Forum Moderators: DixonJones

Message Too Old, No Replies

\\n in a referer string

         

Marino

6:21 pm on Jun 2, 2005 (gmt 0)

10+ Year Member



Hello,

Found that in a referer string from a recurrent spammer :

"Mozilla/4.0 \\nAccept: */* \\nAccept-Language: en-us, en, de;q=0.50"

Not that frequent, though...

80.139.237.xx - - [19/Apr/2005:06:36:27 +0200] "GET /robots.txt HTTP/1.1" 200 39 "http://www.licats.#*$!/" "Mozilla/4.0 \\nAccept: */* \\nAccept-Language: en-us, en, de;q=0.50" 0
80.139.237.xx - - [19/Apr/2005:06:36:36 +0200] "GET /mime/markup/php/standards_en/html_tables_en/html_tables_23.php HTTP/1.1" 200 13438 "http://www.licats.#*$!/" "Mozilla/4.0 \\nAccept: */* \\nAccept-Language: en-us, en, de;q=0.50" 2
80.139.216.xxx - - [17/Apr/2005:07:15:37 +0200] "GET / HTTP/1.1" 302 - "http://www.licats.xxx/" "Mozilla/4.0 \\nAccept: */* \\nAccept-Language: en-us, en, de;q=0.50" 0

sordinous

1:17 pm on Jun 16, 2005 (gmt 0)

10+ Year Member



looks as it is, and Googlebot seems to be
the biggest referrer-log spammer we have :-)

licats.com is a Web-Archiv and traffic-costs
to give search-engines something to eat are
very high. We all spending money for traffic
and eating traffic as well...

Sordinous
Webmaster@licats.com

hanuman

4:41 am on Jun 17, 2005 (gmt 0)

10+ Year Member



just a quick note. an old type of a DOS attack is a request for yoursite.com//////////////////////////

which will make your server to resolve the url piece by piece till it crashes