Separating requests with persistent backends

André Cruz andre.cruz at segula.pt
Wed May 30 10:20:27 UTC 2007


Hello all.

Ever since I enabled persistent connections to the backends I get  
strange requests in my apache error logs. I'll paste one in the end  
of the mail.

The request seems to be part of another request that was split  
somehow as it doesn't contain the first part (GET, POST,  
whatever ...). This wouldn't concern me much, as the request seems  
like SPAM, if not for the last part of the request: GET /js/pngfix.js  
HTTP/1.0. It seems that this bogus request is messing up the next  
request in line as well...

Just so you know this is a Livejournal installation and the request  
seems to try to leave a comment. I was expecting Perlbal to discard  
these invalid requests or at least separate them...

Is my analysis wrong?

Thanks,
André

[Wed May 30 11:11:19 2007] [error] [client 10.135.64.111] Invalid  
method in request  
replyto=&parenttalkid=0&itemid=36185&journal=asminhasbijuterias&chrp1=36 
185-67653-1178229600-WlQb7jSFB9foAIKwZSrC-ee52bf366bf
415ee4f0914bca253de5d&usertype=anonymous&guest_userpost=&guest_user_url= 
http%3A%2F%2Fxwgtkvyq.pochtamt.ru% 
2F128.html&userpost=&password=uelpfcvylh&do_login=&captcha_chal=c0% 
3A1178229600%3A3049%3A900%3A3ccnHlD8
cVFNEP59a64T% 
3A05cfd4ae84bf57bbc0819da874594362&answer=&checkCommentOrto=Verificar 
+Ortografia&submitpost=Publicar&submitpreview=Pr%26eacute%3B- 
visualizar&body=%3CA+href%3Dhttp%3A%2F%2Fvizthsbg342.nightmail.ru%
2F172.html%3E%EA%E0%F1%F1%EE%E2%FB%E9+%E0%EF%EF%E0%F0%E0%F2+%F7%E5%EB% 
FF%E1%E8%ED%F1%EA+%EF%F0%EE%E4%E0%EC+%E1+%F3%3C%2FA%3E%0Ahttp%3A%2F% 
2Fvizthsbg342.nightmail.ru%2F172.html%0A%5Burl%3Dhttp%3A%2F%2Fvizthsbg3
42.nightmail.ru%2F172.html%5D%EA%E0%F1%F1%EE%E2%FB%E9+%E0%EF%EF%E0%F0% 
E0%F2+%F7%E5%EB%FF%E1%E8%ED%F1%EA+%EF%F0%EE%E4%E0%EC+%E1+%F3%5B%2Furl% 
5D%0A%3CA+href%3Dhttp%3A%2F%2Flgykbcpb1815.nightmail.ru%2F259.html%3E
%EC%E8%F2%FF%E5%E2+%EA%F0%E5%EF%E8%F2%E5%F1%FC+%EB%FE%E4%E8+%F1%EA%EE% 
F0%EE+%EB%E5%F2%EE%3C%2FA%3E%0Ahttp%3A%2F%2Flgykbcpb1815.nightmail.ru% 
2F259.html%0A%5Burl%3Dhttp%3A%2F%2Flgykbcpb1815.nightmail.ru%2F259.ht
ml%5D%EC%E8%F2%FF%E5%E2+%EA%F0%E5%EF%E8%F2%E5%F1%FC+%EB%FE%E4%E8+%F1% 
EA%EE%F0%EE+%EB%E5%F2%EE%5B%2Furl%5D%0A%3CA+href%3Dhttp%3A%2F% 
2Fotisalrssj.krovatka.su%2F48.html%3E%F1%EA%EB%E0%E4+%EE%EF%F2%3C%2FA% 
3E%0Ahtt
p%3A%2F%2Fotisalrssj.krovatka.su%2F48.html%0A%5Burl%3Dhttp%3A%2F% 
2Fotisalrssj.krovatka.su%2F48.html%5D%F1%EA%EB%E0%E4+%EE%EF%F2%5B% 
2Furl%5D%0A%3CA+href%3Dhttp%3A%2F%2Faumqmvuo.front.ru%2F198.html%3E%EA 
%E0%F0%F
