I don't know if it's the catch on your problem, but it'll be interesting reading noless;
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0037.html On Wed, 2002-10-16 at 12:19, Simon Langhof wrote: > Hi > I noticed some (40 until now) strange entries in my Apache access.log. They started >today at 2:43 GMT and all look like this: > <IP> - - [16/Oct/2002:07:42:56 +0200] "\xe3@" 501 - "-" "-" > > Only the request string changes, there are: > "\xe3@" 25 of this > "\xe3=" 9 of this > "\xe3G" 4 of this > "\xe3Y" 2 of this > > They come from 9 IPs, where the last character always was the same from each IP. > > Is that a new worm, or an old one I missed? > > Simon Langhof > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >
signature.asc
Description: This is a digitally signed message part
