Web Server Attack?

[Jason Burke <jburke@luci.org>]

Greetings All,

Has anyone out there seen this before...

Aug 15 08:33:12 alter3000 sendmail[22080]: NOQUEUE: SYSERR: putoutmsg
([192.168.10.11]): error on output channel sending "500 Command
unrecognized:
"GET http://www.wenxuecity.com/ HTTP/1.1"": Broken pipe

Aug 15 08:33:12 alter3000 sendmail[22080]: NOQUEUE: SYSERR: putoutmsg
([192.168.10.11]): error on output channel sending "500 Command
unrecognized:
"Host: www.wenxuecity.com"": Broken pipe

Aug 15 08:33:12 alter3000 sendmail[22080]: NOQUEUE: SYSERR: putoutmsg
([192.168.10.11]): error on output channel sending "500 Command
unrecognized:
"Accept: */*"": Broken pipe

Aug 15 08:33:12 alter3000 sendmail[22080]: NOQUEUE: SYSERR: putoutmsg
([192.168.10.11]): error on output channel sending "500 Command
unrecognized:
"Pragma: no-cache"": Broken pipe

Aug 15 08:33:12 alter3000 sendmail[22080]: NOQUEUE: SYSERR: putoutmsg
([192.168.10.11]): error on output channel sending "500 Command
unrecognized:
"User-Agent: Mozilla/5.0 (compatible; MSIE 5.01; Win2000)"": Broken pipe

Aug 15 08:33:12 alter3000 sendmail[22080]: NOQUEUE: SYSERR: putoutmsg
([192.168.10.11]): error on output channel sending "500 Command
unrecognized:
""": Broken pipe


It looks like an attack to me, but I can't tell what exploit the
attacker
was trying to use. Anyone have any ideas?

Jason Burke

-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.