- WLUG - wlug.mailman3.com

Re: [Wlug] ssh-dummy-shell for OpenSSH???

by Wesley Allen

Keller, Tim wrote: >I'm setting up a test environment using OpenSSH built in sFTP server. What >I want to-do is build a chroot environment where people can connect to the >machine via sFTP but not via SSH. > >I know with the commercial version of SSH they have ssh-dummy-shell which >when you try to connect via SSH just bails on you, but lets sFTP work >properly. > >I've done some digging on the web and I haven't found anything that'll >replace this functionality on the OpenSSH side of things. > >Anybody got any ideas/links of an open source version of ssh-dummy-shell. > >Thanks, >Tim. >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug > I haven't tried this, but couldn't you just set the user's shells to /dev/null? So there's no shell access, but sftp should still work; kinda like the same way you create a dummy shell for e-mail only accounts sometimes? I don't know, just a thought. Wes

Jan. 30, 2002

Re: [Wlug] Bug reporting?

by Tom Guilderson

Bill Mills-Curran wrote: > > How do I report a bug (or at least ask for help) in a newer kernel? > (The gory details are below, if you are interested.) I sent some > email to a developer whose name I found in the suspect source, but I > did not get any response. Any suggestions? > To start - try grabbing the latest stable version - 2.4.17 and if the problem still exists - try the latest pre-patch which is 2.4.18-pre7. Doing a quick grep on nfs in the changelogs - I received several hits - so the problem may have been addressed. If after testing this with the latest stable release and prepatch release - I would then resend the bug report. I would also send the bug report to - mailto:linux-kernel@vger.kernel.org - this is the main kernel mailing list. When sending to this list indicate that you sent the message to person xyz and received no response and ask who the current maintainer for the nfs code is. If you get a different name as the maintainer - resend the report to that person. You may want to take a look at the following URL for reporting kernel bugs: http://www.kernel.org/pub/linux/docs/lkml/reporting-bugs.html Your bug report is fairly thorough and should suffice. Remember that the person you sent the bug report to just may be very busy (such as they may do this in their own free time) and has not got around to it yet or may have dropped it on the floor if the problem has already been solved. Don't be afraid to resend the bug report if the problem does still exist in the latest pre-patch release. Also if you don't get anywhere that route - try going to http://kernelnewbies.org/ - they have a few mailing lists and an IRC channel where you might also get some responses. Good Luck! - Tom

Jan. 30, 2002

Re: [Wlug] ssh-dummy-shell for OpenSSH???

by Scott Venier

does the ssh-dummy-shell have to actually do anything for sFTP to work, or does it just have to be in /etc/shells? If it just has to be in /etc/shells, /bin/false works. Been using that for years for (non-s)FTP-only accounts. Scott On Wed, 30 Jan 2002, Keller, Tim wrote: > I'm setting up a test environment using OpenSSH built in sFTP server. What > I want to-do is build a chroot environment where people can connect to the > machine via sFTP but not via SSH. > > I know with the commercial version of SSH they have ssh-dummy-shell which > when you try to connect via SSH just bails on you, but lets sFTP work > properly. > > I've done some digging on the web and I haven't found anything that'll > replace this functionality on the OpenSSH side of things. > > Anybody got any ideas/links of an open source version of ssh-dummy-shell. > > Thanks, > Tim. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Jan. 30, 2002

ssh-dummy-shell for OpenSSH???

by Keller, Tim

I'm setting up a test environment using OpenSSH built in sFTP server. What I want to-do is build a chroot environment where people can connect to the machine via sFTP but not via SSH. I know with the commercial version of SSH they have ssh-dummy-shell which when you try to connect via SSH just bails on you, but lets sFTP work properly. I've done some digging on the web and I haven't found anything that'll replace this functionality on the OpenSSH side of things. Anybody got any ideas/links of an open source version of ssh-dummy-shell. Thanks, Tim.

