View All Products
Compute
Storage
Networking
Databases
Services
Developer Tools
Industries
Pricing
Community
Engage With Us
Community ▶ Questions ▶ Proxy Attempts in Log?
Log in to Ask a Question

Proxy Attempts in Log?

development

I recently started noticing some odd entries in my Apache log with a 200 return code, for example ones like -

89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"

89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"

All of them are 10437 bytes, which I'm not certain is the exact size of my index page.

I was just concerned seeing the successful 200 return code in the log.

I am trying to determine whether I am in fact somehow maliciously being used as a proxy.

In Firefox I entered my domain as a proxy on port 80 and tried to browse the web, but my browser just displays the index page from my site.

Would this mean therefore that I am not being used as a proxy then?

3 Replies

That's a pretty normal thing to see in your logs, you can do it with any site (try it with google) all you'll get is your home page coming up. As long as you can't navigate to another site when using yours as a proxy you're fine.

@JamesC:

I recently started noticing some odd entries in my Apache log with a 200 return code, for example ones like -

89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"

89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "http://vlada-hair.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"

Those are not proxy requests. GET / is a valid request to your site. The http entry is the referrer. Unless your site is linked from that URL, that's just referrer spam.

Thanks for the information. I don't think my website is listed on any of these sites, but I was just concerned after seeing the 200 return code.

So hopefully then these are typical spam related entries.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Log in to Reply
Community Code of Conduct