| View previous topic :: View next topic |
| Author |
Message |
Spice
n00b
Joined: 14 Mar 2004
Posts: 28
Location: Germany
|
 Posted: Sun Jun 13, 2004 10:12 am Post subject: strange apache-log: should I be worry? |
 |
|
Hi there,
I take a closer look to my apache access- and errorlogs and find same strange entries:
| Code: |
error-log:
[Sun Jun 13 03:20:34 2004] [error] [client 172.184.136.7] Invalid method in request \xe3:
[Sun Jun 13 03:20:37 2004] [error] [client 172.184.136.7] Invalid method in request \xe3:
[Sun Jun 13 03:20:40 2004] [error] [client 172.184.136.7] Invalid method in request \xe3:
[Sun Jun 13 04:23:52 2004] [error] [client 217.224.128.85] Invalid method in request \xe3d
[Sun Jun 13 04:28:40 2004] [error] [client 213.23.32.116] Invalid method in request \xe3R
[Sun Jun 13 05:07:13 2004] [error] [client 217.94.205.175] Invalid method in request \xe3`
[Sun Jun 13 05:23:54 2004] [error] [client 217.224.128.85] Invalid method in request \xe3d
|
| Code: |
access-log:
172.184.136.7 - - [13/Jun/2004:03:20:34 +0200] "\xe3:" 501 354 "-" "-"
172.184.136.7 - - [13/Jun/2004:03:20:37 +0200] "\xe3:" 501 354 "-" "-"
172.184.136.7 - - [13/Jun/2004:03:20:39 +0200] "\xe3:" 501 354 "-" "-"
217.224.128.85 - - [13/Jun/2004:04:23:52 +0200] "\xe3d" 501 354 "-" "-"
213.23.32.116 - - [13/Jun/2004:04:28:40 +0200] "\xe3R" 501 354 "-" "-"
217.94.205.175 - - [13/Jun/2004:05:07:13 +0200] "\xe3`" 501 354 "-" "-"
217.224.128.85 - - [13/Jun/2004:05:23:54 +0200] "\xe3d" 501 354 "-" "-"
|
What is it? Is it a kind of vrius, which tries to infect my server?
If so, I'm vulnerable? I'm using Apache/2.0.49 (Gentoo/Linux) mod_jk2/2.0.4 mod_ssl/2.0.49 OpenSSL/0.9.7d PHP/4.3.6
Thanks for your help...
Spice |
|
| Back to top |
|
 |
Nomean
n00b
Joined: 13 Jun 2004
Posts: 1
|
|
| Back to top |
|
|
Spice
n00b
Joined: 14 Mar 2004
Posts: 28
Location: Germany
|
| Posted: Sun Jun 13, 2004 10:43 am Post subject: |
|
|
Hi Nomean,
thanks or your answer.
I've allready apache 2.0.49-r3 installed. So my mod_ssl should not be vulnerable for this buffer overflow described in the linked document.
So long...
Spice |
|
| Back to top |
|
|
|
Networking & Security