Jan. 30, 2002

Bug reporting?

by Bill Mills-Curran

How do I report a bug (or at least ask for help) in a newer kernel? (The gory details are below, if you are interested.) I sent some email to a developer whose name I found in the suspect source, but I did not get any response. Any suggestions? TIA, Bill **************************************************************** Date: Fri, 25 Jan 2002 14:40:01 -0500 (EST) From: Bill Mills-Curran <Mills-Curran_Bill(a)emc.com> To: claus(a)momo.math.rwth-aachen.de Subject: nfs readdir bug? Claus, I am reporting a bug that I suspect is in nfs readdir. I am reporting it to you, because I found your email address in the source. If this is wrong, please tell me. Symptom: Several programs (details below) do not read the contents of an nfs-mounted directory. There is no indicated failure -- there just is no data. The nfs server is DG/UX. The nfs client is linux, kernel version 2.4.16. The problem does not show up with the 2.4.2 kernel (RedHat 7.1 dist.) or on nfs systems from a SUN server. Note: We are using reiserfs on an array which is locally mounted to the linux host. The hardware is: DG (Data General) Aviion 8900 4 cpu, 500 MHz. strace note: I ran strace on my program. It reported that getdents64 function was finding the right number of directory entries. **************** These operations/programs fail to read a directory. In all cases, the OS is linux 2.4.16 and the filesystem is served by DG/UX. All directories (that I tested) on the filesystem have the problem. tcsh file completion (using the tab key) readdir in Perl readdir in my own test program (included below) **************** These operations work with the 2.4.16 kernel. All operations on other filesystems, nfs (SUN server) and local The "ls" command works everywhere Thanks for your time. Bill Mills-Curran -- Bill Mills-Curran Mills-Curran_Bill(a)emc.com EMC Corporation Tel: 508 382-7642 Coslin Drive, MS C33 Fax: 508 382-7913 Southboro, MA 01772 **************************************************************** Here's the source for my test program: #include <stdio.h> #include <sys/types.h> #include <dirent.h> int main(int argc, char *argv[]) { DIR *dir; struct dirent *dirent; printf("Reading %s\n", argv[1]); dir = opendir(argv[1]); while((dirent = readdir(dir))) { printf("%s\n", dirent->d_name); } return (0); }

Jan. 30, 2002

Re: [Wlug] BBC cd

by Aaron Haviland

doug waud said: > Hi all > > A few meeting back, Andy gave out some BBC-Linux cd's. I decided to > try one and got hung up. > > Basically everything went well until I got to the stage of downloading > stuff from the net (the network card set-up worked fine). > > The download hung. It defaulted to the address 64.81.65.8 for zork.net > where the stuff was supposed to be. I suspected that zork.net had > moved so I went to another box and went to it via netscape. It came up > ok (the directory structure was slightly different but the files > were there). Zork has recently moved, actually. about a block from one san fransisco apartment, up the hill to another. Zork was also slashdotted yesterday (the article about the "begin " and other anti-LookOut tricks Nick Moffitt [a.k.a. Crackmonkey] [the guy who owns zork.net/crackmonkey.org] uses in his emails). Afaik, he had previously had apache set up so that zork was the default virtualhost. I can't say why he may have changed it. The reason (as i understand) that archives are stored on zork instead of on the lnx-bbc site, is that Nick is developing GAR (a linux clone of ports, done with Makefiles) for lnx-bbc. If you need help with this specific version of lnx-bbc, you might find some willing volunteers on #tron, irc.slashnet.org. just be sure not to use a proprietary IRC client or OS... -- Aaron Haviland orion [at] tribble [dot] dyndns [dot] org orion [at] zork [dot] net Canadians are from Canadia.

Jan. 30, 2002

Re: [Wlug] Interesting app...

by Gary J. Hanley

Very interesting...thanks. -- Gary William Smith wrote: >I saw this on Freshmeat.net and thought i would take a look at it. i like >it so far... i thought others might be interested. > >http://www.webmin.com > >in a nutshell, it's an admin tool that works through your favorite web >browser. >

Jan. 30, 2002

Interesting app...

by William Smith

I saw this on Freshmeat.net and thought i would take a look at it. i like it so far... i thought others might be interested. http://www.webmin.com in a nutshell, it's an admin tool that works through your favorite web browser. -- William Smith wsmith(a)chezsmith.com Fall River, MA http://www.chezsmith.com

Jan. 30, 2002

RE: [Wlug] BBC cd

by Skip Gaede

Doug Waud wrote: > > Hi all > > A few meeting back, Andy gave out some BBC-Linux cd's. I decided to > try one and got hung up. > If you want to be adventuresome, check out http://sorcerer.wox.org Tou can download an 80 MB bzipped iso image, which will get you up and running with only a kernel compile. After that you can install anything you like. At last count, they had between 700 and 800 packages you could install. Iy's dependency based, so if you say you want to install kde, it will install X and a bunch of other stuff so you can run kde. You still need to know a bit about what you're doing, but it's a very promising distro. --Skip

