Someone is GETting another site through my server.

Page 1 of 1

2 Replies - 1005 Views - Last Post: 04 December 2011 - 06:32 PM

Topic Sponsor:

#1 mmtrebuchet  Icon User is offline

  • New D.I.C Head

Reputation: 7
  • View blog
  • Posts: 27
  • Joined: 06-August 10

Someone is GETting another site through my server.

Posted 04 December 2011 - 04:45 PM

Hi, all. I was looking at my server logs (Apache server created by installing CollabNet Subversion Edge) and saw this entry:
221.212.30.179 - - [04/Dec/2011:06:01:50 -0500] "GET http://www.sciencedirect.com/ HTTP/1.1" 200 48

The IP is Chinese, and I have access to some sciencedirect articles on my computer. (I'm at a university.)
Is this person getting access to another website as my computer? If so, can I stop this?
Cheers,
MMTrebuchet

Is This A Good Question/Topic? 0
  • +

Replies To: Someone is GETting another site through my server.

#2 mmtrebuchet  Icon User is offline

  • New D.I.C Head

Reputation: 7
  • View blog
  • Posts: 27
  • Joined: 06-August 10

Re: Someone is GETting another site through my server.

Posted 04 December 2011 - 06:25 PM

Additional info: Sending this request by telnetting into my server gives my site if I specify to use HTTP/1.0. So it seems that the server drops the http://www.sciencedirect.com bit out altogether, although I couldn't use telnet to send an HTTP/1.1 request. 
> telnet localhost 80
    > GET http://www.sciencedirect.com/ HTTP/1.0
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2011 01:23:48 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2011 21:30:42 GMT
ETag: "3000000003874-30-4ac74c5daab68"
Accept-Ranges: bytes
Content-Length: 48
Connection: close
Content-Type: text/html

<html><body><h1>Hello, world!</h1></body></html>

Connection to host lost.


So it seems nothing bad is happening, unless HTTP/1.1 is very different. I'm not too clear on what the specification changed, so I guess it's possible.
Was This Post Helpful? 0
  • +
  • -

#3 GunnerInc  Icon User is online

  • "Hurry up and wait"
  • member icon

Reputation: 312
  • View blog
  • Posts: 898
  • Joined: 28-March 11

Re: Someone is GETting another site through my server.

Posted 04 December 2011 - 06:32 PM

sciencedirect.com is your domain for your server? Then when someone types that into their webbrowser, you will see that in your logs

Quote

221.212.30.179 - - [04/Dec/2011:06:01:50 -0500] "GET http://www.sciencedirect.com/ HTTP/1.1" 200 48


The users IP, they want to GET the index page for http://www.sciencedirect.com/, your server responed OK - 200 status code, and the bytes sent was 48
Was This Post Helpful? 0
  • +
  • -
Page 1 of 1