Security Basics mailing list archives

"GET /.hash=" in HTTPd logs?

From: "SFDC Admin" <postmaster () security-forums com>
Date: Wed, 27 Nov 2002 23:34:15 -0000

I've noticed recently on a few different machines entries like this:

GET /.hash=8148dd8cd5c884d62cab26ccfa1aeaa045eab116 

GET /.hash=6baa50082310ba631358f57c8fb7eaadf752e055

Any idea what is going on here?

Is this some 0day exploit? Something old that is going round again?

Certainly nothing I have experienced before.

Thanks

Shaolin


.: http://www.security-forums.com :.

         Share your knowledge
          It's a way to achieve
                Immortality.

Current thread:

RE: Locking Cisco Router, (continued)
- RE: Locking Cisco Router Christian Freas (Nov 25)
  - RE: Locking Cisco Router puyeng abis (Nov 26)
- RE: Locking Cisco Router Vachon, Scott (Nov 25)
  - RE: Locking Cisco Router puyeng abis (Nov 26)
- RE: Locking Cisco Router Kevin Jones (Nov 25)
  - RE: Locking Cisco Router David Lubowa (Nov 28)
- Locking Cisco Router Vachon, Scott (Nov 26)
  - Blocking personal email Tim V - DZ (Nov 28)
- RE: Locking Cisco Router d'Ambly, Jeff (Nov 27)
- RE: Locking Cisco Router Dozal, Tim (Nov 27)
  - "GET /.hash=" in HTTPd logs? SFDC Admin (Nov 29)
    - Re: "GET /.hash=" in HTTPd logs? Joris De Donder (Nov 29)
    - RE: "GET /.hash=" in HTTPd logs? Matias (Nov 29)
- RE: Locking Cisco Router Dozal, Tim (Nov 27)
- RE: Locking Cisco Router David Alejandro Hernandez Alonso (Nov 28)