[Xitami] hack attack or just ignorance?

[Greg Sevart]

Welcome to Code Red. Don't worry - Xitami is not vulnerable. It's just some
other infected server running an automated scan/exploit attempt.

Greg

----- Original Message -----
From: "Michael Bronder" <bronder@attbi.com>
To: "Xitami@Lists. Xitami. Org" <xitami@lists.xitami.org>
Sent: Thursday, April 11, 2002 9:11 PM
Subject: [Xitami] hack attack or just ignorance?


> I'm not a hard core user, and I just went to browse through my logs
> directory and found ALOT of lines like the ones below.  Now, the likely
hood
> of anyone accessing my sight (archaetext.com) is very slight as I haven't
> told anyone about it.
>
> These aren't malicious attempts are they?  Perl.exe mysteriously
disappeared
> from my machine recently.
>
> Am I missing a basic security setting or something?
>
> Thanks,
>
> mb
>
> 24.128.19.74 - - [10/Apr/2002:23:54:53 -0500] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
*snip*