Messages in HTTPD log
From: Mica (navinsam_in_at_hotmail.com)
Date: 31 Aug 2003 06:24:20 -0700
I'm running apache 2.0 on RH Linux behind a firewall. I have setup
DNAT to enable port 80 requests to be forwarded to my httpd server in
the internal n/w.
I found this line in my httpd access_log .
xx.xx.xx.xx - - [31/Aug/2003:01:28:45 -0400] "GET
/scripts/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.1" 404
1050 "-" "-"
and the following lines in error_log
[Sun Aug 31 01:28:44 2003] [error] [client xx.xx.xx.x] File does not
[Sun Aug 31 01:28:45 2003] [error] [client xx.xx.xx.xx] File does not
What was the person trying to accomplish ? I guess he didn't find much
Can I do anything more to prevent such requests coming to my webserver