Code Red Worm anybody? This

Code Red Worm anybody?
This is a leeetle portion of my HTTP log:
203.45.14.142 - - [05/Aug/2001:19:18:02 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.63.183 - - [05/Aug/2001:19:20:47 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.18.77 - - [05/Aug/2001:19:22:01 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.224.36.37 - - [05/Aug/2001:19:24:46 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.163.159.23 - - [05/Aug/2001:19:25:51 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.74.234.253 - - [05/Aug/2001:19:30:48 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.237.78.101 - - [05/Aug/2001:19:32:19 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.209.183 - - [05/Aug/2001:19:34:01 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.198.63 - - [05/Aug/2001:19:34:28 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.14.142 - - [05/Aug/2001:19:38:07 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.74.137.8 - - [05/Aug/2001:19:39:44 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.231.2.166 - - [05/Aug/2001:19:40:45 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.193.226 - - [05/Aug/2001:19:42:06 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.208.56 - - [05/Aug/2001:19:42:50 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.145.131.103 - - [05/Aug/2001:19:46:16 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.18.77 - - [05/Aug/2001:19:46:55 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.159.119 - - [05/Aug/2001:19:46:58 +1000] "GET /default.ida?XXXXXXXXXXXX$
61.9.192.141 - - [05/Aug/2001:19:47:43 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.133.45 - - [05/Aug/2001:19:49:44 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.167.218 - - [05/Aug/2001:20:00:44 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.194.75 - - [05/Aug/2001:20:01:12 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.204.75.25 - - [05/Aug/2001:20:02:46 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.210.48 - - [05/Aug/2001:20:11:31 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.107.246.152 - - [05/Aug/2001:20:12:08 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.13.26 - - [05/Aug/2001:20:16:39 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.133.246 - - [05/Aug/2001:20:17:09 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.208.56 - - [05/Aug/2001:20:17:25 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.155.197.49 - - [05/Aug/2001:20:24:44 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.45.137.201 - - [05/Aug/2001:20:25:20 +1000] "GET /default.ida?XXXXXXXXXXXX$
203.246.87.20 - - [05/Aug/2001:20:25:40 +1000] "GET /default.ida?XXXXXXXXXXXX$
Retarded James was looking at this going "Hmmm, what the hell is /default.ida? I'm sure I don't have anything called that on my system. Let me search for it on Google

So it seems that there are many computers all over the world trying to get mine to collaborate on their attacks on www.whitehouse.gov.

Fortunately my server seems to run Linux, so no naughty denial of service coming from this little piggy. Hardy hardy har to you Mr Code Red.

Jaymis on 2001-08-09 @ 01:51 [TrackBack]
comment

Comcast Cable Internet's network is a vast cess pool of virus attacks. When they were ATT Broadband Internet, it was the same. Comcast has inherited the mess, and also ATT's unwillingness to do anything about it, although it is a trivial matter to find out who is infected. All they have to do is see which cable modem has which address. What, a half-hour of work? They must be too busy throttling bandwidth and coming up with crummy cable channel offerings.

Larry Sabine on 2004-01-30 @ 07:06
comment

I agree Comcast is negligent in fixing problems for customers. I pay 50$ a month and sometimes the connection just drops for hours and then comes back up. My webserver does not like this. P.S I am a war chanting Christian please do not vote for me in 04

Antimatter on 2004-06-23 @ 16:46
post comment
Post a comment









Remember personal info?




move
« Penny Arcade - Wow! Tycho's | home | You just gotta click you »