On Thu, Apr 18, 2002 at 10:02:39AM -0500 or thereabouts, Ed Wilts wrote: > I would not be surprised if you're getting hammered by port 80 traffic. Code > Red and its ugly friends are still out there, merrilly trying to infect > every server they can find.
I can definitely attest to that. Had Code Red trying to get in a few days ago on my port 80 ... still looking for M$.... [Thu Apr 11 11:01:34 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/root.exe [Thu Apr 11 11:01:35 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/MSADC/root.exe [Thu Apr 11 11:01:35 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/c/winnt/system32/cmd.exe [Thu Apr 11 11:01:36 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/d/winnt/system32/cmd.exe [Thu Apr 11 11:01:39 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/..%5c../winnt/system32/cmd.exe [Thu Apr 11 11:01:40 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe [Thu Apr 11 11:01:40 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe [Thu Apr 11 11:01:41 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe [Thu Apr 11 11:01:41 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/..Á ../winnt/system32/cmd.exe [Thu Apr 11 11:01:42 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/..À¯../winnt/system32/cmd.exe [Thu Apr 11 11:01:43 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/..Áœ../winnt/system32/cmd.exe [Thu Apr 11 11:01:51 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/..%5c../winnt/system32/cmd.exe [Thu Apr 11 11:01:51 2002] [error] [client 64.163.212.171] File does not exist: /var/www/html/scripts/..%2f../winnt/system32/cmd.exe -- Best regards, Gary Today's thought: Try to relax and enjoy the crisis. _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
