What the heck are all these in my Apache LOG!?

[y00ycdz]

I have been getting this for a few weeks now, maybe a month.

A friend of mine is also getting these in his logs for apache.

Could this be that worm going around thats scanning?

entry's like this are filling up my logs and are very annoying!

1)
XXX.XXX.XXX.XXX - - [05/Aug/2001:02:03:20 -0400] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 324

2)
XXX.XXX.XXX.XXX - - [05/Aug/2001:02:03:42 -0400] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 277


There are 2 different types. Maybe that means 2 different versions of whatever is going on around the web?

I am just guessing it's that worm, maybe a browser error for a new version that recently came out for all the browsers out there....don't really know!

-y00yCdz

 

[Locutus of Board]

Have you heard of the code red worm?

It's causing traffic, but not getting in. Don't worry.

 

[Nevo]

It's code red worm attacks.

 

[BruinEd03]

OMG dude...I checked my apache log and I got the same thing

-Ed

 

[y00ycdz]

Yea i know about the worm and thats what i figured it was. I was just making sure!

Stupid worms....sigh...

Later,
-y00yCDz