strange url attempted access

[rincewind]

Hi,
Why would someone try to access the following file after of your site i.e. www.yourdomain.com/winnt/system32/cmd.exe
My server stats say its been attempted regular and sometimes in great numbers.
Any one got any ideas?
Thanks.

[PeOfEo]

Hacking attempts, I dont know.

[khaki]

hi rincewind...

according to the crack IT unit that supports (HA!!!! :rolleyes: ) me...
it's a variation of CodeRed/Nimbda probes.
(whatever that means :rolleyes: )

can't we all just get along :rolleyes:

;) k

[brendandonhue]

Its an attempt at an IIS exploit. I get tons of requests for cmd.exe and root.exe

[rincewind]

Thanks people,
Is there any way I can prevent/gaurd against this in future because some images were actually changed on my site recently and I can be letting that happen!
Thanks

[brendandonhue]

You can't control what websites other people try to access. Your server doesn't have a cmd.exe so you can't prevent them from accessing something that doesnt exist.

If people can go in and mess with your images-you have security problems. Try a firewall, and search for "Secure Apache" for some tips.

[rincewind]

will do,
Thanks!