"Web server 500 error code (Internal Error)."

430 views
Skip to first unread message

Ian Martinez

unread,
Jan 27, 2014, 1:59:32 PM1/27/14
to ossec...@googlegroups.com
Hello,

I'm having a Notification that keeps popping up :


OSSEC HIDS Notification.
2014 Jan 27 12:35:59

Received From: (xibo) 192.168.0.126->/var/log/httpd/access_log
Rule: 31122 fired (level 5) -> "Web server 500 error code (Internal Error)."
Portion of the log(s):

192.168.56.13 - - [27/Jan/2014:12:35:51 +0000] "POST /xibo/xmds.php HTTP/1.1" 500 293 "-" "Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.3649)"

Any idea what can it be? i get it every 5-10 mins

thank you in advance

dan (ddp)

unread,
Jan 27, 2014, 2:05:49 PM1/27/14
to ossec...@googlegroups.com
Someone is trying a POST attempt against /xibo/xmds.php on
192.168.66.13, and it's causing an error.

> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.

Ian Martinez

unread,
Jan 27, 2014, 3:20:00 PM1/27/14
to ossec...@googlegroups.com
Is it something i can fix or just let it go?

dan (ddp)

unread,
Jan 27, 2014, 3:24:26 PM1/27/14
to ossec...@googlegroups.com
On Mon, Jan 27, 2014 at 3:20 PM, Ian Martinez <ian.ma...@gmail.com> wrote:
> Is it something i can fix or just let it go?
>

That's not a question I can answer. You could find out why the client
is trying to post to that site, or check the log files to try and find
out why it's failing.

Saul Alanis

unread,
Jan 27, 2014, 7:21:30 PM1/27/14
to ossec...@googlegroups.com
Here are a list of HTTP status codes you can use as reference:

https://support.google.com/webmasters/answer/40132?hl=en

This is completely unrelated question to OSSEC in my opinion and doesn't belong on this mailing list.

Ian Martinez

unread,
Jan 28, 2014, 12:02:17 AM1/28/14
to ossec...@googlegroups.com
Thank for your help and i agree, seems appropriated for another forum.

ill look into it.
Reply all
Reply to author
Forward
0 new messages