strange apache access_log entry

bulliver · 01-29-2003, 08:00 PM

Hello,

I have a personal website running on my box now (link in my sig) and there is an access_log entry that is freaking me out:

Code:

[ip] -- [date and time] --"GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 2845

Is someone trying to crack my box? As you can see apache gave a 404 error, but that cmd.exe is confusing me. It would seem that someone thinks this is a winnt box. Should I be concerned? Anybody know what this is about?

Thanks...

unSpawn · 01-29-2003, 08:10 PM

No you shouldn't be concerned. It's old, it's called Nimda and it's for the Wintendo Game Platform.
*(If you searched LQ before you posted you should've found the info already)

bulliver · 01-29-2003, 08:35 PM

Thanks, I did search FYI, but only found code red, and a bunch of others that didn't look the same as mine...

thanks again...

unSpawn · 01-30-2003, 04:07 AM

Ah, ok, no prob.