[Xitami] New User Question - Server Intrusion

[Patricko]

Code red or a variant of it, from 203.197.248 it is a windows IIS and Xitami is
not effected by it other than it filling up the log files

----- Original Message -----
From: "Roger Brown" <roger2@rogerbrown.no-ip.org>
To: <xitami@lists.xitami.org>
Sent: Wednesday, March 05, 2003 1:00 AM
Subject: [Xitami] New User Question - Server Intrusion


> I am a new user to Xitami and not at all conversant with running a
> server. I'm using Xitami for a self hosted site.
>
> Along with normal traffic I'm getting the odd idiot running intrusion
> type scripts (which I expected). I am concerned though that some
> server responses to the script are other than 404 indicating, I
> assume, that some response was obtained.
>
> For example:
>
>
> 203.197.248.101 - - [05/Mar/2003:17:30:45 +1000] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" ""