HP3000-L Archives

January 2002, Week 4

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Peter Osborne <[log in to unmask]>
Reply To:
Peter Osborne <[log in to unmask]>
Date:
Mon, 28 Jan 2002 11:27:02 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (25 lines)
Thousands of requests come from compromised M$ computers on the internet. I
have thousands of these requests in my Apache log files. There is no concern
if you are running non-M$ operating systems.

-Pete
On January 28, 2002 11:05 am, David T Darnell wrote:
> I'm looking at the "Top 10 list of Documents Not Found" in my webserver
> statistics, and see that there are a lot of hits for
> [drive specified or not]/winnt/system32/cmd.exe.  Variants of this file
> path account for almost all of the "not found" documents.
>
> Since my web server is not M$, these patchs would not exist anyway.
>
> /MSADC/root.exe also seems to be very popular.
>
> Does this indicate hacking activity against my site?
>
> -Dave Darnell
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2