: Http://www.example.com/http://www.example.com/ in Apache log? I run a website, let's say www.example.com. On it I have a path and file, say www.example.com/path/file.html. The Apache log lists
I run a website, let's say example.com. On it I have a path and file, say example.com/path/file.html.
The Apache log lists GET requests like: GET /path/file.html HTTP/1.1
Which is correct, corresponding to example.com/path/file.html; such lines result in a 200 status code and everything's good.
But then I have other entries:
GET www.example.com/path/file.html HTTP/1.1
or
GET www.othersite.net/ HTTP/1.1
Which would correspond to something like www.example.com/http://www.example.com/path/file.html or www.example.com/http://www.othersite.net/ which does not exist (My server returns a 404 for these.).
These requests are always from far away (Italy, Latvia, ...) while actual users of my website are invariably local. What are these? Is there any particular reason for these requests? Have others seen these happen?
It's been going on for at least a year and it's continuous (though I'm not being flooded).
They are not transparent attacks such as:
GET //mysql-admin/ HTTP/1.1 or GET /webdav/test HTTP/1.1
More posts by @Looi9037786
1 Comments
Sorted by latest first Latest Oldest Best
GET www.example.com/path/file.html HTTP/1.1
GET www.othersite.net/ HTTP/1.1
These are attempts to use your server as a HTTP proxy; that's what a full URL rather than a path in the request means. If there is another domain name present as in the second example, then they are attempts to misuse your server as an open proxy, which it is properly rejecting.
Giving the full URL while requesting a page from your own site may be from broken HTTP clients, or they might be probes to check if your server is functioning as a proxy without involving another site.
Don't worry about it as long as you have only 4xx responses in your logs. If your server were in fact proxying (as Apache can be configured to do) then it would be important for you to fix that, as open proxies are tools for various kinds of abuse (of other hosts, not yours).
Terms of Use Create Support ticket Your support tickets Stock Market News! © vmapp.org2024 All Rights reserved.