Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 5 Jun 2004 15:37:07 +0200
From:      Hasse <hasse@swedehost.com>
To:        freebsd-questions@freebsd.org
Cc:        Yasir Malik <ymalik@cs.stevens-tech.edu>
Subject:   Re: Sending a message to another computer on the network
Message-ID:  <200406051537.07275.hasse@swedehost.com>
In-Reply-To: <Pine.NEB.4.58.0406050919060.13555@pink-elephant.cs.stevens-tech.edu>
References:  <200406051425.49401.hasse@swedehost.com> <Pine.NEB.4.58.0406050919060.13555@pink-elephant.cs.stevens-tech.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Saturday 05 June 2004 15.20, Yasir Malik wrote:
> > -----------------
> > httpd-access.log :
> > <snip>
> > 217.209.211.183 - - [05/Jun/2004:14:11:28 +0200] "SEARCH /\x90\x02\xb1\
> > </snip>
> > and the last line ending with :
> > \x90\x90\x90\x90" 414 391 "-" "-"
> > ----------------
>
> He's obviously trying to hack into your system using some escape character
> sequence.  Report him.
> Yasir
> _______________________________________________
Hi.
Do you think he is aware of this ?
I mean doing it deliberatly. I think he got one of them worms.
Look at the frequency :
[Sat Jun 05 12:10:18 2004] [error] [client 217.209.211.183] request failed: 
URI too long (longer than 8190)
[Sat Jun 05 12:11:54 2004]
[Sat Jun 05 12:12:56 2004]
[Sat Jun 05 12:13:14 2004]
[Sat Jun 05 12:13:45 2004]
[Sat Jun 05 12:15:27 2004]
[Sat Jun 05 12:15:45 2004]
[Sat Jun 05 12:17:23 2004]
[Sat Jun 05 12:18:25 2004]
[Sat Jun 05 12:18:27 2004]
[Sat Jun 05 12:18:51 2004]
[Sat Jun 05 12:19:04 2004]
[Sat Jun 05 12:20:25 2004]
[Sat Jun 05 12:21:10 2004]
[Sat Jun 05 12:22:13 2004]
[Sat Jun 05 12:24:14 2004]
[Sat Jun 05 12:25:35 2004]
[Sat Jun 05 12:27:30 2004]
[Sat Jun 05 12:27:48 2004]
[Sat Jun 05 12:28:45 2004]
[Sat Jun 05 12:31:16 2004]
[Sat Jun 05 12:37:25 2004]
[Sat Jun 05 12:40:59 2004]
[Sat Jun 05 12:48:49 2004]
[Sat Jun 05 12:55:43 2004]
[Sat Jun 05 12:59:14 2004]
[Sat Jun 05 13:04:25 2004]
[Sat Jun 05 13:08:03 2004]
[Sat Jun 05 13:09:21 2004]
[Sat Jun 05 13:11:20 2004] 
[Sat Jun 05 13:14:24 2004]
[Sat Jun 05 13:21:14 2004]
[Sat Jun 05 13:23:47 2004] 
[Sat Jun 05 13:24:06 2004]
[Sat Jun 05 13:27:27 2004]
[Sat Jun 05 13:36:04 2004]
[Sat Jun 05 13:38:15 2004] 
[Sat Jun 05 13:41:58 2004] 
[Sat Jun 05 13:57:12 2004]

/ Hasse



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200406051537.07275.hasse>