Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of karol.pomaski@gmail.com
 designates 209.85.213.175 as permitted sender)
References: 
 <CAMQP8vvO40RuXcdgpa4VtNmcKekjdVDrXk0SnWvKmcyn=Vc7=g@mail.gmail.com>
 <CAFHbX1+hROSASG7Z_ASsBz2aiGV45xY3HzeN2WA+DNpcHcF6GA@mail.gmail.com>
 <9E85D8A2-036C-4041-939B-FF19BEB9A5C2@gmail.com>
 <CAFHbX1+bjToWKyG=4aKRRU=2yhUjSMZkcctf+OmqBvP4torL_w@mail.gmail.com>
From: Karol Pomaski <karol.pomaski@gmail.com>
Content-Type: text/plain;
	charset=us-ascii
In-Reply-To: 
 <CAFHbX1+bjToWKyG=4aKRRU=2yhUjSMZkcctf+OmqBvP4torL_w@mail.gmail.com>
Message-Id: <B92DEACB-9ADA-40A3-B9A5-CD3B10B7B605@gmail.com>
Date: Fri, 12 Apr 2013 20:16:59 -0500
To: "users@httpd.apache.org" <users@httpd.apache.org>
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
Subject: Re: [users@httpd] Strange Apache logs - very slow loading time


On 12/04/2013, at 19:52, Tom Evans <tevans.uk@googlemail.com> wrote:

> On Sat, Apr 13, 2013 at 1:45 AM, Karol Pomaski <karol.pomaski@gmail.com> w=
rote:
>> Well I have already blocked the proxy and disabled to mod_proxy module bu=
t still the log appears
>>=20
>>=20
>> [Sat Apr 13 00:43:57 2013] [error] [client 198.136.28.2] File does not ex=
ist: /var/www/shops/88/store/creative, referer: http://www.hurricaneo.com/?p=
aged=3D2
>> [Sat Apr 13 00:43:57 2013] [error] [client 142.4.118.22] File does not ex=
ist: /var/www/shops/88/store/ttj, referer: http://www.assumegame.com/play-39=
-Ace-Driver-game.html
>=20
> So what is happening now is that people are still connecting and
> trying to use it as a proxy - port 80 is still open after all. But now
> apache is refusing to proxy them, and instead is looking them up in
> your document root, and so all these ne'er-do-wells are getting 404s
> instead of the content they are requesting.
>=20
> Give it a few hours(, days, weeks) - it should die down. The problem
> is that often lists are made of open proxies, so even if you are no
> longer acting as an open proxy, you may still be listed.
>=20
> Cheers
>=20
> Tom
>=20
> (Remember to keep and archive these logs, just in case!)
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20

Ok. Thanks very much. I hope they didn't make any malicious stuff using this=
 proxy. Do you know how to limit the proxy just to accept 127.0.0.1?

Regards,
Karol=

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org