Jan. 30, 2002

video card problems (I think)

by avedis＠ma.ultranet.com

Hi all. I'm lost trying to install suse 7.2 on a P166 with an ELSA GLoria vid card. I'm getting quite experienced with the different xfree setup utilities. When I was installing the software, I couldn't get past the video test and could only install text mode. If I use xf86config and use the vga16 driver, I can get into X, but all I see is the background color, and the only way out is ctrl-alt-back. I had to manually edit /etc/XF86Config to get rid of the 800X600 virtual screen and force it to 640X480. I did that so I could use sax without it going offscreen and out of reach of my mouse. Oh yeah, sax wasn't able to do the job, and sax2 told me I was using XFree v.3 and promised to install v.4, but it just hung totally - blank screen, hit the reset button to reboot. Using XF86Setup, I was able to install the XF86_3DLabs server (the right one) and can now get as far as the KDE desktop starting to open. It hangs when it's checking peripherals. Does that mean that some hardware is not set up properly, and if so, how do I find out which it is? Many thanks if anyone can point me in the right direction. Greg

Jan. 30, 2002

Re: [Wlug] BBC cd

by doug waud

"Charles R. Anderson" wrote: > Does it allow you to configure DNS name > resolution in the installer? I can log in as root at another (Ctrl/Alt/F2) terminal and ping google works so I assume DNS is working and the limit may be in the install script. > I've never used or even heard of BBC-linux, so I can't help any further. Neither have I! :-( / :-) That was a screw-up spelling checkers can't catch! It should have been LYX-BBC as in http://www.lnx-bbc.org/ Sorry about that. As you can see I can do more than just pull out power cords! :-) Thanks for the background on host-based virtual hosting; now I can go back to seeing whether I can find a work-around in that context. doug

Jan. 29, 2002

Re: [Wlug] Cue Cats

by Theo Van Dinter

On Tue, Jan 29, 2002 at 05:15:09PM -0500, John Stoffel wrote: > I've got one at home. Works fine for scanning, though it's a bit > picky. I've got the start of some software to scan in ISBN numbers > from books and fill in the details for you, so you can scan you book > collection. FYI: http://freshmeat.net/projects/cat_a_log/ :) -- Randomly Generated Tagline: "Sometimes women just don't understand a guy's need to vegetate." - Timex

Jan. 29, 2002

Re: [Wlug] Cue Cats

by John Stoffel

Adam> Anyone play with these things (and associated Perl/php tools)? Adam> I just got 4 of 'em from a local Radio Shack for free. My Adam> coworkers and I are about to attempt to setup a backup tape Adam> tracking system with them. I was wondering if anyone had any Adam> comments on them. I've got one at home. Works fine for scanning, though it's a bit picky. I've got the start of some software to scan in ISBN numbers from books and fill in the details for you, so you can scan you book collection. The big problem is that limited length, and that the damm light it on all the time.

Jan. 29, 2002

Re: [Wlug] BBC cd

by Charles R. Anderson

On Tue, Jan 29, 2002 at 04:45:13PM -0500, doug waud wrote: douglas.waud> So the problem is to find out the dotted quad for zork.net. douglas.waud> I tried ping zork.net and it pinged 66.92.188.166. I then went there and douglas.waud> got crackmonkey.org. I tried pinging crackmonkey.org and got that same douglas.waud> 66.92.188.166 I got pinging zork.net ! arp zork.net and crackmonkey.org douglas.waud> also gives that same common dotted quad. Ping of the BBC default douglas.waud> address 64.81.65.8 gives nothing. As you have discovered, multiple hostnames can (and regularly do) point to the same dotted quad IP address. HTTP v1.1 supports what is called "Host-based Virtual Hosting". This means that many web sites, each with a distinct hostname, can exist on the same web server, even though the web server has only one IP address. The way HTTP distinguishes which host it wants in a query, it uses the Host: header. Try this: >telnet 66.92.188.166 80 HEAD / HTTP/1.1 Connection: close Host: zork.net (hit enter for one blank line after the Host: line) You should see this output: HTTP/1.1 200 OK Date: Tue, 29 Jan 2002 22:02:30 GMT Server: Apache/1.3.22 (Unix) Debian GNU/Linux PHP/4.1.1 Last-Modified: Sun, 20 Jan 2002 18:09:58 GMT ETag: "4f621-13ce-3c4b07f6" Accept-Ranges: bytes Content-Length: 5070 Connection: close Content-Type: text/html You can try "GET / HTTP/1.1" instead, if you want to see the whole page, not just the HEADers. Then, try "Host: crackmonkey.org" and you should see a different root webpage (if you used GET, not HEAD). So, to answer your question about BBC, BBC must understand how to send HTTP/1.1 Host: headers in order for this to work, and you must use a hostname, not a dotted quad, unless it allows you to tell it what hostname to use in the Host: header, while also specifying a dotted quad IP address for actually making the TCP connection to port 80. Does it allow you to configure DNS name resolution in the installer? I've never used or even heard of BBC-linux, so I can't help any further. -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Jan. 29, 2002

