各位先進, 最近在我的 web server log 中的 log 有很多下述的 message
211.167.243.57 - - [19/Sep/2001:08:00:18 +0800] "GET /scripts/root.exe?/c+dir HT
TP/1.0" 404 286 "-" "-"
211.167.243.57 - - [19/Sep/2001:08:00:18 +0800] "GET /MSADC/root.exe?/c+dir HTTP
/1.0" 404 284 "-" "-"
211.167.243.57 - - [19/Sep/2001:08:00:19 +0800] "GET /c/winnt/system32/cmd.exe?/
c+dir HTTP/1.0" 404 294 "-" "-"
211.167.243.57 - - [19/Sep/2001:08:00:19 +0800] "GET /d/winnt/system32/cmd.exe?/
c+dir HTTP/1.0" 404 294 "-" "-"
211.167.243.57 - - [19/Sep/2001:08:00:20 +0800] "GET /scripts/..%255c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 308 "-" "-"
211.167.243.57 - - [19/Sep/2001:08:00:21 +0800] "GET /_vti_bin/..%255c../..%255c
../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 325 "-" "-"
211.167.243.57 - - [19/Sep/2001:08:00:21 +0800] "GET /_mem_bin/..%255c../..%255c
../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 325 "-" "-"
而且對方 IP 一直換..
這是不是有人在試圖侵入呢??? 還是對方的機器中毒了呢???
謝謝...
書籤