l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
August 5: Social gathering
Next Installfest:
TBD
Latest News:
Jul. 4: July, August and September: Security, Photography and Programming for Kids
Page last updated:
2001 Dec 30 16:45

The following is an archive of a post made to our 'vox mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox] Weird httpd access log entries
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox] Weird httpd access log entries



Man, that's scary. I too have seen those strange looking /var/log/messages
entries on my server (with the same date stamp 19/Jul/01). Thanks for
pointing that out!

I didn't realize that the attack was launched on the entire Internet!

On Sat, 21 Jul 2001, Nicole Carlson wrote:

> On 21 Jul 2001 ekengelhard@sagresdiscovery.com wrote:
> > 194.134.198.173 - - [19/Jul/2001:09:41:04 -0700] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252 "-" "-"
>
> <snip!>
>
> Eric, I'm shocked.  You've lasted two days without having heard of the
> Code Red worm?  :)  You know--the one poised to attack the White House?
> That's what you're seeing--Code Red probes.  Had you been running
> IIS, you'd have cause for concern.  As it is, go get yourself a beer and
> reflect on what a good thing it is you're running a Linux-based web
> server.
>
> --nicole twn
>
> ***
> "I hope I never end up in one of your quotes."--name withheld out of mercy
> Visit Nicolopolis! http://wwwcsif.cs.ucdavis.edu/~carlsonn
> nmcarlson@ucdavis.edu ana.ng@tmbg.org carlsonn@seclab.cs.ucdavis.edu
>

-- 
R. Douglas Barbieri
doug@dooglio.net
http://www.dooglio.net

"There is no case...there never was! It's all just a joke, a big joke!"
--Former Inspector Wollenski



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
O'Reilly and Associates
For numerous book donations.