[thelist] domain under attack??

[Ben Dyer]

On 08:21 AM 12/18/2001, Steve Cook said to me:
>The good news is - it's not hackers (well, most likely not). These log
>entries are signs of one or more of the Code Red worms (someone with more
>expertise on them will probably tell you which one).

Actually, Code Red will produce log entries that look something like this:

/default.ida XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX (...etc...)

--Ben

-----------------------------------------------------------------
Ben Dyer, Senior Internet Developer, Imaginuity Interactive
http://www.imaginuity.com/
-----------------------------------------------------------------
| http://members.evolt.org/OKolzig37/  |  http://www.evolt.org/ |
-----------------------------------------------------------------