[Zope] Bad request

Dennis Allison allison@sumeru.stanford.EDU
Tue, 27 May 2003 09:56:26 -0700 (PDT)


That's the signature of one or another of the virus programs that 
propogate on the web.  I think it's code red.  google the GET to 
find the source.

On Tue, 27 May 2003 ratem@censanet.com.br wrote:

> Hi,
> 
> we had a crash few days ago after an abnormal Linux reboot. I had to recover the
> Zope 2.3.3 Data.fs using tranalyzer and cut the last transactions from Data.fs
> using Python until it works. Everything now work fine, except from the strange
> messages Zope have been logging since then:
> 
> 200.178.188.7 - - [27/May/2003:13:03:41 -0200] "GET
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a 
> HTTP/1.0" 400 274 "" ""
> 
> I know HTTP 400 errors are caused by client bad requests, but this never
> happened before, and there are many source IPs. I checked them and they are from
> different hosts, many of them well known.
> 
> Any idea?
> 
> Thanks in advance,
> 
> Rogerio
> 
> -------------------------------------------------
> E-mail enviado pelo Webmail CensaNET
> http://www.censanet.com.br/webmail
> 
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope-dev )
>