Stack Exchange Network
Stack Exchange network consists of 181 Q&A communities including
Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Visit Stack Exchange
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
The best answers are voted up and rise to the top
7 years ago
I am running a
Centos7 web server. I noticed a few strange HTTP
GET requests like these:
220.127.116.11 - - [29/Feb/2016:23:29:00 +0530] "GET http://testp1.piwo.pila.pl/testproxy.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/31.0"
18.104.22.168 - - [01/Mar/2016:07:36:40 +0530] "GET http://testp1.piwo.pila.pl/testproxy.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/31.0"
I have no connection to the domain
piwo.pila.pl. How did it end up in my Apache
error_log document, the same document is given under my web root, i.e.:
[Mon Feb 29 23:29:00.175813 2016] [:error] [pid 11382] [client 22.214.171.124:43718] script 'myWebRoot/testproxy.php' not found or unable to stat
Is this expected behavior? That the
access_log keeps a record of the exact request while the
error_log tracks the same request but translated to a URL on the file system?
189 10 10 bronze badges
Mar 4, 2016 at 11:27
373 3 3 silver badges 6 6 bronze badges
Your website has been hit by an automated script that looks for open proxies on the internet. The url it's trying to access would record a successful proxied request and add your server to a list.
Mar 4, 2016 at 11:32
5,769 2 2 gold badges 17 17 silver badges 26 26 bronze badges
log in to answer this question.
Not the answer you're looking for? Browse other questions tagged
By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our
Accept all cookies
Necessary cookies only