[Suns-at-Home] Odd httpd error entries - probe attempts?
Brian P. Costello
costellob@asme.org
Sat, 06 Oct 2001 09:39:00 -0700
I have been seeing a strange trend in my log files that track my web site
traffic and I want to see if anyone knows what is going on with it. I have many
entries every day from many different address all looking for the same files
in my http DocumentRoot directory (/export/home/htdocs). They are as follows:
scripts/root.exe
MSADC/root.exe
c/winnt/system32/cmd.exe
d/winnt/system32/cmd.exe
scripts/..%5c../winnt/system32/cmd.exe
_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
scripts/..Á ../winnt/system32/cmd.exe
scripts/..À¯../winnt/system32/cmd.exe
scripts/..%5c../winnt/system32/cmd.exe
scripts/..%2f../winnt/system32/cmd.exe
Obviously these are windows files so I am not too worried since my server
is a SPARC 20 running Solaris but I can't help wondering why this is going on.
I do not usually look at the httpd errors because I am typically only worried
about telnet and excessive ftp attempts. I went back and looked at all my daily log
file summaries and found that this started on Sept. 19, 2001. One thing that I found
was that the IP addresses all start with 216. I looked up all the companies that control
the addresses for on particular day (Oct 5, 2001) and found that they all belong to
different people using http://www.arin.net/whois :
216.27.221.9 : Clearsky Broadband, WA -clearskybroadband.com
216.232.84.235: Victoria Concumer ADSL, Victoria, Canada - telus.net
216.135.202.197: Cape Classics, NY - capeclassics.com
216.118.147.3: Quest Net Corp., FL - cwtel.com
216.167.87.21: Verio, CO - verio.net
216.206.65.141: Qwest Communications, CO - qwestip.net
216.5.163.147: Business Internet Inc., FL - icix.net
Does anyone recogonize this probe? Any ideas why the addresses ALWAYS
start with 216? It looks like the addresses are randomly selected after the
first octet of 216 so I don't think I can effectively filter by address. Any comments
are welcome. Below is an edited copy of my daily log file summary for Oct 5 ,2001
for a closer look.
> Log file summary for costello on 05/Oct/2001
> Uptime: 1:02am up 91 day(s), 5:06, 1 user, load average: 0.00, 0.00, 0.01
>
>
> /usr/bin/cat /var/log/httpd_error_log for Oct 5
>
> [Fri Oct 5 01:23:15 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 01:23:15 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 01:23:15 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 01:23:15 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:16 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:17 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 01:23:17 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:43 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 05:56:43 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 05:56:43 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 05:56:43 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 05:56:44 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:44 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:44 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:44 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:44 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:45 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:45 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:45 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 05:56:45 2001] [error] [client 216.232.84.235] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:32 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 07:01:32 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 07:01:32 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 07:01:32 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:33 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:34 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:01:34 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 07:08:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 07:08:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 07:08:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 07:08:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 07:08:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:08:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:09:01 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 07:25:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 07:25:59 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:00 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:01 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:01 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:01 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:26:01 2001] [error] [client 216.27.221.9] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 07:27:59 2001] [error] [client 209.73.162.102] File does not exist: /export/home/htdocs/robots.txt
> [Fri Oct 5 07:34:43 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 07:34:44 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 07:34:44 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 07:34:45 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 07:34:45 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:45 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:46 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:46 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:47 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:47 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:48 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:49 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:34:50 2001] [error] [client 216.135.202.197] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 07:36:44 2001] [error] [client 216.5.163.147] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 07:36:49 2001] [error] [client 216.5.163.147] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 07:51:36 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 07:51:39 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 07:51:40 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 07:51:40 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 07:51:40 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:41 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:41 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:41 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:42 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:42 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:42 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:43 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 07:51:44 2001] [error] [client 216.118.147.3] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:09 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 08:29:09 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 08:29:09 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 08:29:10 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 08:29:10 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:10 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:10 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:10 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:11 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:11 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:11 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:12 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:29:12 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:18 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 08:46:18 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 08:46:18 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 08:46:19 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 08:46:19 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:19 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:19 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:20 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:20 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:20 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:20 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:21 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 08:46:21 2001] [error] [client 216.167.87.21] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:27 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/root.exe
> [Fri Oct 5 09:49:27 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/MSADC/root.exe
> [Fri Oct 5 09:49:27 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/c/winnt/system32/cmd.exe
> [Fri Oct 5 09:49:27 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/d/winnt/system32/cmd.exe
> [Fri Oct 5 09:49:28 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:28 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:28 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:28 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:28 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/..Á ../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:28 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/..À¯../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:29 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:29 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/..%5c../winnt/system32/cmd.exe
> [Fri Oct 5 09:49:29 2001] [error] [client 216.206.65.141] File does not exist: /export/home/htdocs/scripts/..%2f../winnt/system32/cmd.exe
> [Fri Oct 5 15:21:00 2001] [error] [client 64.55.148.54] File does not exist: /export/home/htdocs/robots.txt
> [Fri Oct 5 17:50:52 2001] [error] [client 66.35.208.59] File does not exist: /export/home/htdocs/robots.txt
> [Fri Oct 5 23:03:21 2001] [error] [client 202.102.201.41] Invalid URI in request GET x HTTP/1.0
>
> /usr/bin/cat /var/log/xferlog for Oct 5
entries removed for security
>
> /usr/bin/cat /var/log/syslog for Oct 5 telnetd
>
> Oct 5 21:18:17 costello in.telnetd[8657]: connect from mowgli
>
> /usr/bin/cat /var/log/syslog.0 for Oct 5 telnetd
>
>
> /usr/bin/cat /var/log/syslog for Oct 5 ftpd
>
> Oct 5 21:41:13 costello in.ftpd[8697]: connect from mowgli
>
> /usr/bin/cat /var/log/syslog.0 for Oct 5 ftpd
>
>
--
Brian P. Costello costellob@asme.org
San Francisco Bay Area http://costello.mine.nu