Security Basics mailing list archives

Re: "GET /.hash=" in HTTPd logs?

From: Joris De Donder <joris () digitaldefense be>
Date: Fri, 29 Nov 2002 14:57:52 +0100

I've noticed recently on a few different machines entries like this:
GET /.hash=8148dd8cd5c884d62cab26ccfa1aeaa045eab116
GET /.hash=6baa50082310ba631358f57c8fb7eaadf752e055
Any idea what is going on here?
Is this some 0day exploit? Something old that is going round again?


Looks like Kazaa traffic.



Joris

Current thread:

RE: Locking Cisco Router, (continued)
- - RE: Locking Cisco Router puyeng abis (Nov 26)
- RE: Locking Cisco Router Vachon, Scott (Nov 25)
  - RE: Locking Cisco Router puyeng abis (Nov 26)
- RE: Locking Cisco Router Kevin Jones (Nov 25)
  - RE: Locking Cisco Router David Lubowa (Nov 28)
- Locking Cisco Router Vachon, Scott (Nov 26)
  - Blocking personal email Tim V - DZ (Nov 28)
- RE: Locking Cisco Router d'Ambly, Jeff (Nov 27)
- RE: Locking Cisco Router Dozal, Tim (Nov 27)
  - "GET /.hash=" in HTTPd logs? SFDC Admin (Nov 29)
    - Re: "GET /.hash=" in HTTPd logs? Joris De Donder (Nov 29)
    - RE: "GET /.hash=" in HTTPd logs? Matias (Nov 29)
- RE: Locking Cisco Router Dozal, Tim (Nov 27)
- RE: Locking Cisco Router David Alejandro Hernandez Alonso (Nov 28)