Strange looking log entry

Discussion in 'Site & Server Administration' started by macdesign, Mar 19, 2005.

  1. #1
    I'm finding log entries a few times a month on several web sites which are are not related - find it strange. They stand out because of the weird string

    62.31.103.148 27 1 40.0 KB United Kingdom XXXX:+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

    Seems to be part of blueyonder.co.uk

    Just wondering why the entries appear like this instead of a meaningfull name
     
    macdesign, Mar 19, 2005 IP
  2. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Look at the end of the log line. If you see what appears to be some garbage characters or encoded characters, then it's a buffer overrun attempt.

    J.D.
     
    J.D., Mar 19, 2005 IP
  3. macdesign

    macdesign Peon

    Messages:
    568
    Likes Received:
    59
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Nothing extra, but I looked at another one, and it's a different IP address - so maybe that's what's happening

    195.93.21.72 - - [14/Feb/2005:10:20:40 -0700] "GET /$$$$$$$$$$$$
    HTTP/1.0" 200 18337 "XXXX:+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 7.0; Windows NT 5.1; .NET CLR 1.1.4322)"


    (I added $$$$$$$$$$$$ to hide my URL)
     
    macdesign, Mar 19, 2005 IP
  4. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Oh, then it's probably some client software that blocks referrers. I think NAV will do this, but I may be wrong.

    J.D.
     
    J.D., Mar 19, 2005 IP
  5. NewComputer

    NewComputer Well-Known Member

    Messages:
    2,021
    Likes Received:
    68
    Best Answers:
    0
    Trophy Points:
    188
    #5
    Yea, NAV does do that, but it shows different characters... I would look into that a little further.
     
    NewComputer, Mar 19, 2005 IP