Re: "access_log?hello" ?
From: Shafik Yaghmour (subs_at_shafik.net)
Date: 07/28/03
- Previous message: Rodrigo Barbosa: "Re: Scan of TCP 552-554"
- In reply to: Christine Kronberg: ""access_log?hello" ?"
- Next in thread: Danny: "Anyone know this tool?"
- Reply: Danny: "Anyone know this tool?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 28 Jul 2003 07:03:48 -0400 (EDT) To: Christine Kronberg <Christine_Kronberg@genua.de>
I have been seeing the same type of attempts yesterday and a few
days ago as well but they seem pretty useless to me. I am running an
Apache server w/ php and I could not find any issues that these attempts
cause.
BTW, it was the exact same IP as well. I reported it to
abuse@att.net and they forwarded it to abuse@insightbb.com, but it would
seem nothing has come of it. If you find out anything else please forward
on but for now it seems, at least for an Apache server it does not seem to
be an issue.
Take care
On Sat, 26 Jul 2003, Christine Kronberg wrote:
> Checking the logfiles of my private webserver this morning I
> see the following entries.
> It looks lile some playchild tried an buffer overflow but I
> don't remember seeing anything connected to access_log files.
> Google didn't help. Has anyone else this kind of requests?
> Or an idea what the result of this request should be?
>
> 12.221.111.178 - - [25/Jul/2003:12:40:29 +0200] "HEAD
> /logs/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
> HTTP/1.0" 404 -
> 12.221.111.178 - - [25/Jul/2003:12:40:29 +0200] "HEAD
> /logs/active/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
> HTTP/1.0" 404 -
> 12.221.111.178 - - [25/Jul/2003:12:40:30 +0200] "HEAD
> /access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
> HTTP/1.0" 404 -
-- Those who dream by day are cognizant of many things which escape those who dream only by night. -Edgar Allan Poe --------------------------------------------------------------------------- ----------------------------------------------------------------------------
- Previous message: Rodrigo Barbosa: "Re: Scan of TCP 552-554"
- In reply to: Christine Kronberg: ""access_log?hello" ?"
- Next in thread: Danny: "Anyone know this tool?"
- Reply: Danny: "Anyone know this tool?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
