Subject: Re: What are these people looking for ?..
From: Christopher Swingley (cswingle@iarc.uaf.edu)
Date: Mon Dec 09 2002 - 14:42:42 AKST
* blair parker <cmjvpp@corecom.net> [2002-Dec-09 14:36 AKST]:
> I have recently started a web server, and I have noticed a LOT of
> folks hitting my server with requests for files that do not exist.
> Following is a little snippet from my 'access_log' file:
>
> h00055d349d35.ne.client2.attbi.com - - [09/Dec/2002:12:48:10 -0900]
> "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 318 "-" "-"
Nimda worm. They've got a hacked Windows computer trying to break
yours, but since you're not using IIS (I'm hoping), it shouldn't have
much effect.
http://www.google.com/search?q=GET%20/scripts/root.exe
Chris
-- Christopher S. Swingley email: cswingle@iarc.uaf.edu IARC -- Frontier Program Please use encryption. GPG key at: University of Alaska Fairbanks www.frontier.iarc.uaf.edu/~cswingle--------- To unsubscribe, send email to <aklug-request@aklug.org> with 'unsubscribe' in the message body.
This archive was generated by hypermail 2a23 : Mon Dec 09 2002 - 14:41:08 AKST