[Suns-at-Home] Odd httpd error entries - probe attempts?

[sp17@cornell.edu]

At Sat, 06 Oct 2001 09:39:00 -0700 "Brian P. Costello" <costellob@asme.org> wro
te:

>I have been seeing a strange trend in my log files that track my web site
>traffic and I want to see if anyone knows what is going on with it. I have man
>y
>entries every day from many different address all looking for the same files
>in my http DocumentRoot directory (/export/home/htdocs). They are as follows:
>
>scripts/root.exe
>MSADC/root.exe

..

Nimda worm:

  http://www.cert.org/advisories/CA-2001-26.html

You're seeing infected systems trying to infect yours.

-- SP