On Saturday 05 June 2004 15.20, Yasir Malik wrote: > > ----------------- > > httpd-access.log : > > <snip> > > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\ > > </snip> > > and the last line ending with : > > \x90\x90\x90\x90" 414 391 "-" "-" > > ---------------- > > He's obviously trying to hack into your system using some escape character > sequence. Report him. > Yasir > _______________________________________________ Hi. Do you think he is aware of this ? I mean doing it deliberatly. I think he got one of them worms. Look at the frequency : [Sat Jun 05 12:10:18 2004] [error] [client 217.209.211.183] request failed: URI too long (longer than 8190) [Sat Jun 05 12:11:54 2004] [Sat Jun 05 12:12:56 2004] [Sat Jun 05 12:13:14 2004] [Sat Jun 05 12:13:45 2004] [Sat Jun 05 12:15:27 2004] [Sat Jun 05 12:15:45 2004] [Sat Jun 05 12:17:23 2004] [Sat Jun 05 12:18:25 2004] [Sat Jun 05 12:18:27 2004] [Sat Jun 05 12:18:51 2004] [Sat Jun 05 12:19:04 2004] [Sat Jun 05 12:20:25 2004] [Sat Jun 05 12:21:10 2004] [Sat Jun 05 12:22:13 2004] [Sat Jun 05 12:24:14 2004] [Sat Jun 05 12:25:35 2004] [Sat Jun 05 12:27:30 2004] [Sat Jun 05 12:27:48 2004] [Sat Jun 05 12:28:45 2004] [Sat Jun 05 12:31:16 2004] [Sat Jun 05 12:37:25 2004] [Sat Jun 05 12:40:59 2004] [Sat Jun 05 12:48:49 2004] [Sat Jun 05 12:55:43 2004] [Sat Jun 05 12:59:14 2004] [Sat Jun 05 13:04:25 2004] [Sat Jun 05 13:08:03 2004] [Sat Jun 05 13:09:21 2004] [Sat Jun 05 13:11:20 2004] [Sat Jun 05 13:14:24 2004] [Sat Jun 05 13:21:14 2004] [Sat Jun 05 13:23:47 2004] [Sat Jun 05 13:24:06 2004] [Sat Jun 05 13:27:27 2004] [Sat Jun 05 13:36:04 2004] [Sat Jun 05 13:38:15 2004] [Sat Jun 05 13:41:58 2004] [Sat Jun 05 13:57:12 2004]
/ Hasse _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
