RE: \x HTTP requests

------=_NextPart_000_0000_01C7044A.DA5086F0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Maxime,

What's the state of your Apache SSL configuration ?
Not necessarly a hack activity attempt if you forget to add a <IfDefine =
SSL>
Listen 443</IfDefine> and in vhost part in your apache configuration =
file.

Cheers,

SUPINFO 	=09

SLA - SUPINFO Laboratories=20
Cisco Lab. 	=09
Ecole Sup=E9rieure d'Informatique=20
Paris Academy Of Computer Science=20
23, rue Ch=E2teau Landon=20
F-75010 Paris - France 	Fran=E7ois Ropert=20
Cisco Lab. Coordinator =09
Tel: +33 (0) 1 53359700=20
Fax: +33 (0) 1 53359701 	http://www.supinfo.com=20
http://www.labo-cisco.com
=09
-----Message d'origine-----
De=A0: [email protected] =
[mailto:[email protected]] De
la part de Maxime Ducharme
Envoy=E9=A0: jeudi 9 novembre 2006 16:51
=C0=A0: [email protected]
Objet=A0: \x HTTP requests

=20
Hello list
=20
I see these HTTP request and I'm looking for more information :

...=20
x.x.x.1 - - [06/Nov/2006:17:33:23 -0500] "\x16\x03" 200 8 "-" "-"
x.x.x.2 - - [07/Nov/2006:16:26:21 -0500] "\x80m\x01\x03\x01" 200 8 "-" =
"-"
x.x.x.2 - - [07/Nov/2006:16:26:21 -0500] "\x80m\x01\x03" 200 8 "-" "-"
x.x.x.3 - - [08/Nov/2006:05:06:21 -0500] "\x80|\x01\x03\x01" 200 8 "-" =
"-"
=20
Would it be someone attempting to send https request on my port 80 ?
=20
Any clue would be appreciated
=20
Have a nice day
=20
Maxime Ducharme


-------------------------------------------------------------------------=
---
--
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las
Vegas.=20
World renowned security experts reveal tomorrow's threats today. Free of =

vendor pitches, the Briefings are designed to be pragmatic regardless of
your=20
security environment. Featuring 36 hands-on training courses and 10
conference=20
tracks, networking opportunities with over 2,500 delegates from 40+ =
nations.


http://www.blackhat.com
-------------------------------------------------------------------------=
---
--


---------------------------------

Ce message et toutes les pieces jointes (ci-apres d=E9nomm=E9 le =
"message") sont etablis a l'attention exclusive de ses destinataires et =
sont donc confidentiels. Si toutefois vous recevez ce message par =
erreur, nous vous remercions de bien vouloir le detruire et d'en avertir =
immediatement l'expediteur au sein de l'Ecole Sup=E9rieure =
d'Informatique de Paris (ci-apr=E8s d=E9nomm=E9e "SUPINFO"). Toute =
utilisation de ce message non conforme a sa destination, toute diffusion =
ou toute publication, totale ou partielle, est interdite, sauf =
autorisation expresse. Internet ne permettant pas d'assurer l'integrite =
des messages e-mail en g=E9n=E9ral et donc de ce message en particulier, =
SUPINFO et ses filiales, sites r=E9gionaux, laboratoires ou autres =
entit=E9s attach=E9es, declinent toute responsabilite au titre du =
pr=E9sent message qui ne pourrait engager que son auteur et non SUPINFO =
et seulement dans l'hypothese ou le message n'aurait pas ete modifie par =
quelque moyen que ce soit.

---------------------------------

This message and any attachments (hereinafter referred to as the =
"message") is intended solely for the addressees and is confidential. If =
you receive this message in error, please delete it and immediately =
notify the sender at Paris Academy of Computer Science (hereinafter =
referred to as "SUPINFO"). Any use not in accord with its purpose, any =
dissemination or disclosure, either whole or partial, is prohibited =
except formal approval. Because the internet can not guarantee the =
integrity of this message, SUPINFO and its subsidiaries, laboratories =
and regional branches will not therefore be liable for the message that =
could only engage his author, not SUPINFO, and only if not modified.

