[Zope-CMF] "bad HTTP request" error

Tres Seaver tseaver@zope.com
23 Sep 2002 11:58:46 -0400


On Mon, 2002-09-23 at 11:00, Kristina Quimson Buenafe wrote:
> Hello all,
> 
> My Plone site wasn't working so I checked the log file and got the following
> traceback:
> ------
> 2002-09-19T08:04:55 INFO(0) ZODB Opening database for mounting:
> '20763616_1024509255.515000'
> ------
> 2002-09-19T08:04:55 INFO(0) ZODB Mounted database
> '20763616_1024509255.515000' at /temp_folder
> ------
> 2002-09-19T08:04:59 INFO(0) ZServer HTTP server started at Thu Sep 19
> 04:04:59 2002
>  Hostname: recap-vcan.sys.virginia.edu
>  Port: 80
> ------
> 2002-09-19T08:04:59 INFO(0) ZServer FTP server started at Thu Sep 19
> 04:04:59 2002
>  Hostname: recap-vcan
>  Port: 8021
> ------
> 2002-09-19T08:04:59 INFO(0) ZServer PCGI Server started at Thu Sep 19
> 04:04:59 2002
>  Inet socket port: 8090
> ------
> 2002-09-19T11:23:45 ERROR(200) ZServer Bad HTTP request: 'GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
> u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0'

Somebody is trying to attack your webserver (CodeRed / Nimda worms); 
there is no problem on your side at all, as you aren't running IIS :)

Tres.
-- 
===============================================================
Tres Seaver                                tseaver@zope.com
Zope Corporation      "Zope Dealers"       http://www.zope.com