Found this in my raw logs - wtf is it?
 

Anyone know? Some overflow shit? :helpme

193.X.X.X - - [25/Apr/2006:05:45:07 -0400] "SEARCH /\x90\x04H\x04H\x04H\x04H\x04Hx04H\x04H\x04H\x04H\x 04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x 04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x 04H\x04H\x04Hx04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x0 4Hx90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\ x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x9 0\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\ x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x9 0\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\ x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x9 0\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90x90\x 90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90 \x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x 90\x90\x90\x90\x90\x90\x90" 414 333 "-" "-"

Mark of the beast. Turn it upside down and you'll see all the 6's.

So Eddie has been visiting me? :helpme

http://www.indybay.org/uploads/iron-...east_front.jpg

Obviously a H4x0r :glugglug

RS_IIS.C exploit

that is some freaky shit

the code is just encoded to hex

you've been hacked by Alkeida

I just Googled that and a posting gave a similar log entry and some information about the exploit. Definitely something you want to get patched, chupachups:warning

Thx guys - checking in now

:1orglaugh nah - they are too busy trying to destroy the world...do they have internet?

I suspect you are a racialist!!!

http://www.officeroutlook.com/news/I...re/410.ht8.jpg

:upsidedow

I want one of those wind-up laptops for my hurricane supply kit:thumbsup

shut it down, they found you.

Its a windows specific exploit, most likely of the buffer/stack/heap overflow variety. As long as you're not running a windows server you have nothing to worry about.