Something in Apache server access log? - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: Something in Apache server access log? (/showthread.php?tid=29270)
Something in Apache server access log? by jren207 on 07-29-2004 at 11:32 PM
When I look through my access log for Apache, i notice this in it:
217.135.208.163 - - [27/Jul/2004:21:52:01 +0100] "SEARCH /\x90\xc9
\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\
.....
\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\x90\x90\x90
\x90\x90\x90\x90\x90\x90\x90\x90HTTP/1.0" 414 404
(I have cut out some of it where the ... are because it would look unsightly in this thread.)
Sometimes the robots.txt file is requested but not always.
Is it a search engine searching my site or something else 
???
RE: Something in Apache server access log? by .blade// on 07-29-2004 at 11:35 PM
Would you mind putting less of the "\xc9" and just put a "..." because it's stretching this thread WAAY out...
RE: Something in Apache server access log? by WDZ on 07-30-2004 at 12:33 AM
The big dodgy SEARCH line looks like a hacking attempt... check this out: http://www.webservertalk.com/message295069.html
It's meant for IIS, so you should be safe with Apache.
The attacker's IP is from the same ISP as you, dialup.pol.co.uk. 
As for the robots.txt requests, yeah, that's probably a search engine or some other bot/crawler. Those log entries are quite common and you shouldn't worry about them.
RE: Something in Apache server access log? by jren207 on 07-30-2004 at 03:33 PM
Cool nothing to worry about then 
(Apache is the best server 
)
Yeh I have been receiving hacking alerts from my firewall lately showing ip addresses nearly the same as mine except for the last 3 or so digits which are a few up or a few down from my ip... o well.