3 replies to this topic

[Davey G]

Hey Vlexo and Users

Now.. Today, when i checked my Server Access Logs (as i do everyday)
I bumped into something strange, at first i was looking for the W3C Validator and Jigsaw Useragent but this caught my eye:

222.208.183.218 - - [18/Sep/2008:14:26:50 +0100] "GET /prx1.php?hash=2AFDB50CF0A0AB95522D294B0050308D2C28CF963D60 HTTP/1.0" 404 1017 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

It looks like the user tried to 'Get' a file or object from my Website that didn't exist? Your Thoughts?

- Davey

[Ad Bot]

[Jonathan J]

Hey,

I don't know if that is a hacking attempt, but take a look at these:

http://justlinux.com...ad.php?t=149407
http://ubuntu-ky.ubu...d.php?p=5541134

Quote

He's trying to use your server as an http proxy. However, the way apache seems to work by default, is it will simply read the URI (/prx1.php?hash=57A3B266F7FCBF5C4352F9921F404E9CE3CD 61DCCEA4) and process that request on your server. If you don't have your server configured as a proxy (which seems to be the case), nothing to worry about. The 404 shows that the file /prx1.php doesn't exist on your server.

[Davey G]

Thanks a million for clearing that up Jon. A while ago i do remember having a PHP proxy script set up on daveyonline.net

A proxy-server website that lists sites may of picked up my URI etc.

Phew! I was getting a little scared then hehe

[Jonathan J]

No problemo. :-)