Proxy Attempts in Log?
89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "
89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "
All of them are 10437 bytes, which I'm not certain is the exact size of my index page.
I was just concerned seeing the successful 200 return code in the log.
I am trying to determine whether I am in fact somehow maliciously being used as a proxy.
In Firefox I entered my domain as a proxy on port 80 and tried to browse the web, but my browser just displays the index page from my site.
Would this mean therefore that I am not being used as a proxy then?
3 Replies
@JamesC:
I recently started noticing some odd entries in my Apache log with a 200 return code, for example ones like -
89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "
http://vlada-hair.ru/ " "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"89.108.102.171 - - [21/Apr/2013:02:51:14 +0000] "GET / HTTP/1.1" 200 10437 "
http://vlada-hair.ru/ " "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
Those are not proxy requests. GET / is a valid request to your site. The http entry is the referrer. Unless your site is linked from that URL, that's just referrer spam.
So hopefully then these are typical spam related entries.