Hi! I'm no developer, but I've heard that these are the signs of the "famous" CodeRed worm trying at your site... More info: www.symantec.com/avcenter/venc/data/codered.worm.html By the way, it seems you're using a MS-Mailer... Greetings, Wolfgang Senf > From: "Jamie Rossi" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > X-Priority: 1 (Highest) > X-MSMail-Priority: High > X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 > Importance: High > Subject: [cobalt-developers] Hacking attempts??? > X-BeenThere: [EMAIL PROTECTED] > X-Mailman-Version: 2.0.1 > List-Help: <mailto:[EMAIL PROTECTED]?subject=help> > List-Post: <mailto:[EMAIL PROTECTED]> > List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-developers>, <mailto:[EMAIL PROTECTED]?subject=subscribe> > List-Id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com> > List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-developers>, <mailto:[EMAIL PROTECTED]?subject=unsubscribe> > List-Archive: <http://list.cobalt.com/pipermail/cobalt-developers/> > X-Original-Date: Mon, 13 Aug 2001 22:25:19 +0100 > > Anyone got any idea what this is? > > > 207.108.246.5 - - [13/Aug/2001:00:57:29 +0100] "GET > /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXX > XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXX > XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXX > XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%uc bd3% > u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a > HTTP/1.0" 302 627 "-" "-" > > My logs show this multiple times today > > Regards > Jamie Rossi > > > > _______________________________________________ > cobalt-developers mailing list > [EMAIL PROTECTED] > http://list.cobalt.com/mailman/listinfo/cobalt-developers _______________________________________________ cobalt-developers mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-developers
Re: [cobalt-developers] Hacking attempts???
Wolfgang Senf - Sun Germany - ham02 - Hamburg Fri, 17 Aug 2001 13:03:20 -0700
- [cobalt-developers] Hacking ... Jamie Rossi
- Re: [cobalt-developers]... polecat
- RE: [cobalt-develop... DNSAdmin
- Re: [cobalt-developers]... Wolfgang Senf - Sun Germany - ham02 - Hamburg
- Re: [cobalt-develop... Derek Belrose
