Is someone trying to hack my site?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • brizzad
    holla
    • Jul 2003
    • 11769

    #1

    Is someone trying to hack my site?

    I checked my error logs, and here's a list of some things people tried to access but got 404'd

    msadc/..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe 2 3.57
    3 /msadc/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 2 3.57
    4 /PBServer/..%5c..%5c..%5cwinnt/system32/cmd.exe 2 3.57
    5 /Rpc/..%5c..%5c..%5cwinnt/system32/cmd.exe 2 3.57
    6 /_vti_bin/..%5c..%5c..%5c..%5c..%5c../winnt/system32/cmd.exe 2 3.57
    7 /_vti_bin/..À¯..À¯..À¯..À¯..À¯../winnt/system32/cmd.exe 1 1.79
    8 /_vti_bin/..À¯../..À¯../..À¯../winnt/system32/cmd.exe 1 1.79
    9 /_vti_cnf/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe 1 1.79
    10 /_vti_cnf/..À¯..À¯..À¯..À¯..À¯../winnt/system32/cmd.exe 1 1.79
    11 /adsamples/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe 1 1.79
    12 /adsamples/..À¯..À¯..À¯..À¯..À¯../winnt/system32/cmd.exe 1 1.79
    13 /cgi-bin/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe 1 1.79
    14 /cgi-bin/..À¯..À¯..À¯..À¯..À¯../winnt/system32/cmd.exe 1 1.79
    15 /iisadmpwd/..%2f..%2f..%2f..%2f..%2f..%2fwinnt/system32/cmd.exe 1 1.79
    16 /iisadmpwd/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe 1 1.79
    17 /iisadmpwd/..À¯..À¯..À¯..À¯..À¯../winnt/system32/cmd.exe 1 1.79
    18 /iisadmpwd/..À¯../..À¯../..À¯../winnt/system32/cmd.exe 1 1.79
    19 /msadc/.%2e/.%2e/.%2e/.%2e/winnt/system32/cmd.exe 1 1.79
    20 /msadc/..À¯../..À¯../..À¯../winnt/system32/cmd.exe 1 1.79
    21 /msadc/..À¯../..À¯../winnt/system32/cmd.exe 1 1.79
    22 /msadc/../à/?/¯../../à/?/¯../../à/?/¯../winnt/system32/cmd.exe 1 1.79
    23 /msdac/root.exe 1 1.79
    24 /msdac/shell.exe 1 1.79
    25 /samples/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe 1 1.79
    26 /samples/..À¯..À¯..À¯..À¯..À¯../winnt/system32/cmd.exe


    and the list goes on
  • Jeff aka NIGHTfall
    Confirmed User
    • Oct 2003
    • 5162

    #2
    better not be weedland

    Register Now For PimpinPays.com

    Comment

    • xalthus
      Confirmed User
      • Jul 2004
      • 170

      #3
      probably a bot that crawls websites, and hits them up with common exploits.

      Comment

      • brizzad
        holla
        • Jul 2003
        • 11769

        #4
        Originally posted by Jeff aka NIGHTfall
        better not be weedland
        lol nah weedland is fine

        after this week is over ill start back up advertising and shit again, remind me to give you and erik a user/pass to post news on the main page

        Comment

        • lb_vee
          Confirmed User
          • May 2004
          • 886

          #5
          Originally posted by xalthus
          probably a bot that crawls websites, and hits them up with common exploits.
          thats exactly what it is, thats the only reason my error logs keep growing.

          Comment

          • Jeff aka NIGHTfall
            Confirmed User
            • Oct 2003
            • 5162

            #6
            Originally posted by brizzad
            lol nah weedland is fine

            after this week is over ill start back up advertising and shit again, remind me to give you and erik a user/pass to post news on the main page

            hey b-rad, give me and erik a user/pass to post news on the main page

            Register Now For PimpinPays.com

            Comment

            • railz
              Confirmed User
              • Nov 2001
              • 2531

              #7
              That's the Code Red virus in scan mode.
              This Space for Rent

              Comment

              • nastyking
                • Nov 2002
                • 2174

                #8
                Originally posted by railz
                That's the Code Red virus in scan mode.
                what he said

                Comment

                Working...