httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marten Lehmann <>
Subject [users@httpd] Strange logfile entries: 8\r\xff
Date Mon, 15 Mar 2010 13:25:59 GMT

some of our users noticed, that lines like this appear in their logfiles: - - [14/Mar/2010:04:38:53 +0100] "8\r\xff" 400 226 "-" "-"

This has been noticed be different customers on different servers. I 
know that the Referer and Useragent may be empty (shown by the dash), 
but URI part should at least start with GET or POST.

I found nothing with Google on "8\r\xff" but it seems that something is 
talking to our servers with invalid HTTP. Is "8\r\xff" used to exploit a 
webserver, but it simply didn't work out on our servers? Has anyone else 
noticed such entries in the logfiles?

Kind regards

The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message