"Web server 500 error code (Internal Error)."

[Ian Martinez]

Hello,

I'm having a Notification that keeps popping up :

OSSEC HIDS Notification.
2014 Jan 27 12:35:59

Received From: (xibo) 192.168.0.126->/var/log/httpd/access_log
Rule: 31122 fired (level 5) -> "Web server 500 error code (Internal Error)."
Portion of the log(s):

192.168.56.13 - - [27/Jan/2014:12:35:51 +0000] "POST /xibo/xmds.php HTTP/1.1" 500 293 "-" "Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.3649)"

Any idea what can it be? i get it every 5-10 mins

thank you in advance

[dan (ddp)]

Someone is trying a POST attempt against /xibo/xmds.php on
192.168.66.13, and it's causing an error.

> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.

[Ian Martinez]

Is it something i can fix or just let it go?

[dan (ddp)]

On Mon, Jan 27, 2014 at 3:20 PM, Ian Martinez <ian.ma...@gmail.com> wrote:
> Is it something i can fix or just let it go?
>

That's not a question I can answer. You could find out why the client
is trying to post to that site, or check the log files to try and find
out why it's failing.

[Saul Alanis]

Here are a list of HTTP status codes you can use as reference:

https://support.google.com/webmasters/answer/40132?hl=en

This is completely unrelated question to OSSEC in my opinion and doesn't belong on this mailing list.

[Ian Martinez]

Thank for your help and i agree, seems appropriated for another forum.

ill look into it.