Re: [Wlug] apache help

by Wesley Allen

Michelle Vadeboncoeur wrote: >On Tue, 29 Jan 2002, bryon3245(a)netzero.com wrote: > >b> bottom. Could you also help me make it so users have to enter a >b> password and username to acess certain sections of the site. > >See: >http://httpd.apache.org/docs/misc/FAQ.html#user-authentication > If you want to see how to password protect portions of the site do google on howto .htaccess files; they're not that hard to figure out...

Jan. 29, 2002

BBC cd

by doug waud

Hi all A few meeting back, Andy gave out some BBC-Linux cd's. I decided to try one and got hung up. Basically everything went well until I got to the stage of downloading stuff from the net (the network card set-up worked fine). The download hung. It defaulted to the address 64.81.65.8 for zork.net where the stuff was supposed to be. I suspected that zork.net had moved so I went to another box and went to it via netscape. It came up ok (the directory structure was slightly different but the files were there). The problem is that the BBC script needs a dotted quad, not a zork.net. So the problem is to find out the dotted quad for zork.net. I tried ping zork.net and it pinged 66.92.188.166. I then went there and got crackmonkey.org. I tried pinging crackmonkey.org and got that same 66.92.188.166 I got pinging zork.net ! arp zork.net and crackmonkey.org also gives that same common dotted quad. Ping of the BBC default address 64.81.65.8 gives nothing. Unlike Netscape, Konquerer will take dotted quads. The 66.92.188.166 comes up crackmonkey.org consistent with the preceding while 64.81.65.8 gives the error message "could not connect to host 64.81.65.8". My question, then, is how does one get a dotted quad for zork.net? A related question is whether anyone tried/succeeded loading Debian starting with that BBC-linux cd? i.e. can it be done? (The README-DEBIAN on the cd gives alternative sites but none of them has the -bbc versions of the image and tarball the install script is looking for. I admit to not wanting to go down the path of redoing the install scripts :-( ) This email sure did not please the spell-checker! :-) doug

Jan. 29, 2002

OCR

by Bill Mills-Curran

Anyone have experience with linux OCR programs? TIA, Bill

Jan. 29, 2002

Re: [Wlug] apache help

by Michelle Vadeboncoeur

On Tue, 29 Jan 2002, bryon3245(a)netzero.com wrote: b> bottom. Could you also help me make it so users have to enter a b> password and username to acess certain sections of the site. See: http://httpd.apache.org/docs/misc/FAQ.html#user-authentication -- --==*==-- --==*==-- Michelle R. Vadeboncoeur --==*==-- --==*==-- mrv(a)kluge.net: http://www.kluge.net/~mrv/

Jan. 29, 2002

Re: [Wlug] apache help

by Charles R. Anderson

That is the Code Red/Nimda worm. -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Jan. 29, 2002

