[thelist] Weird Log Entries -- Any Ideas?

Martin Kuplens-Ewart martin at graphicist.com
Tue Jun 26 12:54:30 CDT 2001


<original_message>

From: thelist-admin at lists.evolt.org
[mailto:thelist-admin at lists.evolt.org] On Behalf Of Pat Meeks

I just started getting these strange entries in my logs:

Under 302 Found I am getting
http://www.practicalcomponents.com/scripts/..�¯../winnt/system32/cmd.e
xe?/
c+dir c:
http://www.practicalcomponents.com/scripts/..À¯../winnt/system32/cmd.exe
?/c+
dir c:

And under "submitted forms", I'm seeing:
http://www.practicalcomponents.com/scripts/..À¯../winnt/system32/cmd.exe
6 11.76% 4
http://www.practicalcomponents.com/scripts/..�¯../winnt/system32/cmd.e
xe

I'm not using "any" scripts on my site.

Thanks for any insight to this...Pat Meeks pmeeks at msn.com

</original_message>

Looks like someone is trying to find ways to hack your server... As long
as they're not getting thru to anything, you're fine... You may want to
try to trace those ip addresses back to host: and if you feel it
appropriate, perhaps turn those records over to someone for further
investigation...

-m





More information about the thelist mailing list