Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

does anyone know what this is?

  • 02-08-2001 1:33pm
    #1
    Draco
    Subscribers Posts: 1,911 ✭✭✭


    That's the Code red worm trying to get in. If you're running IIS, patch your machine and reboot.


Comments

  • #2
    flamegrill
    Registered Users, Registered Users 2 Posts: 1,862 ✭✭✭flamegrill


    if thats all it is, itll be ok. smile.gif

    im running slak8 and apache 1.3.20 so all is well. must keep and eye on the log files, maybe tell the owners of the ips that there are infected.

    63 now, 3 more since my last post, from all over the globe, korea, USA, south america, Europe.

    [This message has been edited by flamegrill (edited 02-08-2001).]


  • #3
    flamegrill
    Registered Users, Registered Users 2 Posts: 1,862 ✭✭✭flamegrill


    203.248.243.145 - - [02/Aug/2001:03:47:06 -0500] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0 078%u0000%u00=a HTTP/1.0" 400 332
    203.197.179.24 - - [02/Aug/2001:04:40:57 -0500] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0 078%u0000%u00=a

    been getting that for the last 2 days in my access_log, does anyone know who/what is doing this and why? iv counted about 60 different ips doin this.

    its making me paronoid, should i be?


    [edit]

    the first one was on the 19th of july and the latest was at 12:52pm today.

    [/edit]



    [This message has been edited by flamegrill (edited 02-08-2001).]


Advertisement