| View previous topic :: View next topic |
| Author |
Message |
Mpegger
-
Joined: 29 Apr 2003
Posts: 1
|
 Posted: Wed Jul 09, 2003 4:58 am Post subject: VERY wierd log entry!! |
 |
|
I just checked the log today and found this extreamly wierd entry in it.
24.228.1.188 - - [08/Jul/2003:23:12:56 +1133] "GET /GSSCPicnic/index.php?image=GSSC-Picnic0023.jpg&d=d.html HTTP/1.1" 200 0 "ŽW ²±ô†ßØWì
¶²úo±b©ÑËÉ._Ï£UW¥XÉÕ!*J%¦Ì:sÙr\B—„%O#¶òò/cáÞRìGZ![äÏ=
Ѥ» ‘Y´'^°Çk~DN»!¤ÞðEŒòKEbbè=»‘PŒÃLŒS¥œ )õE¦ôzàŒÔãd%3£DÑtÄWcLì¬ö˪_tx§oE'äËbE“Ǣ߶–¨‘ÚÚ}ÖÑS^æ(¨ú&ÓåDda øÁðg´™Ì}ž&ÉJª4iÖýŒbØÚЩa`D“,ö†ÔCËOÙÖž!y¯C
O—‚MwÐÓµZù Gô:¨‰)¯Øì¶LŒ¢_5ñúXø|
Æ4É} á2ÐÝËâà£f—®Åð#&ØœeÏÐùH¾wÒ#¾_"CŠ…K‡p‘&‰ˆáøìÚ±«u ØÐ~ ™
t!5žÙÙÿ" "%3£DÑtÄWcLì¬ö˪_tx§oE'äËbE“Ǣ߶–¨‘ÚÚ}ÖÑS^æ(¨ú&ÓåDda øÁðg´™Ì}ž&ÉJª4iÖýŒbØÚЩa`D“,ö†ÔCËOÙÖž!y¯C
O—‚MwÐÓµZù Gô:¨‰)¯Øì¶LŒ¢_5ñúXø|
Æ4É} á2ÐÝËâà£f—®Åð#&ØœeÏÐùH¾wÒ#¾_"CŠ…K‡p‘&‰ˆáøìÚ±«u ØÐ~ ™
t!5žÙÙÿ"
24.228.1.188 - - [08/Jul/2003:23:13:01 +1133] "GET /GSSCPicnic/GSSC-Picnic0023.jpg HTTP/1.1" 200 34179 "http://roadriders.no-ip.org/GSSCPicnic/index.php?image=GSSC-Picnic0023.jpg&d=d.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
You notice the last correctly formatted entry was only 2 seconds before the next correctly formated entry. Has anyone ever seen this happen before? What do you think it could be? |
|
| Back to top |
  |
 |
goose
-
Joined: 17 Sep 2002
Posts: 608
Location: The Land Of OZ! come here toto!
|
| Posted: Wed Jul 09, 2003 3:04 pm Post subject: |
|
|
looks like the russian or the chinese attaking your server :lol:
_________________
living in an armish paradise.....no gates here!
mawuahahaha :) |
|
| Back to top |
|
|
aprelium
-
Joined: 22 Mar 2002
Posts: 6800
|
| Posted: Wed Jul 09, 2003 3:33 pm Post subject: Re: VERY wierd log entry!! |
|
|
The two weird parts of the log line are the referrer (the URL that links to that request) and the user-agent (the name of the browser that made the request). The problem may come from the browser that could have sent wrong fields (referrer and user-agent).
_________________
Support Team
Aprelium - http://www.aprelium.com |
|
| Back to top |
 |
|
d-cat
-
Joined: 25 Jul 2003
Posts: 12
|
| Posted: Fri Jul 25, 2003 4:21 am Post subject: |
|
|
Likely just modem noise from a dial-in client with a bad connection (though I havn't seen errors that long since before 9600 baud modems came out). The request was correctly formatted and served (result 200), just the client ID was garbled. I'd hardly call that a hack.
If it was line noise, the client would have recieved similar garbage, causing it to re-request the same information immediately, hence getting the next responce 2 seconds later.
»D-cat |
|
| Back to top |
|
|
CapFusion
-
Joined: 18 May 2003
Posts: 617
Location: Lost in Abyss' Dungeon
|
| Posted: Fri Jul 25, 2003 6:26 pm Post subject: |
|
|
Look like a line noise, to me.
_________________
CapFusion,... |
|
| Back to top |
|
|
os17fan
-
Joined: 21 Mar 2003
Posts: 531
Location: USA
|
| Posted: Fri Jul 25, 2003 7:11 pm Post subject: |
|
|
No I know what that is , its the MATRIX lol. 8)
_________________
This web server is the best ! |
|
| Back to top |
  |
|
os17fan
-
Joined: 21 Mar 2003
Posts: 531
Location: USA
|
| Posted: Fri Jul 25, 2003 7:12 pm Post subject: |
|
|
No I know what that is , its the MATRIX lol. 8)
The MATRIX has you dude. :D
_________________
This web server is the best ! |
|
| Back to top |
|
|
CapFusion
-
Joined: 18 May 2003
Posts: 617
Location: Lost in Abyss' Dungeon
|
| Posted: Sat Jul 26, 2003 12:34 am Post subject: |
|
|
| os17fan wrote: | No I know what that is , its the MATRIX lol. 8)
The MATRIX has you dude. :D |
:D Heehe :D Then you better get a better defense against those Matrix bot. I don't think Protesis (sp?) will can help you in this situation.
_________________
CapFusion,... |
|
| Back to top |
|
|
|
