"access_log?hello" ?

From: Christine Kronberg (Christine_Kronberg_at_genua.de)
Date: 07/26/03

Next message: Remko Lodder: "Re: [security-elvandar] "access_log?hello" ?"

Previous message: Robin Lynn Frank: "Is this enough to identify this by?"
In reply to: Scott A. McIntyre: "Re: Port 0 packets"
Next in thread: Remko Lodder: "Re: [security-elvandar] "access_log?hello" ?"
Reply: Remko Lodder: "Re: [security-elvandar] "access_log?hello" ?"
Reply: Shafik Yaghmour: "Re: "access_log?hello" ?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Sat, 26 Jul 2003 09:16:45 +0200 (CEST)
To: <incidents@securityfocus.com>

Hi,

  Checking the logfiles of my private webserver this morning I
  see the following entries.
  It looks lile some playchild tried an buffer overflow but I
  don't remember seeing anything connected to access_log files.
  Google didn't help. Has anyone else this kind of requests?
  Or an idea what the result of this request should be?

12.221.111.178 - - [25/Jul/2003:12:40:29 +0200] "HEAD
/logs/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
HTTP/1.0" 404 -
12.221.111.178 - - [25/Jul/2003:12:40:29 +0200] "HEAD
/logs/active/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
HTTP/1.0" 404 -
12.221.111.178 - - [25/Jul/2003:12:40:30 +0200] "HEAD
/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
HTTP/1.0" 404 -

Cheers,

Chris Kronberg.

---------------------------------------------------------------------------
----------------------------------------------------------------------------

Next message: Remko Lodder: "Re: [security-elvandar] "access_log?hello" ?"

Previous message: Robin Lynn Frank: "Is this enough to identify this by?"
In reply to: Scott A. McIntyre: "Re: Port 0 packets"
Next in thread: Remko Lodder: "Re: [security-elvandar] "access_log?hello" ?"
Reply: Remko Lodder: "Re: [security-elvandar] "access_log?hello" ?"
Reply: Shafik Yaghmour: "Re: "access_log?hello" ?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Bush administration perverts still obsessed with porn
... Go ahead "I'm not afraid of giving up my privacy, ... SAN FRANCISCO - Google Inc. is rebuffing the Bush administration's ... the Internet's leading search engine - a request that underscores the ... The government wants a list all requests entered into Google's search ...
(rec.sport.pro-wrestling)
Re: What Would Cause ISA to Block GoogleBots?
... This looks to me like Google coming on my site and are consecutive log ... to connect to Google at 66.249.66.204 on Port 55334 and ISA denies it. ... On some DNS requests the log file looks like this; ...
(microsoft.public.isa)
Re: infinite loop with http requests
... Google is perfectly at liberty to treat requests ... Java stuff); and those where we can't tell much. ... I suppose a good way to learn HTTP is to set up a webserver in your own ...
(comp.lang.java.programmer)
Re: Error 403 from Google
... >>> requests, i.e. visit all pages in my 'history', so I suspect they are the ... but I have not run any tools that leads to heavy query load ... >>> I have tested access to Google from a remote computer to confirm that it ... the Open Source toolbar that predates the official Google ...
(alt.internet.search-engines)
US Google Set to Face Off in Court
... Lawyers for the Justice Department and Google are expected to ... It will mark the first time the Justice Department and Google have ... sparred in court since the government subpoenaed the Mountain-View, ... search requests and Web site addresses. ...
(comp.dcom.telecom)