Defensive Depth Consulting

TweetSo today I got an interesting alert from OSSEC (a Host-Based IDS) on my web-hosting server: —————————————- Rule: 31115 fired (level 13) -> “URL too long. Higher than allowed on most browsers. Possible attack.” Portion of the log(s): 81.197.69.xxx – -16/Dec/2008:16:14:20 -0600] “SEARCH /\x90\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\ ——————————– As we can see, host 81.197.69.xxx tried to connect to [...]