[logs] Re: MY ACCESS LOG FILES ARE FILLED WITH "SEARCH /\x90\x04H\x04H\x04H\x04H\x04H\x04H\x04H\..................................."

james@private

MUKESH KUMAR SINGH wrote:
> DEAR FRIENDS
>
> MY ACCESS LOG FILES ARE FILLED WITH
>
> SEARCH 
> /\x90\x04H\x04H\x04H\x04H\x04H\x04H\x04H\...................................
>
> LIKE STRINGS
>
> CAN ANYONE PLEASE HELP ME AND TELL ME EXACTLY WHAT DOES IT MEAN.
>
> THANKS AND REGARDS,
>
> MAK
1.  Don't quote the entire digest.
2.  Don't shout.
3.  It's an IIS attack signature - if you are running Apache then ignore 
it.  If you are running IIS ensure you are running the latest version 
and have all relevant security patches applied.

Regards

James Turnbull

-- 
James Turnbull <james@private>
---
Author of Hardening Linux from Apress
(http://www.amazon.com/exec/obidos/tg/detail/-/1590594444/)
---
PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis