\x HTTP requests


Hello list

I see these HTTP request and I'm looking for more information :

...
x.x.x.1 - - [06/Nov/2006:17:33:23 -0500] "\x16\x03" 200 8 "-" "-"
x.x.x.2 - - [07/Nov/2006:16:26:21 -0500] "\x80m\x01\x03\x01" 200 8 "-" "-"
x.x.x.2 - - [07/Nov/2006:16:26:21 -0500] "\x80m\x01\x03" 200 8 "-" "-"
x.x.x.3 - - [08/Nov/2006:05:06:21 -0500] "\x80|\x01\x03\x01" 200 8 "-" "-"

Would it be someone attempting to send https request on my port 80 ?

Any clue would be appreciated

Have a nice day

Maxime Ducharme


------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------------

Relevant Pages

  • Re: tcpdump
    ... Aly Dharshi wrote: ... X would be a number so eth0 or eth1, you can also refine this with "src port" and "dst port" expressions, have you tried using wireshark instead if you are using an X system? ... > How do i capture http request and response using tcpdump ... response since the response will not be through port 80; the response to a request will be to some randomly assigned, ...
    (Fedora)
  • Re: Nmap/netwag problem.
    ... > proper protocol queries to provide a response- I see this very often ... Are you suggesting that if I send a Syn to port 80, ... pass my original Syn if it sees a valid HTTP request following it? ...
    (Pen-Test)
  • Re: Catching error exceptions via Biztalk
    ... I have a send port, which sends xml via http request. ... I think you should be able to get an error in your orchestration by setting the orchestration's port "delivery notification" property to transmitted. ...
    (microsoft.public.biztalk.general)
  • [Full-Disclosure] HTTP request with SMTP message
    ... It's not the first time, but I gave up trying to figure it out. ... My IIS (port 80) received this HTTP request from x.x.x.x. ...
    (Full-Disclosure)