htaccess correct, Apache logs still showing the evil visitors with 200 code

Posted by bulgin on Pro Webmasters See other posts from Pro Webmasters or by bulgin
Published on 2012-11-12T21:08:27Z Indexed on 2012/11/12 23:14 UTC
Read the original article Hit count: 275

Filed under:

I hope someone can help me. Please take a look at the following snippet of Apache logs:

95-169-172-157.evilvisitor.com - - [12/Nov/2012:09:46:02 -0500] "GET /the-page-I-dont-want-to-deliver.html HTTP/1.1" 200 9171 "http://hackers.ru/" "Mozilla/4.0 (MSIE 6.0; Windows NT 5.1; Search)"

I have the following included in my .htaccess for the root directory of the website and there are no other .htaccess files anywhere that would affect this:

RewriteEngine On
Options +FollowSymLinks
ServerSignature Off

ErrorDocument 403 "Nothing Interesting Here"
order allow,deny
deny from evilvisitor.com
deny from hackers.ru
deny from anonymouse.org
allow from all

I also have GeoIP functioning properly and have this included there:

#for stuff from different countries
RewriteCond %{ENV:GEOIP_COUNTRY_CODE} ^(UA|TR|RU|RO|LV|CZ|IR|HR|KR|TW|NO|NL|NO|IL|SE)
RewriteRule ^(.*)$ [R=F,L

I know this works because whenever I attempt to access the website from a proxy in say, Spain, I get the error message. I also know it works because when accessing the website from anonymouse.org, the proper error code page is displayed.

So then why am I still getting these visitors who successfully access the page I don't want them to see with an Apache 200 code when it should be an error code?

© Pro Webmasters or respective owner

Related posts about htaccess