Re: [Wlug] apache help

by Orbitz

Looks like some dorks think you run ISS or something and are tryign to break your webserver, nothing hardcore. Orbitz On Tue, 29 Jan 2002, bryon3245(a)netzero.com wrote: > I had some questions about apache. I am running apache on my dorm computer which is a win 98 and I started getting some strange log's. > > > Sorry about it being so long but the stuff that scares is near the bottom. Could you also help me make it so users have to enter a password and username to acess certain sections of the site. > > Thanks everyone. > Here are the log's > > ---Start of acess long--- > > 207.159.186.214 - - [21/Jan/2002:13:37:39 -0500] "GET / HTTP/1.1" 200 3848 > 207.159.186.214 - - [21/Jan/2002:13:37:39 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.186.214 - - [21/Jan/2002:13:37:55 -0500] "GET /westfield/index.html HTTP/1.1" 200 25 > 207.159.186.214 - - [21/Jan/2002:13:37:58 -0500] "GET /pass.html HTTP/1.1" 200 541 > 207.159.186.214 - - [21/Jan/2002:13:38:02 -0500] "GET /playlistnew.html HTTP/1.1" 200 113637 > 207.159.186.214 - - [21/Jan/2002:13:38:02 -0500] "GET /null HTTP/1.1" 404 284 > 205.188.209.137 - - [21/Jan/2002:16:55:03 -0500] "GET / HTTP/1.0" 200 3848 > 205.188.209.103 - - [21/Jan/2002:16:55:06 -0500] "GET /pic/coolrun.GIF HTTP/1.0" 200 35654 > 205.188.209.171 - - [21/Jan/2002:16:55:39 -0500] "GET /playlist.html HTTP/1.0" 200 21864 > 205.188.209.107 - - [21/Jan/2002:16:55:42 -0500] "GET /null HTTP/1.0" 404 272 > 205.188.209.171 - - [21/Jan/2002:16:56:20 -0500] "GET /dmb/ HTTP/1.0" 200 0 > 207.159.184.101 - - [21/Jan/2002:17:29:09 -0500] "GET / HTTP/1.1" 200 3848 > 207.159.184.101 - - [21/Jan/2002:17:29:09 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.190.154 - - [21/Jan/2002:17:48:47 -0500] "GET / HTTP/1.1" 200 3848 > 207.159.190.154 - - [21/Jan/2002:17:48:47 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.190.154 - - [21/Jan/2002:17:49:10 -0500] "GET /dmb/ HTTP/1.1" 200 0 > 207.159.190.154 - - [21/Jan/2002:17:52:37 -0500] "GET / HTTP/1.1" 304 - > 207.159.190.154 - - [21/Jan/2002:17:52:44 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 > 207.159.185.198 - - [22/Jan/2002:12:04:24 -0500] "GET / HTTP/1.1" 200 4131 > 207.159.185.198 - - [22/Jan/2002:12:04:24 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.185.198 - - [22/Jan/2002:12:04:53 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 > 207.159.188.168 - - [22/Jan/2002:12:33:56 -0500] "GET / HTTP/1.1" 200 4131 > 207.159.188.168 - - [22/Jan/2002:12:33:57 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.188.168 - - [22/Jan/2002:12:34:23 -0500] "GET /playlist.html HTTP/1.1" 200 21864 > 207.159.188.168 - - [22/Jan/2002:12:34:23 -0500] "GET /null HTTP/1.1" 404 284 > 207.159.182.24 - - [22/Jan/2002:14:18:44 -0500] "GET / HTTP/1.1" 200 4131 > 207.159.182.24 - - [22/Jan/2002:14:18:47 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.182.24 - - [22/Jan/2002:14:19:38 -0500] "GET /null HTTP/1.1" 404 284 > 207.159.182.24 - - [22/Jan/2002:14:19:38 -0500] "GET /playlistnew.html HTTP/1.1" 200 113637 > 207.159.186.206 - - [23/Jan/2002:01:54:45 -0500] "GET / HTTP/1.1" 200 4309 > 207.159.186.206 - - [23/Jan/2002:01:54:48 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.185.221 - - [23/Jan/2002:10:07:37 -0500] "GET / HTTP/1.1" 200 4309 > 207.159.185.221 - - [23/Jan/2002:10:07:38 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.185.221 - - [23/Jan/2002:13:56:46 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 18044 > 207.12.170.187 - - [23/Jan/2002:16:04:08 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.12.170.187 - - [23/Jan/2002:16:04:09 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.12.170.187 - - [23/Jan/2002:16:04:09 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.12.170.187 - - [23/Jan/2002:16:04:10 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.12.170.187 - - [23/Jan/2002:16:04:10 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.12.170.187 - - [23/Jan/2002:16:04:11 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.12.170.187 - - [23/Jan/2002:16:04:12 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.12.170.187 - - [23/Jan/2002:16:04:13 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.12.170.187 - - [23/Jan/2002:16:04:14 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.12.170.187 - - [23/Jan/2002:16:04:15 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.12.170.187 - - [23/Jan/2002:16:04:16 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.12.170.187 - - [23/Jan/2002:16:04:19 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.12.170.187 - - [23/Jan/2002:16:04:20 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.12.170.187 - - [23/Jan/2002:16:04:20 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.12.170.187 - - [23/Jan/2002:16:04:21 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.12.170.187 - - [23/Jan/2002:16:04:22 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.79.223.201 - - [25/Jan/2002:00:04:32 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.79.223.201 - - [25/Jan/2002:00:04:33 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.79.223.201 - - [25/Jan/2002:00:04:34 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.79.223.201 - - [25/Jan/2002:00:04:38 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.79.223.201 - - [25/Jan/2002:00:04:38 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.79.223.201 - - [25/Jan/2002:00:04:39 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.79.223.201 - - [25/Jan/2002:00:04:39 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.79.223.201 - - [25/Jan/2002:00:04:40 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.79.223.201 - - [25/Jan/2002:00:04:44 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.79.223.201 - - [25/Jan/2002:00:04:44 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.79.223.201 - - [25/Jan/2002:00:04:45 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.79.223.201 - - [25/Jan/2002:00:04:45 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.79.223.201 - - [25/Jan/2002:00:04:46 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.79.223.201 - - [25/Jan/2002:00:04:46 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.79.223.201 - - [25/Jan/2002:00:04:47 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.79.223.201 - - [25/Jan/2002:00:04:48 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 172.136.154.122 - - [25/Jan/2002:07:03:39 -0500] "GET / HTTP/1.1" 200 3908 > 172.136.154.122 - - [25/Jan/2002:07:04:02 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 172.136.154.122 - - [25/Jan/2002:07:05:48 -0500] "GET /climb/climbpic.html HTTP/1.1" 200 1214 > 172.136.154.122 - - [25/Jan/2002:07:06:03 -0500] "GET /pic/climb-web/DiamondSunrise.jpg HTTP/1.1" 200 47405 > 172.136.154.122 - - [25/Jan/2002:07:06:14 -0500] "GET /pic/climb-web/ElMatadorJam.jpg HTTP/1.1" 200 44299 > 172.136.154.122 - - [25/Jan/2002:07:06:19 -0500] "GET /pic/climb-web/ElMatadorLead.jpg HTTP/1.1" 200 16384 > 172.136.154.122 - - [25/Jan/2002:07:06:53 -0500] "GET /pass.html HTTP/1.1" 200 541 > 207.69.105.152 - - [25/Jan/2002:08:43:41 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.69.105.152 - - [25/Jan/2002:08:43:42 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.69.105.152 - - [25/Jan/2002:08:43:44 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.69.105.152 - - [25/Jan/2002:08:43:44 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.69.105.152 - - [25/Jan/2002:08:43:45 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.69.105.152 - - [25/Jan/2002:08:43:46 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.69.105.152 - - [25/Jan/2002:08:43:46 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.69.105.152 - - [25/Jan/2002:08:43:47 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.69.105.152 - - [25/Jan/2002:08:43:47 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.69.105.152 - - [25/Jan/2002:08:43:49 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.69.105.152 - - [25/Jan/2002:08:43:53 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.69.105.152 - - [25/Jan/2002:08:43:53 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.69.105.152 - - [25/Jan/2002:08:43:54 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 172.150.104.186 - - [25/Jan/2002:17:00:57 -0500] "GET / HTTP/1.1" 200 3908 > 172.150.104.186 - - [25/Jan/2002:17:01:00 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 172.150.104.186 - - [25/Jan/2002:17:01:26 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 > 172.150.104.186 - - [25/Jan/2002:17:01:36 -0500] "GET /pass.html HTTP/1.1" 200 541 > 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.191.114.210 - - [26/Jan/2002:01:41:50 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.191.114.210 - - [26/Jan/2002:01:42:01 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.191.114.210 - - [26/Jan/2002:01:42:08 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 63.48.237.131 - - [26/Jan/2002:04:24:43 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 8192 > 63.48.237.131 - - [26/Jan/2002:04:26:05 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 18044 > 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.224.107.109 - - [26/Jan/2002:09:32:56 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.224.107.109 - - [26/Jan/2002:09:33:00 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.65.157.54 - - [27/Jan/2002:20:30:13 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.65.157.54 - - [27/Jan/2002:20:30:13 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 216.152.64.163 - - [27/Jan/2002:21:09:32 -0500] "CONNECT 216.152.64.23:7000 HTTP/1.0" 405 305 > 207.235.88.131 - - [27/Jan/2002:23:09:50 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 > 207.235.88.131 - - [27/Jan/2002:23:09:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 > 207.235.88.131 - - [27/Jan/2002:23:09:53 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.235.88.131 - - [27/Jan/2002:23:09:54 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 > 207.235.88.131 - - [27/Jan/2002:23:09:55 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.235.88.131 - - [27/Jan/2002:23:09:57 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.235.88.131 - - [27/Jan/2002:23:09:58 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 > 207.235.88.131 - - [27/Jan/2002:23:09:59 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 > 207.235.88.131 - - [27/Jan/2002:23:10:00 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.235.88.131 - - [27/Jan/2002:23:10:02 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.235.88.131 - - [27/Jan/2002:23:10:06 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.235.88.131 - - [27/Jan/2002:23:10:11 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 > 207.235.88.131 - - [27/Jan/2002:23:10:16 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.235.88.131 - - [27/Jan/2002:23:10:17 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 > 207.235.88.131 - - [27/Jan/2002:23:10:22 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.235.88.131 - - [27/Jan/2002:23:10:23 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 > 207.159.185.216 - - [28/Jan/2002:20:01:59 -0500] "GET / HTTP/1.1" 200 3908 > 207.159.185.216 - - [28/Jan/2002:20:01:59 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 > 207.159.185.216 - - [28/Jan/2002:20:02:05 -0500] "GET /pass.html HTTP/1.1" 200 541 > 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /checkarhsccxxxx.html HTTP/1.1" 200 170 > 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /scores.html HTTP/1.1" 200 3835 > 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 304 - > 207.159.185.216 - - [28/Jan/2002:20:02:21 -0500] "GET /time/9.23.00.html HTTP/1.1" 200 1687 > 207.159.185.216 - - [28/Jan/2002:20:02:21 -0500] "GET /time/pic/run.gif HTTP/1.1" 404 296 > > > --End of acess log--- > > -------------------------------------------------------------------- > mail2web - Check your email from the web at > http://mail2web.com/ . > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Jan. 29, 2002

