[Dshield] server access log question
crunch at shopip.com
Wed Oct 16 04:34:58 GMT 2002
>Does anyone know what an entry like this in a server access log means:
>18.104.22.168 - - [12/Oct/2002:03:01:16 -0400] "GET
> HTTP/1.0" 400 252 "-" "-"
Looks like someone is hitting your server with a buffer overflow.... Aren't the "N" a NOP instruction?
More information about the list