[Xitami] Logfile question

[Ewen McNeill]

In message <NFBBLAFKPCJBBOJPIMLBKEAGDJAA.hieronymus_schweiz@yahoo.de>, "Hieronym
us" writes:
>217.162.161.21 - - [19/Jan/2002:16:28:44 +0100] "GET
>/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
>
>I have a bunch of error messages in my logfile. What do they mean?

Someone is attempting to make use of an IIS exploit (or CodeRed/Nimda/etc 
infection; I forget which that exact one is).  Xitami isn't vulnerable
to these, and is saying "not here" in reply to them.  But generally all
the programs trying these automatically don't check for IIS, etc, they
just try the exploit out anyway.

Ewen

-- 
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com