由 liuchui 在 11-25-2002 13:27 发表:
帮忙看看这段日志,62是不是在攻击我
A:
[Fri Nov 22 23:05:55 2002] [error] [client 211.83.245.210] File does not exist: /var/www/html/scripts
[Fri Nov 22 23:06:03 2002] [error] [client 211.83.245.210] File does not exist: /var/www/html/MSADC
[Fri Nov 22 23:06:06 2002] [error] [client 211.83.245.210] File does not exist: /var/www/html/c
211.83.110.5 - - [22/Nov/2002:22:33:43 +0800] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 323 "-" "-"
211.83.110.5 - - [22/Nov/2002:22:33:43 +0800] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 321 "-" "-"
211.83.110.5 - - [22/Nov/2002:22:33:43 +0800] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 331 "-" "-"
B:
211.83.253.62 - - [24/Nov/2002:12:31:13 +0800] "GET / HTTP/1.1" 200 4105 "-" "-"
211.83.253.62 - - [24/Nov/2002:12:31:13 +0800] "HEAD /qweiop43809442fsfjflr.html HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:13 +0800] "GET / HTTP/1.1" 200 4105 "-" "-"
211.83.253.62 - - [24/Nov/2002:12:31:13 +0800] "HEAD /ifx/?LO=http://../etc/passwd HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:13 +0800] "HEAD /http://etc/passwd HTTP/1.1" 400 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:14 +0800] "HEAD /http://http://../etc/passwd HTTP/1.1" 400 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:14 +0800] "HEAD /http://http://etc/passwd HTTP/1.1" 400 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:15 +0800] "HEAD /http://../etc/passwd HTTP/1.1" 400 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:18 +0800] "HEAD /http://shadow HTTP/1.1" 400 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:18 +0800] "HEAD /cgi-bin/ HTTP/1.1" 403 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:18 +0800] "HEAD /cgi-bin/ HTTP/1.1" 403 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:19 +0800] "HEAD /cgi/ HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:22 +0800] "HEAD /admin-serv/config/admpw HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:25 +0800] "HEAD /publisher HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:29 +0800] "HEAD /whois_raw.cgi HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:29 +0800] "OPTIONS / HTTP/1.1" 200 0 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"
211.83.253.62 - - [24/Nov/2002:12:31:36 +0800] "HEAD /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 404 - "-" "-"
211.83.253.62 - - [24/Nov/2002:12:31:36 +0800] "HEAD /WebSTAR HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:38 +0800] "GET /NULL.printer HTTP/1.1" 404 319 "-" "-"
211.83.253.62 - - [24/Nov/2002:12:31:39 +0800] "HEAD /web_store.cgi HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:39 +0800] "HEAD /usr/local/apache/share/htdocs/.htaccess HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:40 +0800] "HEAD /userreg.cgi?cmd=insert
>/etc/passwd HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:41 +0800] "HEAD /root HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:42 +0800] "HEAD /quikstore.cfg HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:45 +0800] "HEAD /pw/storemgr.pw HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:45 +0800] "HEAD /PSUser/PSCOErrPage.htm HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:45 +0800] "HEAD /PSUser/PSCOErrPage.htm HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:48 +0800] "HEAD /piranha/secure/passwd.php3 HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:50 +0800] "HEAD /piranha/secure/passwd.php3 HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:50 +0800] "HEAD /ping HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:51 +0800] "HEAD /photoads/cgi-bin/env.cgi HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:53 +0800] "HEAD /photoads/ads_data.pl HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:55 +0800] "HEAD /pfdispaly.cgi HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:58 +0800] "HEAD /PDG_Cart/order.log HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:58 +0800] "HEAD /PDG_Cart/order.log HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:31:58 +0800] "HEAD /ows-bin/perlidlc.bat HTTP/1.1" 404 - "-" "Mozilla/5.0"
211.83.253.62 - - [24/Nov/2002:12:32:00 +0800] "HEAD /orders/order.log HTTP