Date: Sun, 25 Apr 1999 03:04:22 -0500 (EST) From: Alfred Perlstein <bright@rush.net> To: george vagner <kf7nn1@cybertrails.com> Cc: questions@FreeBSD.ORG Subject: Re: root server log entries Message-ID: <Pine.BSF.3.96.990425030213.2095W-100000@cygnus.rush.net> In-Reply-To: <000201be8ee2$68d69900$0300a8c0@ginger.kf7nn.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 24 Apr 1999, george vagner wrote: > I have a 2.2.8-stable machine that hosts > a few virtual domains and there is no > real root domain, what i mean is that > all of the domains are under virtual host > headers. > > I am getting this in my root domain log > under /var/log/httpd-access.log > > can you explain whats happening here? as you see > this is the only thing that is hitting the > root server. > > > Feb 9 20:00:00 www newsyslog[3047]: logfile turned over > 202.101.175.243 - - [26/Mar/1999:06:43:07 -0700] "GET http://www.s3.com > HTTP/1.1" 200 542 "-" "ProxyHunter" > 202.98.23.40 - - [09/Apr/1999:05:13:49 -0700] "GET http://www.s3.com > HTTP/1.1" 200 542 "-" "ProxyHunter" > 202.98.23.114 - - [09/Apr/1999:07:19:06 -0700] "GET http://www.s3.com > HTTP/1.1" 200 542 "-" "ProxyHunter" > el02-24-131-161-84.ce.mediaone.net - - [22/Apr/1999:15:23:16 -0700] "GET > http://www.s3.com HTTP/1.1" 200 542 "-" "ProxyHunter" > modemcable117.202-231.mque.videotron.net - - [24/Apr/1999:15:49:01 -0700] > "GET http://www.s3.com HTTP/1.1" 200 542 "-" "ProxyHunter" Some bozo is checking to see if your web server will relay web pages. Basically, they connect to your web server and ask for a page offsite, if it returns it, they know you are a proxy, or at least a misconfigured proxy. didn't "ProxyHunter" tip you off? -Alfred To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.990425030213.2095W-100000>