[prev in list] [next in list] [prev in thread] [next in thread] 

List:       loganalysis
Subject:    [logs] Re: MY ACCESS LOG FILES ARE FILLED WITH
From:       James Turnbull <james () lovedthanlost ! net>
Date:       2005-12-07 4:55:27
Message-ID: 43966B3F.2090703 () lovedthanlost ! net
[Download RAW message or body]

MUKESH KUMAR SINGH wrote:
> DEAR FRIENDS
>
> MY ACCESS LOG FILES ARE FILLED WITH
>
> SEARCH 
> /\x90\x04H\x04H\x04H\x04H\x04H\x04H\x04H\...................................
>
> LIKE STRINGS
>
> CAN ANYONE PLEASE HELP ME AND TELL ME EXACTLY WHAT DOES IT MEAN.
>
> THANKS AND REGARDS,
>
> MAK
1.  Don't quote the entire digest.
2.  Don't shout.
3.  It's an IIS attack signature - if you are running Apache then ignore 
it.  If you are running IIS ensure you are running the latest version 
and have all relevant security patches applied.

Regards

James Turnbull

-- 
James Turnbull <james@lovedthanlost.net>
---
Author of Hardening Linux from Apress
(http://www.amazon.com/exec/obidos/tg/detail/-/1590594444/)
---
PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)

_______________________________________________
LogAnalysis mailing list
LogAnalysis@lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/loganalysis
[prev in list] [next in list] [prev in thread] [next in thread]