Shoutbox

When I look through my access log for Apache, i notice this in it:

217.135.208.163 - - [27/Jul/2004:21:52:01 +0100] "SEARCH /\x90\xc9
\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\
.....
\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\xc9\x90\x90\x90
\x90\x90\x90\x90\x90\x90\x90\x90HTTP/1.0" 414 404

(I have cut out some of it where the ... are because it would look unsightly in this thread.)

Sometimes the robots.txt file is requested but not always.

Is it a search engine searching my site or something else ???

Would you mind putting less of the "\xc9" and just put a "..." because it's stretching this thread WAAY out...

The big dodgy SEARCH line looks like a hacking attempt... check this out: http://www.webservertalk.com/message295069.html

It's meant for IIS, so you should be safe with Apache.

The attacker's IP is from the same ISP as you, dialup.pol.co.uk.

As for the robots.txt requests, yeah, that's probably a search engine or some other bot/crawler. Those log entries are quite common and you shouldn't worry about them.

Cool nothing to worry about then (Apache is the best server )

Yeh I have been receiving hacking alerts from my firewall lately showing ip addresses nearly the same as mine except for the last 3 or so digits which are a few up or a few down from my ip... o well.