Haven't seend this Code Red entry in logs before
- From: "Michael Jankowski" <skyjumpr@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 11 Aug 2001 12:02:17 -0500
I just started getting some different entries in my Web logs from a
server that's been infected by Code Red (their default web page was
changed to the www.worm.com page). This is the first I've seen like
this:
207.136.67.34, anonymous, -, N, 8/11/2001, 11:09:20, w3proxy, PALIN, -,
-, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, -
Don't know if anyone else has seen this before or not.
Michael
Other related posts:
- » Haven't seend this Code Red entry in logs before
