Re: apaceh 2 on xp pro -- strange access log entries: "SEARCH /\x90\x02\xb1..."

From: Stephen K. Gielda (steve_at_packetderm.com.bogus)
Date: 07/28/04

  • Next message: Kleeb: "Linksys Firmware 1.46.00" 
    Date: Wed, 28 Jul 2004 17:39:56 -0400

    In article <wJSdne437KKEj5XcRVn-jA@brightview.com>, null@void.net
    says...
    > TheKeith wrote:
    >
    > > these strange log entries go on for many lines and on the end of the
    > > last line says, 'HTTP/1.0" 414 352'
    > >
    > > I'm not sure what the 352 code is but I believe the 414 indicates that
    > > the request is too long, correct?
    > >
    > > Anyway, should I worry about this--I'm running apache 2 on xp pro? Help
    > > would be appreciated--thanks.
    > >
    >
    > Yeah its requested URI too long, sounds like someone was trying formmail
    > exploits
    >
    >
    Actually it's the IIS WebDAV exploit, probably a worm.

    /steve 

    -- 
High speed SSH Tunnels, Encrypted Socks, multiple web proxies (filtered 
and unfiltered), Advanced E-mail, Usenet, Web Hosting, and far more.  
No one gives you more control over your e-mail than we do!
http://www.cotse.net/privacyservice.html
  • Next message: Kleeb: "Linksys Firmware 1.46.00"