Bugtraq mailing list archives
Re: Router Worm?
From: Fred Laxton <securitynotice () laxton net>
Date: Wed, 19 Nov 2003 17:08:43 -0500
I just saw the same thing on my web server log from last night. It did no damage, but I blocked the offending IP anyway, it can't be anything good ;-) I also reported it to the network's abuse address.
Fred Chris Strom wrote:
I've received a strange HTTP request on my web site from two different sources. The request is logged as: SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 \xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
-- -- Fred Laxton InfoTechDesign.net - Classic Web Design & Hosting http://infotechdesign.net Powered by Mac OS X, Red Hat Linux, Yellow Dog Linux and Mandrake Linux Registered Linux user #246414
Current thread:
- Router Worm? Chris Strom (Nov 19)
- Re: Router Worm? Fred Laxton (Nov 19)
- Re: Router Worm? Niels Bakker (Nov 19)
- Re: Router Worm? Jay Jacobson (Nov 19)
- <Possible follow-ups>
- RE: Router Worm? BugTrap (Nov 20)