View previous topic :: View next topic |
Author |
Message |
Mpegger -
Joined: 29 Apr 2003 Posts: 1
|
Posted: Wed Jul 09, 2003 4:58 am Post subject: VERY wierd log entry!! |
|
|
I just checked the log today and found this extreamly wierd entry in it.
24.228.1.188 - - [08/Jul/2003:23:12:56 +1133] "GET /GSSCPicnic/index.php?image=GSSC-Picnic0023.jpg&d=d.html HTTP/1.1" 200 0 "W W
ob._ϣUWX!*J%:sr\B%O#/cRGZ![=
ѤY'^k~DN!EKEbb=PLS )Ezd%3DtWcL˪_txoE'bEǢ߶}֝S^(&Ddag}&J4ibЩa`D,CO֞!yC
OMwӵZG:)L_5X|
4}2f#&eHw#_"CKp&ڱu~
t!5" "%3DtWcL˪_txoE'bEǢ߶}֝S^(&Ddag}&J4ibЩa`D,CO֞!yC
OMwӵZG:)L_5X|
4}2f#&eHw#_"CKp&ڱu~
t!5"
24.228.1.188 - - [08/Jul/2003:23:13:01 +1133] "GET /GSSCPicnic/GSSC-Picnic0023.jpg HTTP/1.1" 200 34179 "http://roadriders.no-ip.org/GSSCPicnic/index.php?image=GSSC-Picnic0023.jpg&d=d.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
You notice the last correctly formatted entry was only 2 seconds before the next correctly formated entry. Has anyone ever seen this happen before? What do you think it could be? |
|
Back to top |
|
 |
goose -
Joined: 17 Sep 2002 Posts: 608 Location: The Land Of OZ! come here toto!
|
Posted: Wed Jul 09, 2003 3:04 pm Post subject: |
|
|
looks like the russian or the chinese attaking your server :lol: _________________ living in an armish paradise.....no gates here!
mawuahahaha :) |
|
Back to top |
|
 |
aprelium -
Joined: 22 Mar 2002 Posts: 6800
|
Posted: Wed Jul 09, 2003 3:33 pm Post subject: Re: VERY wierd log entry!! |
|
|
The two weird parts of the log line are the referrer (the URL that links to that request) and the user-agent (the name of the browser that made the request). The problem may come from the browser that could have sent wrong fields (referrer and user-agent). _________________ Support Team
Aprelium - http://www.aprelium.com |
|
Back to top |
|
 |
d-cat -
Joined: 25 Jul 2003 Posts: 12
|
Posted: Fri Jul 25, 2003 4:21 am Post subject: |
|
|
Likely just modem noise from a dial-in client with a bad connection (though I havn't seen errors that long since before 9600 baud modems came out). The request was correctly formatted and served (result 200), just the client ID was garbled. I'd hardly call that a hack.
If it was line noise, the client would have recieved similar garbage, causing it to re-request the same information immediately, hence getting the next responce 2 seconds later.
D-cat |
|
Back to top |
|
 |
CapFusion -
Joined: 18 May 2003 Posts: 617 Location: Lost in Abyss' Dungeon
|
Posted: Fri Jul 25, 2003 6:26 pm Post subject: |
|
|
Look like a line noise, to me. _________________ CapFusion,... |
|
Back to top |
|
 |
os17fan -
Joined: 21 Mar 2003 Posts: 531 Location: USA
|
Posted: Fri Jul 25, 2003 7:11 pm Post subject: |
|
|
No I know what that is , its the MATRIX lol. 8) _________________ This web server is the best ! |
|
Back to top |
|
 |
os17fan -
Joined: 21 Mar 2003 Posts: 531 Location: USA
|
Posted: Fri Jul 25, 2003 7:12 pm Post subject: |
|
|
No I know what that is , its the MATRIX lol. 8)
The MATRIX has you dude. :D _________________ This web server is the best ! |
|
Back to top |
|
 |
CapFusion -
Joined: 18 May 2003 Posts: 617 Location: Lost in Abyss' Dungeon
|
Posted: Sat Jul 26, 2003 12:34 am Post subject: |
|
|
os17fan wrote: | No I know what that is , its the MATRIX lol. 8)
The MATRIX has you dude. :D |
:D Heehe :D Then you better get a better defense against those Matrix bot. I don't think Protesis (sp?) will can help you in this situation. _________________ CapFusion,... |
|
Back to top |
|
 |
|