BINGO... welcome to Code Red land... Just sit back and think of all
the dumb IIS admins that didn't patch their machines and laugh cause you were
smart and ran Apache on Linux :)
Jeremy
Wouter van Gils was said to been seen saying:
> Hi, today I came say a lot of these:
>
> tnt-7-28.easynet.co.uk - - [01/Aug/2001:21:59:02 +0200] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>
>NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>
>NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u780
>
>1%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u00
> 00%u00=a HTTP/1.0" 404 205
>
>
> is my apache logs from several ip's. Anyone have an idea of what they are. I've got
>about
> 20 of them. Is this 'Code Red' stuff ?
>
>
>
> grt Wouter
>
>
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Wouter van Gils -=- [EMAIL PROTECTED]
> http://the-construct.cx/
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
--
,-----------------------------------------------------------------------------,
|Jeremy T. Bouse, CCNA - UnderGrid Network Services, LLC - www.UnderGrid.net |
| Public PGP/GPG key available through http://wwwkeys.us.pgp.net |
| If received unsigned (without requesting as such) DO NOT trust it! |
| [EMAIL PROTECTED] - NIC Whois: JB5713 - [EMAIL PROTECTED] |
`-----------------------------------------------------------------------------'
PGP signature
