Re: BitTorrent protocol in apache logs

[nile <nile@xxxxxxxxxxxxxx>]

On Thu, Nov 24, 2005 at 08:03:43PM +0200, maillist wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi
> My setup is following:
> I'm running Tor exit server with transparent Squid on my router. All
> outgoing traffic to port 80 is transparently routed to Squid.
> 
> Tor server - router (with apache and transparent squid) - internet
> 
> After I installed Tor exit node I started having following in Apache's logs:
> [Tue Nov 22 20:46:23 2005] [error] [client xxx.xxx.xxx.xxx] Invalid URI in
> request \x13BitTorrent protocol\x80
> [Tue Nov 22 20:46:26 2005] [error] [client xxx.xxx.xxx.xxx] Invalid URI in
> request \x13BitTorrent protocol\x80
> [Tue Nov 22 20:46:26 2005] [error] [client xxx.xxx.xxx.xxx] Invalid URI in
> request \x13BitTorrent protocol\x80
> [Tue Nov 22 20:46:35 2005] [error] [client xxx.xxx.xxx.xxx] Invalid URI in
> request \x13BitTorrent protocol\x80
> 
> Any ideas?
> 
> Markus
> 

Markus,

That's likely not the fault of Tor, but rather a random scan for
vulnerabilities in your web server. I say that with tenative confidence.

If you get the error regularly, perhaps you could create an empty file
called "\x13BitTorrent protocol\x80" in your httpd's root directory and
see if it goes away.

G'luck,
nile