November 13th, 2001, 05:10 AM
ok then....nevermind.
just need to put my 2 cents in.
Hope yyou catch that unbathed person who has carnal knowledge of the maternal parent.
November 12th, 2001, 10:49 PM
i read you were using apache and nimda dos't affect apache but it does run the same checks on all servers regardless.
this is what it looks like in windows notepad:
01:30:29 63.236.25.132 GET...
November 12th, 2001, 09:32 PM
If all the ip addresses that sent this all begin with the same group as yours does, your looking at nimda hard at work. i'm using iis here and have miles and miles of logs with all those infected...