* [mdk-re] default.ida
@ 2001-08-16 1:02 Vladimir N. Trofimov
2001-08-16 1:30 ` Alexander Bokovoy
2001-08-16 8:17 ` Russu V.F.
0 siblings, 2 replies; 3+ messages in thread
From: Vladimir N. Trofimov @ 2001-08-16 1:02 UTC (permalink / raw)
To: mandrake-russian
Здравствуйте!
===access_log===
64.35.160.92 - - [15/Aug/2001:04:56:03 +0400] "GET /default.ida?NNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u
6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u53
1b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 322
===access_log===
===error_log===
[Wed Aug 15 04:56:03 2001] [error] [client 64.35.160.92] Client sent malformed H
ost header
===error_log===
Обнаружил это утром в логах апача. Что такое default.ida ?
--
Best regards,
Vladimir mailto:subway@mailru.com
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [mdk-re] default.ida
2001-08-16 1:02 [mdk-re] default.ida Vladimir N. Trofimov
@ 2001-08-16 1:30 ` Alexander Bokovoy
2001-08-16 8:17 ` Russu V.F.
1 sibling, 0 replies; 3+ messages in thread
From: Alexander Bokovoy @ 2001-08-16 1:30 UTC (permalink / raw)
To: mandrake-russian
On Thu, Aug 16, 2001 at 01:01:58AM +0400, Vladimir N. Trofimov wrote:
> Здравствуйте!
>
> ===access_log===
> 64.35.160.92 - - [15/Aug/2001:04:56:03 +0400] "GET /default.ida?NNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u
> 6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u53
> 1b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 322
> ===access_log===
>
> ===error_log===
> [Wed Aug 15 04:56:03 2001] [error] [client 64.35.160.92] Client sent malformed H
> ost header
> ===error_log===
>
> Обнаружил это утром в логах апача. Что такое default.ida ?
Поздравляю -- это к Вам CodeRed ломился, но гордым Апачам он не страшен.
--
/ Alexander Bokovoy
$ cat /proc/identity >~/.signature
`Senior software developer and analyst for SaM-Solutions Ltd.`
---
You are fairminded, just and loving.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [mdk-re] default.ida
2001-08-16 1:02 [mdk-re] default.ida Vladimir N. Trofimov
2001-08-16 1:30 ` Alexander Bokovoy
@ 2001-08-16 8:17 ` Russu V.F.
1 sibling, 0 replies; 3+ messages in thread
From: Russu V.F. @ 2001-08-16 8:17 UTC (permalink / raw)
To: mandrake-russian-admin@altlinux.ru
Hello mandrake-russian-admin,
Thursday, August 16, 2001, 3:01:58 AM, you wrote:
> Здравствуйте!
> ===access_log===
> 64.35.160.92 - - [15/Aug/2001:04:56:03 +0400] "GET /default.ida?NNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u
> 6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u53
> 1b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 322
> ===access_log===
> ===error_log===
> [Wed Aug 15 04:56:03 2001] [error] [client 64.35.160.92] Client sent malformed H
> ost header
> ===error_log===
> Обнаружил это утром в логах апача. Что такое default.ida ?
это тебя RedCore троян виндовый долбит....
Он поражает IIS так что для Апача это неопасно, за исключением
увеличения логов...
http://24.17.180.183/anticodered.txt вот можеш почитать
"рекомендации"
--
ОП ТюменьЭнергоСпецРемонт
Системный администратор
Руссу В.Ф. e-mail: ruwa@psrp.te.ru
phone: (3462)76-40-56
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2001-08-16 8:17 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2001-08-16 1:02 [mdk-re] default.ida Vladimir N. Trofimov
2001-08-16 1:30 ` Alexander Bokovoy
2001-08-16 8:17 ` Russu V.F.
ALT Linux Community general discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
public-inbox-index community
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.community
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git