无效的内容长度和客户端发送格式错误的主机标头答案

【问题标题】：Invalid Content-Length and Client sent malformed Host header无效的内容长度和客户端发送格式错误的主机标头
【发布时间】：2017-04-27 04:29:38
【问题描述】：

我从 apache httpd 日志文件中得到了这个日志你能帮忙解决问题吗

谢谢

[Wed Apr 26 02:40:13 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/wa.exe
[Wed Apr 26 02:40:13 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/wa.exe
[Wed Apr 26 02:40:14 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/whois.cgi
[Wed Apr 26 02:40:14 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/whois.cgi
[Wed Apr 26 02:40:36 2017] [error] [client x.x.x.x] script '/var/www/cgi-bin/contact.php' not found or unable to stat
[Wed Apr 26 02:40:38 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/counter.exe
[Wed Apr 26 02:40:58 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/hosting
[Wed Apr 26 02:41:02 2017] [error] [client x.x.x.x] script '/var/www/cgi-bin/form.php' not found or unable to stat
[Wed Apr 26 02:41:05 2017] [error] [client x.x.x.x] script '/var/www/cgi-bin/comments.php' not found or unable to stat
[Wed Apr 26 02:41:08 2017] [error] [client x.x.x.x] script not found or unable to stat: /var/www/cgi-bin/projects_site
[Wed Apr 26 02:41:46 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:47 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:47 2017] [error] [client x.x.x.x] Invalid Content-Length

[Wed Apr 26 02:41:49 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:50 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:50 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:51 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:51 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:51 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:41:52 2017] [error] [client x.x.x.x] Invalid Content-Length

[Wed Apr 26 02:43:02 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:03 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:03 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:04 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:04 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:04 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:05 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:05 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:06 2017] [error] [client x.x.x.x] Invalid Content-Length
[Wed Apr 26 02:43:20 2017] [error] [client x.x.x.x] Client sent malformed Host header
[Wed Apr 26 02:43:20 2017] [error] [client x.x.x.x] Client sent malformed Host header
[Wed Apr 26 02:43:31 2017] [error] [client x.x.x.x] Client sent malformed Host header
[Wed Apr 26 02:43:31 2017] [error] [client x.x.x.x] Client sent malformed Host header
[Wed Apr 26 02:43:31 2017] [error] [client x.x.x.x] Client sent malformed Host header

httpd 应该有什么特殊配置 x.x.x.x 指的是我们的 IP 地址，所以它不是来自外部的攻击。

【问题讨论】：

不用担心。我们的安全团队正在运行产生此错误的扫描。我忘记检查：文件不存在：/var/www/error/nessus

标签： apache centos

【解决方案1】：

不用担心。我们的安全团队正在运行产生此错误的扫描。我忘记检查：文件不存在：/var/www/error/nessus

【讨论】：