Re: Apache log entries

From: Khayman (khayman_psp@yaho.se)
Date: 02/27/03 

From: Khayman <khayman_psp@yaho.se>
Date: 27 Feb 2003 11:27:23 +0100

Kim S. Poulsen <kspFJERN@akim.dk> wrote in
news:fcor5v07o88dn85e0kkq76bmtetkqvshkc@4ax.com:

> I have been getting a lot of entries like this in my Apache access log
> recently. Besides trying to use my server as a mail proxy.
> Does anybody know what is the "\x05\x01\" is supposed to do?
> xxx.xx.dk 200.46.116.62 - - [23/Feb/2003:21:58:44 +0100] "CONNECT
> 200.24.139.146:25 HTTP/1.0" 200 849 "-" "-"
> xxx.xx.dk 200.46.116.62 - - [24/Feb/2003:01:43:41 +0100] "\x05\x01"
> 200 849 "-" "-"
> xxx.xx.dk 200.46.116.62 - - [24/Feb/2003:02:23:47 +0100] "\x05\x01"
> 200 849 "-" "-"

Believe it's part of one of these wonderful Windows virii/IIS exploits - I
think I took part in some discussion about it some weeks ago..

Take it easy and search a little on google if you would like to know more.

Khay.

Relevant Pages

  • Apache access log entries
    ... I have been getting a lot of entries like this in my Apache access log ... Besides trying to use my server as a mail proxy, ...
    (comp.security.firewalls)
  • Apache log entries
    ... I have been getting a lot of entries like this in my Apache access log ... Besides trying to use my server as a mail proxy. ...
    (comp.os.linux.security)
  • Re: Apache log entries
    ... >> I have been getting a lot of entries like this in my Apache access log ... Besides trying to use my server as a mail proxy. ... >Khay. ...
    (comp.os.linux.security)
  • Re: Question - Can I force a machine to use a specific DC for Authentication Diag 1
    ... Connecting to directory service on server s2dc1. ... Latency information for 1 entries in the vector were ignored. ... DNS ...
    (microsoft.public.windows.server.general)
  • Re: Partial Replication of W2K3 DC After DCPROMO
    ... Connecting to directory service on server willdc01. ... Latency information for 1 entries in the vector were ... PASS - All the DNS entries for DC are registered on DNS server ...
    (microsoft.public.windows.server.active_directory)