Re: [suse-security] strange Apache Log entries

[suse@xxxxxxxxxxxx]

Thankyou Mehmet four your reply.

Can you be more specific please.

i.e.

1: what did they actually try to do

2: code is 200 - they may have got something

3: 5480 bytes returned - what were they?

4: or is this another 'bug' - false info message?


Kind Regards - Keith



>somebody try to hack your apache

> Hi All.
>
> Just found these entries in my apache access_log today.
> Can anyone tell what they are please.
>
> 81.168.215.30 - - [20/Jul/2004:12:45:47 +0000] "\xa8oL:" 200 5480
> 81.168.215.30 - - [20/Jul/2004:12:46:26 +0000] "\xd0IO:" 200 5480
> 81.168.215.30 - - [20/Jul/2004:12:56:29 +0000] "\xc0\xcdLs" 200 5480
> 81.168.215.30 - - [20/Jul/2004:12:57:53 +0000] "8\xb5Rs" 200 5480
>
> My static IP address is: 81.168.xxx.xxx
>
> Kind Regards - Keith Roberts


-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here