Strange message in apache_log

I have a strange line in apache_log. It starts with SEARCH, then
following the characters /\x90, and a lot of \x02\xb1\ (thousands) ended
by thousands of \x90 and then the numbers 414 354

How should I read this message ?

Thanks

Francesco

lamp napisa³(a):

> I have a strange line in apache_log. It starts with SEARCH, then
> following the characters /\x90, and a lot of \x02\xb1\ (thousands) ended
> by thousands of \x90 and then the numbers 414 354
>
> How should I read this message ?

don't - it's a buffer-overflow hack attempt. Works on IIS ;)

--
Pawe³ Zdziarski
kontakt ze mn± jedynie przez Jabbera:
fax3 _na_ chrome _kropka_ pl
fax3 _na_ jabberpl _kropka_ org

>> How should I read this message ?
>
> don't - it's a buffer-overflow hack attempt. Works on IIS ;)

Ok, thank you! Well, I use Apache.
I have noticed a strange fact about error_log
file. It was about 3.4 Giga byte. I deleted it. Is it normal this huge
size for this file?

Francesco

"lamp" <lamp@dina.it> wrote in message
news:pan.2004.07.25.06.45.55.307690@dina.it...
>
> >> How should I read this message ?
> >
> > don't - it's a buffer-overflow hack attempt. Works on IIS ;)
>
> Ok, thank you! Well, I use Apache.
> I have noticed a strange fact about error_log
> file. It was about 3.4 Giga byte. I deleted it. Is it normal this huge
> size for this file?

I am finding a similar problem here. See the thread on apache security
started a few days ago.
I have over 700,000 access attempts so far this month which are unwanted
visitors

Stuart