[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: strange http log entry



Dear Firewallers,

Thanks for your responses.

On Sat, 10 Jul 2004 09:22 pm, HubiX wrote:
> James Sinnamon a écrit :
> >Dear firewallers,
> >
> >I found a two unusual "SEARCH" records on my apache httpd
> >access.log.
> >
> >They start as follows:
> >
> >144.132.111.231 - - [10/Jul/2004:11:38:24 +1000] "SEARCH
> >/\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\
> >\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\
<snip/>
>
> this exploit is an attack for IIS, the default server of microsoft...
> be quiet with apache, caudium, boa and other linux servers...

This confirms that there was cause for concern, but not alarm, as I am not
running Microsoft or IIS. 

Thanks again,

regards,

James



Reply to: