Hi I noticed some (40 until now) strange entries in my Apache access.log. They started today at 2:43 GMT and all look like this: <IP> - - [16/Oct/2002:07:42:56 +0200] "\xe3@" 501 - "-" "-" Only the request string changes, there are: "\xe3@" 25 of this "\xe3=" 9 of this "\xe3G" 4 of this "\xe3Y" 2 of this They come from 9 IPs, where the last character always was the same from each IP. Is that a new worm, or an old one I missed? Simon Langhof