httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From haresh ghoghari <hdghogh...@yahoo.com>
Subject Re: [users@httpd] Re: How to stop request in Apache 1.3(request commming for proxy)
Date Wed, 13 Oct 2004 04:16:00 GMT
Thnax MIchelle taking interest in my problem..
1) 
I think it can not be dos attack bcoz all connetion
are going to establish..
2) 
 Accept: image/gif, image/x-xbitmap, image/jpeg,
> > image/pjpeg, application/vnd.ms-
> > Referer:
> >
>
http://www.amchogoa.com/Hotels/whispering/tariff.htm^M
> 
> I have checked out this HTML-Page and and there are
> no
> links to a 5.jpg or 6.jpg
> 
> > Accept-Language: en-us^M
> > User-Agent: Mozilla/4.0 (compatible; MSIE 6.0;
> Windows
> > NT 5.1)^M
> > Via: 1.0 proxy2.timesgroup.com:80
> > (Squid/2.4.STABLE6)^M
> 

Above is hear is getting using snort IDS 

I am sending  accesslog of apache ..

[Sun Oct  3 00:16:51 2004] [error] [client
68.155.149.14] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:52 2004] [error] [client
80.55.107.58] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/b
[Sun Oct  3 00:16:52 2004] [error] [client
24.107.43.252] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:52 2004] [error] [client
12.73.73.55] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/b.
[Sun Oct  3 00:16:52 2004] [error] [client
67.168.58.34] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/b
[Sun Oct  3 00:16:52 2004] [error] [client
66.42.1.110] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/5.
[Sun Oct  3 00:16:52 2004] [error] [client
200.158.49.62] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:52 2004] [error] [client
66.185.84.71] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/6
[Sun Oct  3 00:16:52 2004] [error] [client
12.151.176.10] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:52 2004] [error] [client
201.248.200.45] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:52 2004] [error] [client
200.203.38.247] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:52 2004] [error] [client
222.102.128.158] File does not exist:
/home/webdata/panash/gardameditech.com/htdoc
[Sun Oct  3 00:16:52 2004] [error] [client
222.102.128.158] File does not exist:
/home/webdata/panash/gardameditech.com/htdoc
[Sun Oct  3 00:16:52 2004] [error] [client
216.113.128.194] File does not exist:
/home/webdata/panash/gardameditech.com/htdoc
[Sun Oct  3 00:16:52 2004] [error] [client
213.66.222.156] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:52 2004] [error] [client
200.158.49.62] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:52 2004] [error] [client
200.203.38.247] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:52 2004] [error] [client
200.147.218.169] File does not exist:
/home/webdata/panash/gardameditech.com/htdoc
[Sun Oct  3 00:16:52 2004] [error] [client
66.41.103.50] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/6
[Sun Oct  3 00:16:52 2004] [error] [client 66.94.98.6]
File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/6.j
[Sun Oct  3 00:16:52 2004] [error] [client
200.162.26.30] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:52 2004] [error] [client
200.147.100.213] File does not exist:
/home/webdata/panash/gardameditech.com/htdoc
[Sun Oct  3 00:16:53 2004] [error] [client
200.11.89.2] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/6.
[Sun Oct  3 00:16:53 2004] [error] [client
213.226.133.83] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:53 2004] [error] [client
24.205.162.142] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:53 2004] [error] [client
217.144.192.72] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:53 2004] [error] [client
66.185.84.71] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/6
[Sun Oct  3 00:16:53 2004] [error] [client 4.8.88.117]
File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/6.j
[Sun Oct  3 00:16:53 2004] [error] [client
12.151.176.10] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:53 2004] [error] [client
24.107.43.252] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:53 2004] [error] [client
201.248.200.45] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:53 2004] [error] [client
24.211.41.81] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/b
[Sun Oct  3 00:16:53 2004] [error] [client
67.168.58.34] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/b
[Sun Oct  3 00:16:53 2004] [error] [client
24.205.162.142] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs
[Sun Oct  3 00:16:53 2004] [error] [client
200.138.73.88] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:53 2004] [error] [client
24.245.0.224] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/b
[Sun Oct  3 00:16:53 2004] [error] [client
66.136.202.10] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs/
[Sun Oct  3 00:16:53 2004] [error] [client
200.147.218.169] File does not exist:
/home/webdata/panash/gardameditech.com/htdoc
[Sun Oct  3 00:16:53 2004] [error] [client
213.226.133.83] File does not exist:
/home/webdata/panash/gardameditech.com/htdocs



That is error log of apache ...

Thanking u 
HAresh

--- Michelle Konzack <linux4michelle@freenet.de>
wrote:

> Am 2004-10-11 02:27:21, schrieb haresh ghoghari:
> > Dear all
> 
> > request is comming from different ip all IP
> accessing
> > only two page 6.jpg and 5.jpg but they are not
> present
> > in my webserver 
> 
> Hmmm...
> 
> > I also take access.log of 6 hours and i found
> there
> > are  request from 29000  uniq IP and IP i
> srepeated
> > after 3v3ry 6 hours..
> 
> Maybe a DoS attack...
> 
> > Using snort i analyz TCP header i got following
> common
> > in all request 
> > "
> > Accept: image/gif, image/x-xbitmap, image/jpeg,
> > image/pjpeg, application/vnd.ms-
> > Referer:
> >
>
http://www.amchogoa.com/Hotels/whispering/tariff.htm^M
> 
> I have checked out this HTML-Page and and there are
> no
> links to a 5.jpg or 6.jpg
> 
> > Accept-Language: en-us^M
> > User-Agent: Mozilla/4.0 (compatible; MSIE 6.0;
> Windows
> > NT 5.1)^M
> > Via: 1.0 proxy2.timesgroup.com:80
> > (Squid/2.4.STABLE6)^M
> 
> Because they come via a proxy, maybe this is areal
> DoS attack
> 
> Please can you check out other packages ariving on
> your server. 
> It might be interesting whether the other requests
> are coming
> via proxys too.
> 
> > X-Forwarded-For: 10.100.200.252^M
> 
> Is this your Server ?
> 
> > Thanking u
> > from
> > Haresh
> 
> Michelle
> 

> ATTACHMENT part 2 application/pgp-signature
name=signature.pgp




		
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message