Forum Moderators: DixonJones

Message Too Old, No Replies

Strange log entry

GET http://www.yahoo.com/

         

lukasz

7:40 am on Jun 23, 2003 (gmt 0)

10+ Year Member



I found strange entry in my log:

64.223.170.106 - - [23/Jun/2003:00:24:42 -0400] "GET [yahoo.com...] HTTP/1.1" 200 7435 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)"

My domain is not yahoo.com and there is no folder of file named that way. It is strange that response is 200 and size of transfered data is a size of my index page. It is asingle request - it doesnt requests any other files which my index page require (images,css,js)
I got 3 of those requests from different IP.
Has anyone have any idea?

thewebboy

7:54 am on Jun 23, 2003 (gmt 0)

10+ Year Member



I had a "Get [ebay.com...] the only think i can think of is that someone in a host file points yahoo.com to your IP address.

Gorilla

8:10 am on Jun 23, 2003 (gmt 0)

10+ Year Member



Probably someone is checking whether your web server is configured to double as a HTTP proxy.

lukasz

8:34 am on Jun 23, 2003 (gmt 0)

10+ Year Member



but then shouldnt he get 404?

jdMorgan

4:43 pm on Jun 23, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



lukasz,

No, because your server apparently accepted the request and passed it on to yahoo.

For Apache users with mod_rewrite in .htaccess, there's a fix. Put your server's IP address in the third line if your site has its own unique IP address. Omit the third line if you are on a name-based virtual server and share your IP address with other sites.

# Block attempts to use our server as a proxy, but allow absolute URIs for our site
RewriteCond %{THE_REQUEST} ^(GET¦HEAD¦OPTIONS¦POST)\ /?http:// [NC]
RewriteCond %{THE_REQUEST} !^(GET¦HEAD¦OPTIONS¦POST)\ /?http://(www\.)?yourdomain\.com/ [NC]
RewriteCond %{THE_REQUEST} !^(GET¦HEAD¦OPTIONS¦POST)\ /?http://127\.0\.0\.3/ [NC]
RewriteRule .* - [F]

HTH,
Jim