2%E0+%FD%EA%EE%EB%EE%E3%E8%F7%E5%F1%EA%E8+%ED%E5%E1%EB%E0%E3%EE%EF%F0% 
E8%FF%F2%ED%FB%F5+%EC%E5%F1%F2+%E2+%F1%E0%ED%EA%F2-%EF%E5%F2%F0%E1%F3% 
F0%E3%E5%3C%2FA%3E%0Ahttp%3A%2F%2Faumqmvuo.front.ru%2F198.html%0A%5Bu
rl%3Dhttp%3A%2F%2Faumqmvuo.front.ru%2F198.html%5D%EA%E0%F0%F2%E0+%FD% 
EA%EE%EB%EE%E3%E8%F7%E5%F1%EA%E8+%ED%E5%E1%EB%E0%E3%EE%EF%F0%E8%FF%F2% 
ED%FB%F5+%EC%E5%F1%F2+%E2+%F1%E0%ED%EA%F2-%EF%E5%F2%F0%E1%F3%F0%E3%E5%
5B%2Furl%5D%0A%3CA+href%3Dhttp%3A%2F%2Fkmtyqtotn.rbcmail.ru%2F69.html% 
3E%F8%E0%E1%EB%EE%ED%FB+%EE%F4%E8%F6%E8%E0%EB%FC%ED%FB%F5+%EF%E8%F1% 
E5%EC%3C%2FA%3E%0Ahttp%3A%2F%2Fkmtyqtotn.rbcmail.ru%2F69.html%0A%5Burl%
3Dhttp%3A%2F%2Fkmtyqtotn.rbcmail.ru%2F69.html%5D%F8%E0%E1%EB%EE%ED%FB+ 
%EE%F4%E8%F6%E8%E0%EB%FC%ED%FB%F5+%EF%E8%F1%E5%EC%5B%2Furl%5D%0A%3CA 
+href%3Dhttp%3A%2F%2Faydxjiwakd705.nm.ru%2F314.html%3E%F2%F0%E8%EB%EE%E
3%E8%FF+%E3%EE%ED%F7%E0%F0%EE%E2%E0+%EE%E1%F0%FB%E2+%EE+%F0%F3%F1%F1% 
EA%EE%EC+%E8%E4%E5%E0%EB%E8%F1%F2%E5+%F0%E5%F4%E5%F0%E0%F2%3C%2FA%3E% 
0Ahttp%3A%2F%2Faydxjiwakd705.nm.ru%2F314.html%0A%5Burl%3Dhttp%3A%2F%2Fa
ydxjiwakd705.nm.ru%2F314.html%5D%F2%F0%E8%EB%EE%E3%E8%FF+%E3%EE%ED%F7% 
E0%F0%EE%E2%E0+%EE%E1%F0%FB%E2+%EE+%F0%F3%F1%F1%EA%EE%EC+%E8%E4%E5%E0% 
EB%E8%F1%F2%E5+%F0%E5%F4%E5%F0%E0%F2%5B%2Furl%5D%0A%3CA+href%3Dhttp%3
A%2F%2Fsihocuax700.nightmail.ru%2F22.html%3E%F1%E8%EB%EE%E2%EE%E5+%F2% 
F0%EE%E5%E1%EE%F0%FC%E5%3C%2FA%3E%0Ahttp%3A%2F% 
2Fsihocuax700.nightmail.ru%2F22.html%0A%5Burl%3Dhttp%3A%2F% 
2Fsihocuax700.nightmail.ru%2F22.h
tml%5D%F1%E8%EB%EE%E2%EE%E5+%F2%F0%EE%E5%E1%EE%F0%FC%E5%5B%2Furl%5D%0A 
%3CA+href%3Dhttp%3A%2F%2Fzkqoiwfu1470.nightmail.ru%2F196.html%3E%EA%EE 
%F1%F2%FE%EC%FB+%E2%EE%F1%F2%EE%F7%ED%FB%F5+%F2%E0%ED%F6%E5%E2%3C%2FA
%3E%0Ahttp%3A%2F%2Fzkqoiwfu1470.nightmail.ru%2F196.html%0A%5Burl% 
3Dhttp%3A%2F%2Fzkqoiwfu1470.nightmail.ru%2F196.html%5D%EA%EE%F1%F2%FE% 
EC%FB+%E2%EE%F1%F2%EE%F7%ED%FB%F5+%F2%E0%ED%F6%E5%E2%5B%2Furl%5D%0A% 
3CA+hr
ef%3Dhttp%3A%2F%2Fqefvobslo989.nightmail.ru%2F6.html%3E%F1%EA%F0%E8%EF 
%F2+%F7%E0%F2%E0%3C%2FA%3E%0Ahttp%3A%2F%2Fqefvobslo989.nightmail.ru% 
2F6.html%0A%5Burl%3Dhttp%3A%2F%2Fqefvobslo989.nightmail.ru%2F6.html%5D%
F1%EA%F0%E8%EF%F2+%F7%E0%F2%E0%5B%2Furl%5D%0A%3CA+href%3Dhttp%3A%2F% 
2Ftpwhzcat346.nm.ru%2F200.html%3E%EE%F7%E8%F1%F2%EA%E0+%E2%EE%E4%FB+% 
E2+%E1%E5%EB%E3%EE%F0%EE%E4%E5+%E4%ED%E5%F1%F2%F0%EE%E2%F1%EA%E5%3C%2FA%
3E%0Ahttp%3A%2F%2Ftpwhzcat346.nm.ru%2F200.html%0A%5Burl%3Dhttp%3A%2F% 
2Ftpwhzcat346.nm.ru%2F200.html%5D%EE%F7%E8%F1%F2%EA%E0+%E2%EE%E4%FB+% 
E2+%E1%E5%EB%E3%EE%F0%EE%E4%E5+%E4%ED%E5%F1%F2%F0%EE%E2%F1%EA%E5%5B%2Fu
rl%5D%0AGET /js/pngfix.js HTTP/1.0


More information about the perlbal mailing list