Rastreador que recorre los siguientes sitios:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 |
/bin/msgimport;3 /cube/bin/msgimport;3 /mail/bin/msgimport;3 /mail2/bin/msgimport;3 /mss2/bin/msgimport;3 /rc/bin/msgimport;2 /rms/bin/msgimport;3 /round/bin/msgimport;3 /roundcube-0.1/bin/msgimport;2 /roundcube-0.2/bin/msgimport;3 /roundcube/bin/msgimport;4 /roundcubemail-0.1/bin/msgimport;3 /roundcubemail-0.2/bin/msgimport;2 /roundcubemail/bin/msgimport;3 /webmail/bin/msgimport;3 /webmail2/bin/msgimport;3 /wm/bin/msgimport;3 |
La consulta:
1 2 3 4 5 |
SELECT cs-uri-stem,count(*) FROM 'C:\Logfiles\W3SVC1\*.*' where cs(User-Agent) like '%Toata%' group by cs-uri-stem order by cs-uri-stem |
Recomendaciones:
- Cambiar las rutas
- Eliminar marcas de productos instalados
- Bloquear user agent
- Firewall