apache access question

[Net Llama!]

On 07/26/03 07:58, Ken Moffat wrote:

> Anyone know the meaning of this junk in my access.log?
> 
> 216.252.226.94 - - [26/Jul/2003:07:34:28 -0700] "GET 
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 
> 
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 
> 
> XX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00 
> 
> c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 404 286
> 
> 
> $ whois 216.252.226.94
> InterPacket Group Inc INTERPACKET3 (NET-216-252-128-0-1)
>                                 216.252.128.0 - 216.252.255.255
> ICCnet IPG3-226-0-20000608 (NET-216-252-226-0-1)
>                                 216.252.226.0 - 216.252.226.255

Code Red?
http://www.thesitewizard.com/news/coderediiworm.shtml



-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
L. Friedman                       	       netllama at linux-sxs.org
Linux Step-by-step & TyGeMo: 		    http://netllama.ipfox.com

   8:00am  up 11 days, 10:43,  2 users,  load average: 0.10, 0.12, 0.09