Mærkelige ting på min IIS.
Hej. Jeg har kigget logfilerne igennem for min IIS og her er et uddrag af den:19:58:55 80.62.33.225 GET /scripts/root.exe 404
19:59:00 80.62.33.225 GET /MSADC/root.exe 404
19:59:08 80.62.33.225 GET /c/winnt/system32/cmd.exe 404
19:59:13 80.62.33.225 GET /d/winnt/system32/cmd.exe 404
19:59:20 80.62.33.225 GET /scripts/..%5c../winnt/system32/cmd.exe 404
19:59:25 80.62.33.225 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 500
19:59:29 80.62.33.225 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 404
19:59:37 80.62.33.225 GET /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe 404
19:59:41 80.62.33.225 GET /scripts/..Á../winnt/system32/cmd.exe 404
19:59:47 80.62.33.225 GET /scripts/winnt/system32/cmd.exe 404
19:59:52 80.62.33.225 GET /winnt/system32/cmd.exe 404
19:59:57 80.62.33.225 GET /winnt/system32/cmd.exe 404
20:00:01 80.62.33.225 GET /scripts/..%5c../winnt/system32/cmd.exe 404
20:00:07 80.62.33.225 GET /scripts/..%5c../winnt/system32/cmd.exe 404
20:00:12 80.62.33.225 GET /scripts/..%5c../winnt/system32/cmd.exe 404
20:00:17 80.62.33.225 GET /scripts/..%2f../winnt/system32/cmd.exe 404
20:12:02 80.62.33.225 GET /scripts/root.exe 404
20:12:07 80.62.33.225 GET /MSADC/root.exe 404
og her er uddrag fra RIPE:
route: 80.62.0.0/15
descr: TDC Tele Danmark
origin: AS3292
remarks: +---------------------------------------+
remarks: | For abuse and security issues contact |
remarks: | csirt@csirt.dk, http://www.csirt.dk |
remarks: +---------------------------------------+
notify: notify@ip.tele.dk
mnt-by: AS3292-MNT
changed: auto-ripe@ip.tele.dk 20010701
changed: auto-ripe@ip.tele.dk 20010813
changed: auto-ripe@ip.tele.dk 20020711
changed: auto-ripe@ip.tele.dk 20020730
source: RIPE
role: AS3292 Staff
address: TDC Net
address: Sletvej 30, A039
address: DK-8310 Tranbjerg
address: Denmark
phone: +45 50 12 29 47
e-mail: staff@ip.tele.dk
trouble: staff@ip.tele.dk
admin-c: MILY1-RIPE
admin-c: NINA1-RIPE
tech-c: NCB1-RIPE
tech-c: MILY1-RIPE
tech-c: HV72-RIPE
nic-hdl: AS5071-RIPE
mnt-by: AS3292-MNT
changed: staff@ip.tele.dk 19990223
changed: staff@ip.tele.dk 20030326
changed: staff@ip.tele.dk 20040601
source: RIPE
Hvad er det lige der er sket på min PC og hvorfor er det lige TDC der kigger??
Venlig hilsen
XoDeus
