so I'm running my webserver now, on my own computer, and was wondering if someone who knew something about web servers could tell me something....
I'm using apache and I go look at the access log and I find a few weird entries. I was just wondering what these were.
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 296
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 296
68.84.17.24 - - [17/Mar/2004:18:05:21 -0800] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306
68.84.17.24 - - [17/Mar/2004:18:05:21 -0800] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306
???
the site is vxd.ath.cx if you want to visit, but there really isn't much there.
I'm using apache and I go look at the access log and I find a few weird entries. I was just wondering what these were.
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292
68.84.17.24 - - [17/Mar/2004:18:05:18 -0800] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339
68.84.17.24 - - [17/Mar/2004:18:05:19 -0800] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 296
68.84.17.24 - - [17/Mar/2004:18:05:20 -0800] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 296
68.84.17.24 - - [17/Mar/2004:18:05:21 -0800] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306
68.84.17.24 - - [17/Mar/2004:18:05:21 -0800] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306
???
the site is vxd.ath.cx if you want to visit, but there really isn't much there.
Comment