BINGO... welcome to Code Red land... Just sit back and think of all the dumb IIS admins that didn't patch their machines and laugh cause you were smart and ran Apache on Linux :)
Jeremy
Wouter van Gils was said to been seen saying:
> Hi, today I came say a lot of these:
>
> tnt-7-28.easynet.co.uk - - [01/Aug/2001:21:59:02 +0200] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u780
> 1%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u00
> 00%u00=a HTTP/1.0" 404 205
>
>
> is my apache logs from several ip's. Anyone have an idea of what they are.
> I've got about
> 20 of them. Is this 'Code Red' stuff ?
>
>
>
> grt Wouter
>
>
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Wouter van Gils -=- [EMAIL PROTECTED]
> http://the-construct.cx/
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
--
,-----------------------------------------------------------------------------,
|Jeremy T. Bouse, CCNA - UnderGrid Network Services, LLC - www.UnderGrid.net |
| Public PGP/GPG key available through http://wwwkeys.us.pgp.net |
| If received unsigned (without requesting as such) DO NOT trust it! |
| [EMAIL PROTECTED] - NIC Whois: JB5713 - [EMAIL PROTECTED] |
`-----------------------------------------------------------------------------'
pgplBuKaSs8lk.pgp
Description: PGP signature
