Um...no, but its a sploit. Looks like someone's trying to do a
buffer overflow (although that doesn't appear to be listed in the
logs - should be lots of A's or something), and then the next
messages you are receiving are the shellcode...what version of
apache?

Matt

On 20 Jul 2004 at 11:00, Fran wrote:

> Anyone else getting these messages in their apache logs from 222.152.*
> Xtra Jetstream addresses?
>
> eg.
> [Mon Jul 19 16:45:01 2004] [error] [client 222.152.15.74] Invalid
> method in request @a\\xf9\\x1d [Mon Jul 19 17:03:07 2004] [error]
> [client 222.152.86.18] Invalid method in request h\\xd7\\x19\\x14 [Mon
> Jul 19 17:31:29 2004] [error] [client 222.152.2.237] Invalid method in
> request 8\\x1f\\xa0\\x12 [Mon Jul 19 17:37:58 2004] [error] [client
> 222.152.86.18] Invalid method in request \\x98\\x81\\xbb\\x1d [Mon Jul
> 19 17:44:05 2004] [error] [client 222.152.86.18] Invalid method in
> request \\xc8Q\\xc1\\x1d [Mon Jul 19 18:02:31 2004] [error] [client
> 222.152.86.18] Invalid method in request \\xf8{\\xd2\\x1d [Mon Jul 19
> 18:51:29 2004] [error] [client 222.152.67.243] Invalid method in
> request \\b\\xc82 [Mon Jul 19 18:59:02 2004] [error] [client
> 222.152.67.243] Invalid method in request \\x98.\\x05\\x14 [Mon Jul 19
> 19:51:26 2004] [error] [client 222.152.94.83] Invalid method in
> request \\xf8\\xfb\\xb3\\x1d [Mon Jul 19 19:58:02 2004] [error]
> [client 222.152.71.66] Invalid URI in request \xe0\xdf \x14 [Mon Jul
> 19 20:31:37 2004] [error] [client 222.152.7.11] Invalid method in
> request \\b\\\\2 [Mon Jul 19 20:33:01 2004] [error] [client
> 222.152.143.185] Invalid method in request \\x98\\x01+\\x14 [Mon Jul
> 19 20:37:39 2004] [error] [client 222.152.7.11] Invalid method in
> request \\xc0\\x1d1\\x14 [Mon Jul 19 20:39:02 2004] [error] [client
> 222.152.7.11] Invalid method in request \\x90\\x192\\x14 [Mon Jul 19
> 20:45:38 2004] [error] [client 222.152.7.11] Invalid method in request
> H\\xbb7\\x14 [Mon Jul 19 21:15:49 2004] [error] [client
> 222.152.143.185] Invalid method in request \\xf8\\x85'\\x1a [Mon Jul
> 19 22:00:04 2004] [error] [client 222.152.179.89] Invalid method in
> request \\x98\\xa0\\xd8\\x13 [Mon Jul 19 22:29:45 2004] [error]
> [client 222.152.179.89] Invalid method in request \\xd8+k\\x1d [Mon
> Jul 19 22:33:41 2004] [error] [client 222.152.139.111] Invalid method
> in request \\x90\\x8a8\\x14 [Mon Jul 19 22:41:53 2004] [error] [client
> 222.152.139.111] Invalid URI in request \xa0 \xc0\x1d -- This message
> is part of the NZ ADSL mailing list. see http://unixathome.org/adsl/
> for archives, FAQ, and various documents. To unsubscribe: send mail to
> majordomo@lists.unixathome.org with "unsubscribe adsl" in the body of
> the message
>

-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message