Snake in the grass

From: sfat_private
Date: Sat Sep 28 2002 - 00:14:32 PDT

  • Next message: Jonathan A. Zdziarski: "RE: E-Card Remote Code Execution Scam" 

    
 ('binary' encoding is not supported, stored as-is)
Has anyone seen these before?

((Mods: Port 80))

209.29.94.x - - [24/Sep/2002:06:00:12 -0400] "\xc1\xe1\x88%2?\xef\xa4
\xeb+NP\xdc\x93\xfd\xf9\x83\xd7\xef\xe8i\v\xb1\x83\xeb\xf7\xa4\v\xb0
\x7f\x9c\xcf\xd3\x1a\x97a\xd4`$\x07\xba\xbfG\xf1v\xc0\xd6\x03
\xa7'#\xca\xe7\v\x0e\x16\xd9\x13E`\xaa\x96)M5vb\xb0r6\xa4\xe7/\xeb\x1b\x11
\xac\x9c!\x99\xe3\xf6" 400 373 "-" "-"
209.29.94.x - - [24/Sep/2002:06:00:19 -0400] "\xe1&\xf6\xa3\xb4
\x1b\x88p\xaa\x1f\x10Z;\xc2\xc5\xe4\xe7\x9f" 501 - "-" "-"
209.29.94.x - - [24/Sep/2002:06:00:48 -0400] "\xe1&\xf6\xa3\xb4
\x1b\x88p\xaa\x1f\x10Z;\xc2\xc5\xe4\xe7\x9f" 501 - "-" "-"
209.29.94.x - - [24/Sep/2002:06:01:35 -0400] "\xc1\xe1\x88%2?\xef\xa4
\xeb+NP\xdc\x93\xfd\xf9\x83\xd7\xef\xe8i\v\xb1\x83\xeb\xf7\xa4\v\xb0
\x7f\x9c\xcf\xd3\x1a\x97a\xd4`$\x07\xba\xbfG\xf1v\xc0\xd6\x1f\x13{\x0c}
\xd1]\xb9\x807\rc\xce\xce\xc4\x0e\x17`\xe7\xb0\xe3
\xf9R\xda~\xfa\xadm\xfa\x95\xed4N\x1c\xb1\xd5\x84\xbc\x89;\xc59\x83
\vi\x8c\xbdf\xd2+\x04|}\x06\xce\x8b\x92\xdb\x8c\x92d0" 400 373 "-" "-"
209.29.94.x - - [24/Sep/2002:06:07:25 -0400] "4\\\x18\xb2\xe9\x99%\xf0\x13
\xe0\x80O\xab\xd4>\x07(\xeeH\xb9\x8a\xcc\x97\xa8\xf9\x19
\xc72;\x85Xy\xce\x95\xbc\xe7\xde~\xa0%M\x92\xa01|e\x07M" 501 - "-" "-"
209.29.94.x - - [24/Sep/2002:06:07:30 -0400] "4\\\x18\xb2\xe9\x99%\xf0\x13
\xe0\x80O\xab\xd4>\x07(\xeeH\xb9\x8a\xcc\x97\xa8\xf9\x19
\xc72;\x85Xy\xce\x95\xbc\xe7\xde~\xa0%M\x92\xa01|e\x07M" 501 - "-" "-"
209.29.94.x - - [24/Sep/2002:06:07:44 -0400] "4\\\x18\xb2\xe9\x99%\xf0\x13
\xe0\x80O\xab\xd4>\x07(\xeeH\xb9\x8a\xcc\x97\xa8\xf9\x19
\xc72;\x85Xy\xce\x95\xbc\xe7\xde~\xa0%M\x92\xa01|e\x07M" 501 - "-" "-"
209.29.94.x - - [24/Sep/2002:06:08:09 -0400] "4\\\x18\xb2\xe9\x99%\xf0\x13
\xe0\x80O\xab\xd4>\x07(\xeeH\xb9\x8a\xcc\x97\xa8\xf9\x19
\xc72;\x85Xy\xce\x95\xbc\xe7\xde~\xa0%M\x92\xa01|e\x07M" 501 - "-" "-"

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    

    



    

    


This archive was generated by hypermail 2b30 
: Sat Sep 28 2002 - 17:40:28 PDT