[Dshield] server access log question

Doug doug at dwhite.ws
Wed Oct 16 03:03:31 GMT 2002


CodeRed scan

================================
This address is filtered through the open relay database at http://www.ordb.org
and is virus scanned by ANTIVIR
http://www.dwhite.ws
mailto:doug at dwhite.ws
================================
----- Original Message -----
From: "Susan Buczak" <sbuczak2 at comcast.net>
To: <list at dshield.org>
Sent: Tuesday, October 15, 2002 9:58 AM
Subject: [Dshield] server access log question


| Does anyone know what an entry like this in a server access log means:
|
| 65.88.244.4 - - [12/Oct/2002:03:01:16 -0400] "GET
|
/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%uc
bd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
|   HTTP/1.0" 400 252 "-" "-"
|
|
| Thank you,
| Susan
|
| _______________________________________________
| Dshield mailing list
| Dshield at dshield.org
| To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
|




More information about the list mailing list