Re: What are these people looking for ?..


Subject: Re: What are these people looking for ?..
From: blair parker (cmjvpp@corecom.net)
Date: Mon Dec 09 2002 - 14:45:03 AKST


Man... There sure are a lot of NIMDA worms out there...

Thanks.

BLAIR

On Mon, 9 Dec 2002 14:42:42 -0900
Christopher Swingley <cswingle@iarc.uaf.edu> wrote:

>
> * blair parker <cmjvpp@corecom.net> [2002-Dec-09 14:36 AKST]:
> > I have recently started a web server, and I have noticed a LOT of
> > folks hitting my server with requests for files that do not exist.
> > Following is a little snippet from my 'access_log' file:
> >
> > h00055d349d35.ne.client2.attbi.com - - [09/Dec/2002:12:48:10 -0900]
> > "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 318 "-" "-"
>
> Nimda worm. They've got a hacked Windows computer trying to break
> yours, but since you're not using IIS (I'm hoping), it shouldn't have
> much effect.
>
> http://www.google.com/search?q=GET%20/scripts/root.exe
>
> Chris
> --
> Christopher S. Swingley email: cswingle@iarc.uaf.edu
> IARC -- Frontier Program Please use encryption. GPG key at:
> University of Alaska Fairbanks www.frontier.iarc.uaf.edu/~cswingle
>
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.



This archive was generated by hypermail 2a23 : Mon Dec 09 2002 - 14:45:09 AKST