Re: "access_log?hello" ?

From: Shafik Yaghmour (subsat_private)
Date: Mon Jul 28 2003 - 04:03:48 PDT

  • Next message: Salvatore Poliandro: "Re: Scan of TCP 552-554"

    	I have been seeing the same type of attempts yesterday and a few 
    days ago as well but they seem pretty useless to me. I am running an 
    Apache server w/ php and I could not find any issues that these attempts 
    cause.
    
    	BTW, it was the exact same IP as well. I reported it to 
    abuseat_private and they forwarded it to abuseat_private, but it would 
    seem nothing has come of it. If you find out anything else please forward 
    on but for now it seems, at least for an Apache server it does not seem to 
    be an issue.
    
    Take care
    
    On Sat, 26 Jul 2003, Christine Kronberg wrote:
    
    >   Checking the logfiles of my private webserver this morning I
    >   see the following entries.
    >   It looks lile some playchild tried an buffer overflow but I
    >   don't remember seeing anything connected to access_log files.
    >   Google didn't help. Has anyone else this kind of requests?
    >   Or an idea what the result of this request should be?
    > 
    > 12.221.111.178 - - [25/Jul/2003:12:40:29 +0200] "HEAD
    > /logs/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
    > HTTP/1.0" 404 -
    > 12.221.111.178 - - [25/Jul/2003:12:40:29 +0200] "HEAD
    > /logs/active/access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
    > HTTP/1.0" 404 -
    > 12.221.111.178 - - [25/Jul/2003:12:40:30 +0200] "HEAD
    > /access_log?hellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohellohello
    > HTTP/1.0" 404 -
    
    -- 
    Those who dream by day are cognizant of many things which escape those who
    dream only by night. -Edgar Allan Poe
    
    
    
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Mon Jul 28 2003 - 15:25:56 PDT