Access logs show someone "GET"ing a random ip, why does this return 200?
Posted
by
Wilduck
on Server Fault
See other posts from Server Fault
or by Wilduck
Published on 2010-12-25T19:25:44Z
Indexed on
2010/12/25
19:55 UTC
Read the original article
Hit count: 168
I have a small linux box set up with Apache as a way to teach myself Apache. I've set up port forwarding on my router so it's accessible from the outside world, and I've gotten a few strange requests for pages that don't exist from an ip address in China.
Looking at my access_log shows that most of these return 404 errors, which I'm guessing is a good thing. However, there is one request that looks like this:
58.218.204.110 - - [25/Dec/2010:19:05:25 -600] "GET http://173.201.161.57/ HTTP/1.1" 200 3895
I'm curious what this request means... That ip address is unconnected to my server as far as I know, and visiting it simply tells me information about my uid. So, my questions are: How is it that this request is showing up in my access_log, why is it returning 200, and is this a bad thing (do I need to set up more security)?
© Server Fault or respective owner