Forum Moderators: open

Message Too Old, No Replies

65.162.25.97? Trying to go to forbiddin places......

Is this guy is spamming me or trying to give me virus?

         

kstprod

1:54 pm on Oct 27, 2002 (gmt 0)

10+ Year Member



I have just learned about server logs and how to read them, but am confused about this stuff. This is what my log showed up today. By the way, I have submitted to all the SE and Indexes, but as far as I know, I'm not listed anywhere yet....

65.162.25.97 - - [27/Oct/2002:07:23:23 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 - "-" "-"

but it's not the only one, there's 16 from him like this and he's trying to access folders that don't even exist...

I have ALOT of other IP's that are doing the same thing. What is it, why do they do this, and how do I report and to who, of such activity?

Thanks,

Karen

bateman_ap

2:07 pm on Oct 27, 2002 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It's a automated hack for a well know vunrability of Microsoft servers. There has been a patch avaialble for ages so they are just a nucience rather than a threat anymore. The person who is accessing you prob doesn't even know it is on their machine

Look here

[microsoft.com...]