Re: apaceh 2 on xp pro -- strange access log entries: "SEARCH /\x90\x02\xb1..."
From: Mimic (null_at_void.net)
Date: 07/29/04
- Next message: kirkzeusNOSPAM_at_hotmail.com: "Please Help: MS Outlook and Digital Certificates"
- Previous message: John Vogel: "Re: Do not use SAFEBOOT, etc."
- In reply to: Stephen K. Gielda: "Re: apaceh 2 on xp pro -- strange access log entries: "SEARCH /\x90\x02\xb1...""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 29 Jul 2004 20:28:48 +0100
Stephen K. Gielda wrote:
> In article <wJSdne437KKEj5XcRVn-jA@brightview.com>, null@void.net
> says...
>
>>TheKeith wrote:
>>
>>
>>>these strange log entries go on for many lines and on the end of the
>>>last line says, 'HTTP/1.0" 414 352'
>>>
>>>I'm not sure what the 352 code is but I believe the 414 indicates that
>>>the request is too long, correct?
>>>
>>>Anyway, should I worry about this--I'm running apache 2 on xp pro? Help
>>>would be appreciated--thanks.
>>>
>>
>>Yeah its requested URI too long, sounds like someone was trying formmail
>>exploits
>>
>>
>
> Actually it's the IIS WebDAV exploit, probably a worm.
>
> /steve
fair enough
-- Mimic "When life hands you lemons, ask for tequila and salt." ZGF0YWZsZXhAY2FubmFiaXNtYWlsLmNvbQ== ( www.hidemyemail.net ) "Without knowledge you have fear. With fear you create your own nightmares." "He who controls Google, controls the world".
- Next message: kirkzeusNOSPAM_at_hotmail.com: "Please Help: MS Outlook and Digital Certificates"
- Previous message: John Vogel: "Re: Do not use SAFEBOOT, etc."
- In reply to: Stephen K. Gielda: "Re: apaceh 2 on xp pro -- strange access log entries: "SEARCH /\x90\x02\xb1...""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|