---------------------------------


------=_NextPart_000_0000_01C7044A.DA5086F0
Content-Type: application/x-pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="smime.p7s"

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKgTCCBKIw
ggOKoAMCAQICEES+DItQACS0EdM2JSVnyYkwDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNVBAYTAlVT
MQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VS
VFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQD
Ey1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwwHhcNOTkwNzA5
MTcyODUwWhcNMTkwNzA5MTczNjU4WjCBrjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYD
VQQHEw5TYWx0IExha2UgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYD
VQQLExhodHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xNjA0BgNVBAMTLVVUTi1VU0VSRmlyc3QtQ2xp
ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBFbWFpbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALI5haTyfatBO2JGN67NwWB1vDll+UoaR6K5zEjMapjVTTUZuaRC5c5J4oovHnzSMQfHTrSD
ZJ0uKdWiZMSFvYVRNXmkTmiQexx6pJKoF/KYFfKTzMmkMpW7DE8wvZigC4vlbhuiRvp4vKJvq1le
pS/Pytptqi/rrKGzaqq3Lmc1i3nhHmmI4uZGzaCl6r4LznY6eg6b6vzaJ1s9cx8i5khhxkzzabGo
Lhu21DEgLLyCio6kDqXXiUP8FlqvHXHXEVnauocNr/rz4cLwpMVnjNbWVDreCqS6A3ezZcj9HtN0
YqoYymiTHqGFfvVHZcv4TVcodNI0/zC27vZiMBSMLOsCAwEAAaOBuTCBtjALBgNVHQ8EBAMCAcYw
DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUiYJnfcSdJnAAS7RQSHzePa4Ebn0wWAYDVR0fBFEw
TzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3QuY29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0
aGVudGljYXRpb25hbmRFbWFpbC5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMA0G
CSqGSIb3DQEBBQUAA4IBAQCxbWFdphp/fKtK5DD8U28lJMbK7eIxXCsO7u5hVW8EPs853sUbSZTk
6yBMtOaeUC5y2Y31qqOzStpWHGCXgNyCoq1KvYor/wsJtMbXIARF5M2AAbq6K27OqteS/uSv6/Qm
HRYqf2wwlTcvMxKsf93H0RGMUZiy0KOR0K32n56Dkx4dQrhGr2tm8Jt/6uMDAuUCUcGq1TWdckAD
iboxHcUQaFKe36KFxVwIpnjmU0+x6LfTFJ6TpsNk46x+cc28n+kDG8z76awxwa98FXQCmcOyR6bC
MmHXx29IJFEnodWHVfJ7j5g9Fp7udbb40I7y88auKFun8PM2F/zDBdPKA0pUMIIF1zCCBL+gAwIB
AgIRAPRk471/4LfkgPDo2DnSn5swDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNVBAYTAlVTMQswCQYD
VQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1Qg
TmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQDEy1VVE4t
VVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwwHhcNMDYwODEwMDAwMDAw
WhcNMDcwODEwMjM1OTU5WjCB5jE1MDMGA1UECxMsQ29tb2RvIFRydXN0IE5ldHdvcmsgLSBQRVJT
T05BIE5PVCBWQUxJREFURUQxRjBEBgNVBAsTPVRlcm1zIGFuZCBDb25kaXRpb25zIG9mIHVzZTog
aHR0cDovL3d3dy5jb21vZG8ubmV0L3JlcG9zaXRvcnkxHzAdBgNVBAsTFihjKTIwMDMgQ29tb2Rv
IExpbWl0ZWQxGDAWBgNVBAMTD0ZyYW5jb2lzIFJvcGVydDEqMCgGCSqGSIb3DQEJARYbZnJhbmNv
aXMucm9wZXJ0QHN1cGluZm8uY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCq4lo21AbO
Ch9+kf5tEC5pthVrPefkfajqpizjCOQF/+ii7abo276M7SC0MlZh6IFSnhIs5U9Pl5ArlZs1fXci
