logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Wierd %25252525 requests in access.log
Author
terok



Joined: 08 Jul 2011
Posts: 3

PostPosted: Tue 14 Feb '12 13:00    Post subject: Wierd %25252525 requests in access.log Reply with quote

Hi, we have plenty of requests which should not happen because of any software of ours. I tried google this and couldn't find anything useful.

We are using mod_proxy_ajp to proxy requests to tomcat.

Apache is version 2.2.21.

Any idea what could cause this? DoS? Bug in Apache request handling?

www.site.access_20120127.log 2717 172.24.33.4 - - [27/Jan/2012:02:18:41 +0200] "GET /siteservice?url=%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252Fsite HTTP/1.1" 301 500 "http://www.site/siteservice?url=%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252Fsite" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)" 0/0
Back to top
brazitech



Joined: 14 Feb 2012
Posts: 5
Location: Brazil, Taguatinga

PostPosted: Tue 14 Feb '12 16:55    Post subject: Post subject: Wierd %25252525 requests in access.log Reply with quote

hello
Check in one of the programs or scripts you are running. The address "http :// www.site/siteservice?url=%25252....." seems that it is being parsed.
Look in your config files for settings that may have defaulted to "site" "service" and or "siteservice"

This should give you a clue as to where your problem is at.
Hope this helps. If still having problems in clude more of a list of the programs or scripts you are running.

RS Brazitech Cool op
Back to top


Reply to topic   Topic: Wierd %25252525 requests in access.log View previous topic :: View next topic
Post new topic   Forum Index -> Apache