Re: Suspicious logging in access.log

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Asrai khn wrote:
> Hi from last few days i am getting the below in access.log, and also
> duno what had been changed this virtaul machine which is hosting our
> clients domains going unresponsive after running for few hours. before
> it was running cool from last 2 years.
> Version : httpd-2.2.4-2.fc6

Well, it isn't this attack...

%u0aeb

tells you it targets IIS, plus this hit the access logs.

You want to know which request kills things.  To find that out, you need
to load mod_log_forensic and capture all the requests as they arrive, and
see which ones run to completion v.s. which ones hang up the server.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux