HELP is someone trying to Hack my website????

[thehig]

I have a small personal site. It has family information and pics of my son. I was , on a whim, review my web logs when I saw the following:
Sat Mar 2 10:32:30 2002] [error] [client 66.88.203.5] File does not exist: /home/rowbo/public_html/scripts/..%2f../winnt/system32/cmd.exe
[Sat Mar 2 10:32:30 2002] [error] [client 66.88.203.5] File does not exist: /home/rowbo/public_html/404.shtml
[Sat Mar 2 10:32:30 2002] [error] [client 66.88.203.5] File does not exist: /home/rowbo/public_html/scripts/..%5c../winnt/system32/cmd.exe


There are hundreds of these. Many different Ip's. I assume that they are checking to see if I am running a windows web server. I am just curious really since they seem to always get a 404 error when they try this. I reversed the dns's they are mostly DSL accounts at various services. Should I report them or complain. I do pay for my bandwidth these massive requests do eat up some of my bandwidth. Sorry for rambling. I am a bit angry too.

Anyone have any suggestions or thoughts?

[loudpontiac]

It's either the Nimba or Code Red worm looking to break into your box, coming from people whose computers have the worm.

[loudpontiac]

http://www.addme.com/issue222.htm

Redirecting the requests will help save some of your bandwith, so your web server doesn't have to give 404 errors out for every worm attack.

[thehig]

Thanks LoudPontiac. Nice link. Updating my .htaccess right now.

Oh and welcome to Techimo!

[Chooco]

i got some of those entries too:

[Sun Feb 24 20:52:48 2002] [error] [client 142.59.228.135] File does not exist: c:/program files/apache/realdocs/scripts/..Á/winnt/system32/cmd.exe
[Sun Feb 24 20:52:51 2002] [error] [client 142.59.228.135] File does not exist: c:/program files/apache/realdocs/scripts/..À¯/winnt/system32/cmd.exe
[Sun Feb 24 20:52:52 2002] [error] [client 142.59.228.135] File does not exist: c:/program files/apache/realdocs/scripts/..Áœ/winnt/system32/cmd.exe
[Sun Feb 24 20:52:53 2002] [error] [client 142.59.228.135] File does not exist: c:/program files/apache/realdocs/scripts/..%5c/winnt/system32/cmd.exe
[Sun Feb 24 20:52:53 2002] [error] [client 142.59.228.135] File does not exist: c:/program files/apache/realdocs/scripts/..%2f/winnt/system32/cmd.exe

are you saying that dude 142.59.228.135 has a worm?

[Mntsnow]

Yep