Click to See Complete Forum and Search --> : Crazy apache log file lines


HarryGoiter
08-09-2001, 04:42 PM
In my log file for apache, I have a ton of lines all over the place that look like this: 63.78.189.20 - - [09/Aug/2001:13:13:48 -0700] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3% u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u0 0c3%u0003%u8b00%u531b%u53ff%u0 078%u0000%u00=a HTTP/1.0" 404 277

Any idea what that is? The lines make up about 1/3 of the log file. Thanks.

goozey
08-09-2001, 05:44 PM
Code Red attacks...

HarryGoiter
08-09-2001, 05:50 PM
Hmmm, sounds like fun. But I'm pretty new to all this...what exactly is a code red attack?

saulecker
08-09-2001, 05:59 PM
don't mean to be short, but do you live in a box? The code red virus, silly. it is looking for IIS servers to attack. you are in no danger if you are running apache.

:D

goozey
08-09-2001, 06:11 PM
uh yeah... you honestly have not heard of this?? (It's a worm, not a virus btw)
http://news.cnet.com/news/topic/0-1400-249-1.html?tag=code_red

jg

saulecker
08-09-2001, 06:14 PM
virus...worm.... i know, I just am in the habit of listining to users, I guess at the end of the day it kinda rubbed off.

:D