httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dennis Veatch <dvea...@woh.rr.com>
Subject Re: [users@httpd] data in the error log file
Date Fri, 10 Jan 2003 22:34:46 GMT


Yes


> msg Freitag 10 Januar 2003 17:02 by Jacob Coby:
> > >/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> > >NN N
> >
> > NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> >NN N
> > NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> >NN N
> > NNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%uc
> >bd 3
> > %u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
>
> I have this nimda variant too in the log file;
> but my access_log shows actually some new kind of attack:
> 217.80.107.136 - - [10/Jan/2003:21:20:04 +0100] "�" 501 - "-" "-"
> 212.202.178.140 - - [10/Jan/2003:21:34:48 +0100] "�" 501 - "-" "-"
> 217.80.107.136 - - [10/Jan/2003:21:35:19 +0100] "�" 501 - "-" "-"
> 137.194.36.1 - - [10/Jan/2003:21:49:08 +0100] "�" 501 - "-" "-"
> 217.80.107.136 - - [10/Jan/2003:21:50:18 +0100] "�" 501 - "-" "-"
> 217.225.31.42 - - [10/Jan/2003:21:52:49 +0100] "�" 501 - "-" "-"
> 139.19.2.50 - - [10/Jan/2003:21:55:48 +0100] "�" 501 - "-" "-"
> 217.80.107.136 - - [10/Jan/2003:22:05:17 +0100] "�" 501 - "-" "-"
> 217.80.107.136 - - [10/Jan/2003:22:20:08 +0100] "�" 501 - "-" "-"
> 62.46.63.175 - - [10/Jan/2003:22:32:12 +0100] "�" 501 - "-" "-"
> 217.80.107.136 - - [10/Jan/2003:22:35:15 +0100] "�" 501 - "-" "-"
> 217.80.107.136 - - [10/Jan/2003:22:50:08 +0100] "�" 501 - "-" "-"
>
> and the corresponding error_log
> [Fri Jan 10 21:20:04 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 21:34:48 2003] [error] [client 212.202.178.140] Invalid method
> in request �
> [Fri Jan 10 21:35:19 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 21:49:08 2003] [error] [client 137.194.36.1] Invalid method in
> request �
> [Fri Jan 10 21:50:18 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 21:52:49 2003] [error] [client 217.225.31.42] Invalid method in
> request �
> [Fri Jan 10 21:55:48 2003] [error] [client 139.19.2.50] Invalid method in
> request �
> [Fri Jan 10 22:05:17 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 22:20:08 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 22:32:12 2003] [error] [client 62.46.63.175] Invalid method in
> request �
> [Fri Jan 10 22:35:15 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 22:50:08 2003] [error] [client 217.80.107.136] Invalid method
> in request �
> [Fri Jan 10 22:57:25 2003] [error] [client 217.230.31.250] Invalid method
> in request �
>
> has anyone else seen this?
> Regards

-- 
Registered Linux User - 193414

"Windows: A thirty-two bit extension and graphical shell to a sixteen-bit 
patch to an eight-bit operating system originally coded for a four-bit 
microprocessor which was written by a two-bit company that can't stand one 
bit of competition." -- Jargon File Resouces.


Sig for OSS: Never be afraid to try something yourself, remember amateurs 
built the Ark, professionals built the Titanic.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message