: is there a simple way to see whether "www.mysite.com", which is on a shared server, can be used as a proxy to access other sites?

Peter.

jdMorgan




msg:1521142
 2:07 am on Feb 23, 2005 (gmt 0)

Sure, type:

[your_site.com...]

into your browser address bar. If it gives you google, or if your server logs show a 200-OK, then your server will function as a proxy.

You can do a better test if you use a 'terminal emulator', but the above should suffice for a quick test.

Jim

andrew_m




msg:1521143
 2:58 am on Feb 23, 2005 (gmt 0)

jdMorgan, you are wrong about that test. That won't work -- it won't translate to proxy request.

Just use telnet -- even windows have it, and it accepts ports too. Do "telnet yourserver.com 80", then enter:

GET [yourserver.com...] HTTP/1.0
Host: yourserver.com

You need to hit enter twice after the Host: -- to enter a blank line.

Peter




msg:1521144
 2:10 pm on Feb 23, 2005 (gmt 0)

Thank you, gentlemen.

Using telnet www.mysite.com 80

I see log entries identical to those that were puzzling me if I get a page of my site. But if I try to get Google, I'm given a page of publicity for my web host, and no corresponding entry in my access log.

Nice to have my doubts cleared up.

Peter.

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Code, Content, and Presentation / Apache Web Server
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About
© Webmaster World 1996-2014 all rights reserved