Solved

apache logs

Posted on 2003-10-24
2
238 Views
Last Modified: 2010-03-04
i have the following in my apache logs ... waht does this mean ?

pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 214
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 212
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 222
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 222
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 236
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 253
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 253
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 269
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 226
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 226
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 236
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 236

thanks in advance
0
Comment
Question by:sanctify
2 Comments
 
LVL 17

Accepted Solution

by:
dorward earned 50 total points
ID: 9619497
It means someone (or more likely someTHING [a worm]) is trying to exploit security holes in Microsoft's contribution to the webserver market.

Apache users don't need to worry about it, other then the slightly untity log files.

IIS users should switch to Apache (or install all the security patches).
0
 
LVL 1

Author Comment

by:sanctify
ID: 9621405
ok thanks .. its good to know im secure with apache
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Forward apache log to Syslog-NG 7 90
Leverage Browser Caching 7 70
Application launch issue with Apache Tomcat 5 45
Logs to delete in Windows VCenter server ? 11 555
Over the last year I have answered a couple of basic URL rewriting questions several times so I thought I might as well have a stab at: explaining the basics, providing a few useful links and consolidating some of the most common queries into a sing…
If you've heard about htaccess and it sounds like it does what you want, but you're not sure how it works... well, you're in the right place. Read on. Some Basics #1. It's a file and its filename is .htaccess (yes, with a dot in the front). #…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question