Security Basics mailing list archives

\xe7y~REg9\xe0\xe0%\xc9\x02 in HTTPd log


From: Mike Johanning <tr4nc3 () cox net>
Date: 27 Jul 2003 07:44:12 -0000



I've been getting lines like this in my Apache server logs..

67.120.110.74 - - [27/Jul/2003:00:11:17 -0700] "\xe7y~REg9\xe0\xe0%\xc9
\x02" 200 3352

I thought it might be connected to lines like this:
80.48.243.32 - - [27/Jul/2003:00:20:37 -
0700] "GET /.hash=793400e0eaf4a504c725e38865c0838cc2ba47e8 HTTP/1.1" 404 
313

But I just found out their from Kazaa/WinMX..

I've searched google and it looks similar to zLib compression. Anybody 
have any ideas?

-Mike

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: