You are viewing a plain text version of this content. The canonical link for it is here.
Posted to l10n@couchdb.apache.org by jan i <ja...@apache.org> on 2014/02/22 21:05:22 UTC

Errors on translate.apache.org

Hi.

I have the last couple of days received access errors on
translate.apache.org

Somebody at 116.8.108.210', most likely on a apple device, breaks our
service.

I have listed part (public) of the header below:

<WSGIRequest
path:/HNAP1/,
GET:<QueryDict: {}>,
POST:<QueryDict: {}>,
COOKIES:{},
META:{'DOCUMENT_ROOT': '/x1/www',
 'GATEWAY_INTERFACE': 'CGI/1.1',
 'HTTP_HOST': '',
 'HTTP_USER_AGENT': 'Mozil140.211.11.94, Mozilla/5.0 (Windows NT 6.1)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36',
 'PATH_INFO': u'/HNAP1/',
 'PATH_TRANSLATED': '/x1/www/pootle/wsgi.py/HNAP1/
',
 'QUERY_STRING': '',
 'REMOTE_ADDR': '116.8.108.210',
 'REMOTE_PORT': '36780',
 'REQUEST_METHOD': 'GET',
 'REQUEST_URI': '/HNAP1/',


If anybody can tell me what they are doing (and why). They must get a
pretty clear error message on the screen.

If it is nobody that are active on ML, we might block the IP (I suspect its
a script trying to access our po files).

rgds
jan I.

Re: Errors on translate.apache.org

Posted by Andy Wenk <an...@nms.de>.
On 22 February 2014 21:45, Alexander Shorin <kx...@gmail.com> wrote:

> On Sun, Feb 23, 2014 at 12:05 AM, jan i <ja...@apache.org> wrote:
> > 116.8.108.210
>
> China. Looks like one of many bots from there. Probably it looked for
> vulnerable hosts with HNAP to perform attack like that one:
> http://www.sourcesec.com/Lab/dlink_hnap_captcha.pdf


Jan, actually nobody of the translation team reported errors so I suggest
to block the IP address.

Thanks

Cheers

Andy

-- 
Andy Wenk
Hamburg - Germany
RockIt!

http://www.couchdb-buch.de
http://www.pg-praxisbuch.de

GPG fingerprint: C044 8322 9E12 1483 4FEC 9452 B65D 6BE3 9ED3 9588

https://people.apache.org/keys/committer/andywenk.asc

Re: Errors on translate.apache.org

Posted by Andy Wenk <an...@nms.de>.
On 22 February 2014 21:45, Alexander Shorin <kx...@gmail.com> wrote:

> On Sun, Feb 23, 2014 at 12:05 AM, jan i <ja...@apache.org> wrote:
> > 116.8.108.210
>
> China. Looks like one of many bots from there. Probably it looked for
> vulnerable hosts with HNAP to perform attack like that one:
> http://www.sourcesec.com/Lab/dlink_hnap_captcha.pdf


Jan, actually nobody of the translation team reported errors so I suggest
to block the IP address.

Thanks

Cheers

Andy

-- 
Andy Wenk
Hamburg - Germany
RockIt!

http://www.couchdb-buch.de
http://www.pg-praxisbuch.de

GPG fingerprint: C044 8322 9E12 1483 4FEC 9452 B65D 6BE3 9ED3 9588

https://people.apache.org/keys/committer/andywenk.asc

Re: Errors on translate.apache.org

Posted by Alexander Shorin <kx...@gmail.com>.
On Sun, Feb 23, 2014 at 12:05 AM, jan i <ja...@apache.org> wrote:
> 116.8.108.210

China. Looks like one of many bots from there. Probably it looked for
vulnerable hosts with HNAP to perform attack like that one:
http://www.sourcesec.com/Lab/dlink_hnap_captcha.pdf



--
,,,^..^,,,

Re: Errors on translate.apache.org

Posted by Pedro Albuquerque <pa...@gmail.com>.
Em 22/02/2014 20:05, jan i escreveu:
> Hi.
>
> I have the last couple of days received access errors on
> translate.apache.org
>
> Somebody at 116.8.108.210', most likely on a apple device, breaks our
> service.
>
> I have listed part (public) of the header below:
>
> <WSGIRequest
> path:/HNAP1/,
> GET:<QueryDict: {}>,
> POST:<QueryDict: {}>,
> COOKIES:{},
> META:{'DOCUMENT_ROOT': '/x1/www',
>   'GATEWAY_INTERFACE': 'CGI/1.1',
>   'HTTP_HOST': '',
>   'HTTP_USER_AGENT': 'Mozil140.211.11.94, Mozilla/5.0 (Windows NT 6.1)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36',
>   'PATH_INFO': u'/HNAP1/',
>   'PATH_TRANSLATED': '/x1/www/pootle/wsgi.py/HNAP1/
> ',
>   'QUERY_STRING': '',
>   'REMOTE_ADDR': '116.8.108.210',
>   'REMOTE_PORT': '36780',
>   'REQUEST_METHOD': 'GET',
>   'REQUEST_URI': '/HNAP1/',
>
>
> If anybody can tell me what they are doing (and why). They must get a
> pretty clear error message on the screen.
>
> If it is nobody that are active on ML, we might block the IP (I suspect its
> a script trying to access our po files).
It´s not me, that I can tell you.
Regards,
Pedro.
>
> rgds
> jan I.
>


---------------------------------------------------------------------
To unsubscribe, e-mail: l10n-unsubscribe@openoffice.apache.org
For additional commands, e-mail: l10n-help@openoffice.apache.org


Re: Errors on translate.apache.org

Posted by Alexander Shorin <kx...@gmail.com>.
On Sun, Feb 23, 2014 at 12:05 AM, jan i <ja...@apache.org> wrote:
> 116.8.108.210

China. Looks like one of many bots from there. Probably it looked for
vulnerable hosts with HNAP to perform attack like that one:
http://www.sourcesec.com/Lab/dlink_hnap_captcha.pdf



--
,,,^..^,,,

---------------------------------------------------------------------
To unsubscribe, e-mail: l10n-unsubscribe@openoffice.apache.org
For additional commands, e-mail: l10n-help@openoffice.apache.org