Most apache log entries have a GET followed by the url, i.e. http requests. I've just encountered an entry without the GET or HTTP suffix. It is simply \giberish\moregiberish.
Notice the backslashes instead of forward slashes so it is not even a directory structure.
Oddly the server returned 200, i.e. success, according to the logs.
Any ideas?
Thanks guys.
-CProgrammer
apache log
Was "gibberish" misspelled in the log file too, or was that a mistake in transcribing it here?
ipaddress - - [03/Nov/2010:13:48:19 -0400] "\x87\x83\xbbX3a" 200 3207 "-" "-"
That is the line in the file, I left out the actual IP.
That is the line in the file, I left out the actual IP.
These are 4 hex characters. Well, 3 at least, plus a malformed one.
\ indicates special character, x is hex, the next two bytes are hex value.
In ASCII, this doesn't really spell anything useful:"çâ╗:"
\ indicates special character, x is hex, the next two bytes are hex value.
In ASCII, this doesn't really spell anything useful:"çâ╗:"
A mystery..
It's not an http request. I thought Apache only handled http. How does one create a request as above?
It's not an http request. I thought Apache only handled http. How does one create a request as above?
Quote:Original post by CProgrammer
A mystery..
It's not an http request. I thought Apache only handled http. How does one create a request as above?
by opening a socket to port 80 and sending stuff, it might be an attempt to hack the server (There have been a few security flaws related to malformed requests in the past)
Since the 200 success return is an http return, im guessing this doesnt necessarily mean they got what they wanted?
This topic is closed to new replies.
Advertisement
Popular Topics
Advertisement