BugTraq
Router Worm? Nov 19 2003 02:54PM
Chris Strom (cstrom cos com) (4 replies)
Re: Router Worm? Nov 19 2003 10:49PM
Jay Jacobson (jay edgeos com)
Re: Router Worm? Nov 19 2003 10:38PM
Jay D. Dyson (jdyson treachery net) (1 replies)
Re: Router Worm? Nov 20 2003 01:05AM
Jose Nazario (jose monkey org) (1 replies)
RE: Router Worm? Nov 20 2003 05:14PM
David Gillett (gillettdavid fhda edu)
Re: Router Worm? Nov 19 2003 10:08PM
Fred Laxton (securitynotice laxton net)
I just saw the same thing on my web server log from last night. It did
no damage, but I blocked the offending IP anyway, it can't be anything
good ;-) I also reported it to the network's abuse address.

Fred

Chris Strom wrote:

>
> I've received a strange HTTP request on my web site from two different sources. The request is logged as:
>
> SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x0
2
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
> \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02
>

--

--
Fred Laxton

InfoTechDesign.net - Classic Web Design & Hosting
http://infotechdesign.net

Powered by Mac OS X, Red Hat Linux, Yellow Dog Linux and Mandrake Linux
Registered Linux user #246414

[ reply ]
Re: Router Worm? Nov 19 2003 10:02PM
Niels Bakker (niels=bugtraq bakker net)


 

Privacy Statement
Copyright 2010, SecurityFocus