[Xitami] Access Log

Hans Stuck xitami@lists.xitami.org
Mon, 11 Jun 2001 19:40:42 -0000


I have noticed anonymous attempts to FTP my server, which I think is strange 
since I haven't informed anyone of my webserver... so I think they may be 
using a scanner.

Here are a few exerpts that interest me:

209.250.128.133 - - [08/Jun/2001:10:14:18 -0500] "GET 
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c: HTTP/1.0" 404 0

209.250.128.133 - - [08/Jun/2001:10:14:19 -0500] "GET 
/msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c: 
HTTP/1.0" 404 0

61.139.59.73 - - [08/Jun/2001:16:38:03 -0500] "GET http://www.yahoo.com/ 
HTTP/1.1" 404 0

62.42.174.237 - anonymous [08/Jun/2001:17:12:27 -0500] 
"ftp://62.42.174.237/C:\WINDOWS\TEMP\./ls000001.ftp" 226 -1

Can anyone explain the significance of these?

Thanks
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com