Ordner LOGFILE in System 32

[TimeWarp 10]

Hallo,

 

kann mir jemand erläutern wozu der Ordner LOGFILE in System32 dient, bzw. was die enthaltenen logs aussagen?

 

Hier mal ein Beispiel-Log:

 

#Software: Microsoft Internet Information Services 5.0

#Version: 1.0

#Date: 2005-02-17 08:00:05

#Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status cs(User-Agent)

2005-02-17 08:00:05 192.168.100.35 - 192.168.100.112 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600

2005-02-17 08:00:05 192.168.100.35 - 192.168.100.112 80 PROPFIND /SysVol - 404 Microsoft-WebDAV-MiniRedir/5.1.2600

2005-02-17 08:00:05 192.168.100.35 - 192.168.100.112 80 PROPFIND /SysVol - 404 Microsoft-WebDAV-MiniRedir/5.1.2600

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /msadc/ - 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /msadc/msadcs.dll - 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /scripts/ - 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 GET /scripts/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe /c+dir 500 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 GET /msadc/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe /c+dir 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /cgi-bin/ - 404 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /bin/ - 404 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /samples/ - 404 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /_vti_cnf/ - 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 GET /_vti_cnf/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe /c+dir 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /_vti_bin/ - 403 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 GET /_vti_bin/..%5c..%5c..%5c..%5c..%5c..%5cwinnt/system32/cmd.exe /c+dir 500 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 HEAD /iisadmpwd/ - 404 -

2005-02-17 09:17:33 192.168.100.179 - 192.168.100.112 80 GET /winnt/system32/cmd.exe /c+dir 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /cgi-bin/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /iisstart.asp - 500 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /technote/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /iisadmpwd/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /cgi-dos/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /scripts/ - 403 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /scripts/perl.exe - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /mall_log_files/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /Admin_files/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /cgi-bin/ikonboard/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /foldoc/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /cgi-bin/adcycle/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /ROADS/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /way-board/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 HEAD /cgi-bin/a1stats/ - 404 -

2005-02-17 09:17:37 192.168.100.179 - 192.168.100.112 80 GET /scripts/shopplus.cgi dn=domainname.com&cartid=%CARTID%&file=;cat%20/etc/passwd| 404 -

2005-02-17 09:20:03 192.168.100.179 - 192.168.100.112 80 OPTIONS / - 200 Microsoft-WebDAV-MiniRedir/5.1.2600

 

 

Vielen Dank

 

TimeWarp