http://www.apacheweek.com/features/codered
Some stupid worm. Nothing to be concerned about, if you're running apache. At least if you don't need to administer the stations where the requests come from :-) Steven On Sun, 2003-06-08 at 17:45, JoeHill wrote: > On 08 Jun 2003 00:13:48 +0200 > Steven Broos <[EMAIL PROTECTED]> uttered: > > > > > Then you can disable PHP easily if you really want to, and let a > > script create a HTML-file which contains the uptime. > > ah, I'm not that concerned. it's just: > > <?php include "uptime.txt"; ?> > > I see the usual attempts at running windows scripts, but one thing > stumps me. I see this occasionally as well, from different addresses > on the same subnet as me (64.x.x.x): > > 64.229.89.4 - - [07/Jun/2003:23:59:37 -0400] "GET > /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX > XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX > XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX > XXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u780 > 1%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53 > ff%u0078%u0000%u00=a HTTP/1.0" 404 393 "-" "-" > > it doesn't correspond with any "visitors" to the server. > > I'm Googling now, but anyone know what this is? > > -- > Joehill > Registered Linux user #282046 > Homepage: http://nodex.sytes.net > 11:40:05 up 5 days, 9:43, 4 users, load average: 0.00, 0.00, 0.00 > > > ______________________________________________________________________ > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
