On Saturday 05 June 2004 15.20, Yasir Malik wrote:
> > -----------------
> > httpd-access.log :
> > <snip>
> > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\
> > </snip>
> > and the last line ending with :
> > \x90\x90\x90\x90" 414 391 "-" "-"
> > ----------------
>
> He's obviously trying to hack into your system using some escape character
> sequence.  Report him.
> Yasir
> _______________________________________________
Hi.
Do you think he is aware of this ?
I mean doing it deliberatly. I think he got one of them worms.
Look at the frequency :
[Sat Jun 05 12:10:18 2004] [error] [client 217.209.211.183] request failed: 
URI too long (longer than 8190)
[Sat Jun 05 12:11:54 2004]
[Sat Jun 05 12:12:56 2004]
[Sat Jun 05 12:13:14 2004]
[Sat Jun 05 12:13:45 2004]
[Sat Jun 05 12:15:27 2004]
[Sat Jun 05 12:15:45 2004]
[Sat Jun 05 12:17:23 2004]
[Sat Jun 05 12:18:25 2004]
[Sat Jun 05 12:18:27 2004]
[Sat Jun 05 12:18:51 2004]
[Sat Jun 05 12:19:04 2004]
[Sat Jun 05 12:20:25 2004]
[Sat Jun 05 12:21:10 2004]
[Sat Jun 05 12:22:13 2004]
[Sat Jun 05 12:24:14 2004]
[Sat Jun 05 12:25:35 2004]
[Sat Jun 05 12:27:30 2004]
[Sat Jun 05 12:27:48 2004]
[Sat Jun 05 12:28:45 2004]
[Sat Jun 05 12:31:16 2004]
[Sat Jun 05 12:37:25 2004]
[Sat Jun 05 12:40:59 2004]
[Sat Jun 05 12:48:49 2004]
[Sat Jun 05 12:55:43 2004]
[Sat Jun 05 12:59:14 2004]
[Sat Jun 05 13:04:25 2004]
[Sat Jun 05 13:08:03 2004]
[Sat Jun 05 13:09:21 2004]
[Sat Jun 05 13:11:20 2004] 
[Sat Jun 05 13:14:24 2004]
[Sat Jun 05 13:21:14 2004]
[Sat Jun 05 13:23:47 2004] 
[Sat Jun 05 13:24:06 2004]
[Sat Jun 05 13:27:27 2004]
[Sat Jun 05 13:36:04 2004]
[Sat Jun 05 13:38:15 2004] 
[Sat Jun 05 13:41:58 2004] 
[Sat Jun 05 13:57:12 2004]

/ Hasse
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to