GjijIDBSYe8goqyxK4QjP1m31OT4fhFFnk3a3wi6gRVmdThhn6JNm33uzn0sW/nya6CrfMDzmHLm
nNFKvk5FfwIDAQABo4ICODCCAjQwHwYDVR0jBBgwFoAUiYJnfcSdJnAAS7RQSHzePa4Ebn0wHQYD
VR0OBBYEFJTKS3xpvUIG9F6JLe/Lp0uWmhC6MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA
MCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwRgYD
VR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29t
b2RvLm5ldC9DUFMwgaUGA1UdHwSBnTCBmjBMoEqgSIZGaHR0cDovL2NybC5jb21vZG9jYS5jb20v
VVROLVVTRVJGaXJzdC1DbGllbnRBdXRoZW50aWNhdGlvbmFuZEVtYWlsLmNybDBKoEigRoZEaHR0
cDovL2NybC5jb21vZG8ubmV0L1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRF
bWFpbC5jcmwwgYYGCCsGAQUFBwEBBHoweDA7BggrBgEFBQcwAoYvaHR0cDovL2NydC5jb21vZG9j
YS5jb20vVVROQWRkVHJ1c3RDbGllbnRDQS5jcnQwOQYIKwYBBQUHMAKGLWh0dHA6Ly9jcnQuY29t
b2RvLm5ldC9VVE5BZGRUcnVzdENsaWVudENBLmNydDAmBgNVHREEHzAdgRtmcmFuY29pcy5yb3Bl
cnRAc3VwaW5mby5jb20wDQYJKoZIhvcNAQEFBQADggEBAF0XlKh/PzJ/egHOdSOiJyGf7cEH4kxm
exF2CHWMxMNBNgDPpCLnqbzJcjtJQ0omz0EuF7SLQ56M0IWXdBDNBpIRbyfjPolx272Se8W19Z0h
darJfigJaHlLbGOvTbsBNVLpUCShdq698TMdJsffrctXH3qw/ryVwj+bPDNWMVoE/QIEmyobv9li
hG5l92gNf3fpzSFM7LKIwKu5UPLRXOWWFyrGr8v82u7Wn5ZCjj7l119QRwoBnEVtCTGqVeipvtt7
Zb2FzyETC07JCY1bYGo/cxsGZJUKi5C7yvv2TXgp7teI6dS1wOlAOfTJ+NeN6zoFN+lR/vkbZo9/
t6ngwfkxggPnMIID4wIBATCBxDCBrjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQH
Ew5TYWx0IExha2UgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQL
ExhodHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xNjA0BgNVBAMTLVVUTi1VU0VSRmlyc3QtQ2xpZW50
IEF1dGhlbnRpY2F0aW9uIGFuZCBFbWFpbAIRAPRk471/4LfkgPDo2DnSn5swCQYFKw4DAhoFAKCC
AngwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDYxMTA5MjEwMzEz
WjAjBgkqhkiG9w0BCQQxFgQUPkhXk8N5ni3Cni+gN2lDRb3jEAwwZwYJKoZIhvcNAQkPMVowWDAK
BggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZI
hvcNAwICASgwBwYFKw4DAhowCgYIKoZIhvcNAgUwgdUGCSsGAQQBgjcQBDGBxzCBxDCBrjELMAkG
A1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2UgQ2l0eTEeMBwGA1UEChMV
VGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExhodHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20x
NjA0BgNVBAMTLVVUTi1VU0VSRmlyc3QtQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBFbWFpbAIR
APRk471/4LfkgPDo2DnSn5swgdcGCyqGSIb3DQEJEAILMYHHoIHEMIGuMQswCQYDVQQGEwJVUzEL
MAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRS
VVNUIE5ldHdvcmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRydXN0LmNvbTE2MDQGA1UEAxMt
VVROLVVTRVJGaXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5kIEVtYWlsAhEA9GTjvX/gt+SA
8OjYOdKfmzANBgkqhkiG9w0BAQEFAASBgA6+DSi/1+MtuEfIQeDYZ8rHCQ77VFHzSHeR+HEmURuV
qUoZckNXZ7dE22zI0dUD0xo8dNTrALw5YBHv4LMeJGV8PDQenp9cKF4w9zpUoo5PbtpK+bLCs0ZM
6cqvdLzPjAWxskO5B4UFkZ5IAnjLF57nmoj7SQjd5PnIPRYmZfxGAAAAAAAA

------=_NextPart_000_0000_01C7044A.DA5086F0--