From owner-freebsd-questions@FreeBSD.ORG Sat Jun 5 06:37:09 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6254416A4CE for ; Sat, 5 Jun 2004 06:37:09 -0700 (PDT) Received: from av3-2-sn3.vrr.skanova.net (av3-2-sn3.vrr.skanova.net [81.228.9.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id A152143D1D for ; Sat, 5 Jun 2004 06:37:08 -0700 (PDT) (envelope-from hasse@swedehost.com) Received: by av3-2-sn3.vrr.skanova.net (Postfix, from userid 502) id D957F37EBB; Sat, 5 Jun 2004 15:37:07 +0200 (CEST) Received: from smtp1-1-sn3.vrr.skanova.net (smtp1-1-sn3.vrr.skanova.net [81.228.9.177]) by av3-2-sn3.vrr.skanova.net (Postfix) with ESMTP id CADBB37E77; Sat, 5 Jun 2004 15:37:07 +0200 (CEST) Received: from odin.swedehost.com (h171n2fls33o804.telia.com [217.209.211.171]) by smtp1-1-sn3.vrr.skanova.net (Postfix) with ESMTP id B53D43800E; Sat, 5 Jun 2004 15:37:07 +0200 (CEST) Received: from thor.swedehost.com (thor.swedehost.com [192.168.0.10]) by odin.swedehost.com (8.12.11/8.12.11) with ESMTP id i55Db955099727; Sat, 5 Jun 2004 15:37:09 +0200 (CEST) (envelope-from hasse@swedehost.com) From: Hasse Organization: The Valhalla Project To: freebsd-questions@freebsd.org Date: Sat, 5 Jun 2004 15:37:07 +0200 User-Agent: KMail/1.6.2 References: <200406051425.49401.hasse@swedehost.com> In-Reply-To: MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200406051537.07275.hasse@swedehost.com> X-Scanned-By: MIMEDefang 2.43 cc: Yasir Malik Subject: Re: Sending a message to another computer on the network X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Jun 2004 13:37:09 -0000 On Saturday 05 June 2004 15.20, Yasir Malik wrote: > > ----------------- > > httpd-access.log : > > > > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\ > > > > and the last line ending with : > > \x90\x90\x90\x90" 414 391 "-" "-" > > ---------------- > > He's obviously trying to hack into your system using some escape character > sequence. Report him. > Yasir > _______________________________________________ Hi. Do you think he is aware of this ? I mean doing it deliberatly. I think he got one of them worms. Look at the frequency : [Sat Jun 05 12:10:18 2004] [error] [client 217.209.211.183] request failed: URI too long (longer than 8190) [Sat Jun 05 12:11:54 2004] [Sat Jun 05 12:12:56 2004] [Sat Jun 05 12:13:14 2004] [Sat Jun 05 12:13:45 2004] [Sat Jun 05 12:15:27 2004] [Sat Jun 05 12:15:45 2004] [Sat Jun 05 12:17:23 2004] [Sat Jun 05 12:18:25 2004] [Sat Jun 05 12:18:27 2004] [Sat Jun 05 12:18:51 2004] [Sat Jun 05 12:19:04 2004] [Sat Jun 05 12:20:25 2004] [Sat Jun 05 12:21:10 2004] [Sat Jun 05 12:22:13 2004] [Sat Jun 05 12:24:14 2004] [Sat Jun 05 12:25:35 2004] [Sat Jun 05 12:27:30 2004] [Sat Jun 05 12:27:48 2004] [Sat Jun 05 12:28:45 2004] [Sat Jun 05 12:31:16 2004] [Sat Jun 05 12:37:25 2004] [Sat Jun 05 12:40:59 2004] [Sat Jun 05 12:48:49 2004] [Sat Jun 05 12:55:43 2004] [Sat Jun 05 12:59:14 2004] [Sat Jun 05 13:04:25 2004] [Sat Jun 05 13:08:03 2004] [Sat Jun 05 13:09:21 2004] [Sat Jun 05 13:11:20 2004] [Sat Jun 05 13:14:24 2004] [Sat Jun 05 13:21:14 2004] [Sat Jun 05 13:23:47 2004] [Sat Jun 05 13:24:06 2004] [Sat Jun 05 13:27:27 2004] [Sat Jun 05 13:36:04 2004] [Sat Jun 05 13:38:15 2004] [Sat Jun 05 13:41:58 2004] [Sat Jun 05 13:57:12 2004] / Hasse