apache help

by bryon3245＠netzero.com

I had some questions about apache. I am running apache on my dorm computer which is a win 98 and I started getting some strange log's. Sorry about it being so long but the stuff that scares is near the bottom. Could you also help me make it so users have to enter a password and username to acess certain sections of the site. Thanks everyone. Here are the log's ---Start of acess long--- 207.159.186.214 - - [21/Jan/2002:13:37:39 -0500] "GET / HTTP/1.1" 200 3848 207.159.186.214 - - [21/Jan/2002:13:37:39 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.186.214 - - [21/Jan/2002:13:37:55 -0500] "GET /westfield/index.html HTTP/1.1" 200 25 207.159.186.214 - - [21/Jan/2002:13:37:58 -0500] "GET /pass.html HTTP/1.1" 200 541 207.159.186.214 - - [21/Jan/2002:13:38:02 -0500] "GET /playlistnew.html HTTP/1.1" 200 113637 207.159.186.214 - - [21/Jan/2002:13:38:02 -0500] "GET /null HTTP/1.1" 404 284 205.188.209.137 - - [21/Jan/2002:16:55:03 -0500] "GET / HTTP/1.0" 200 3848 205.188.209.103 - - [21/Jan/2002:16:55:06 -0500] "GET /pic/coolrun.GIF HTTP/1.0" 200 35654 205.188.209.171 - - [21/Jan/2002:16:55:39 -0500] "GET /playlist.html HTTP/1.0" 200 21864 205.188.209.107 - - [21/Jan/2002:16:55:42 -0500] "GET /null HTTP/1.0" 404 272 205.188.209.171 - - [21/Jan/2002:16:56:20 -0500] "GET /dmb/ HTTP/1.0" 200 0 207.159.184.101 - - [21/Jan/2002:17:29:09 -0500] "GET / HTTP/1.1" 200 3848 207.159.184.101 - - [21/Jan/2002:17:29:09 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.190.154 - - [21/Jan/2002:17:48:47 -0500] "GET / HTTP/1.1" 200 3848 207.159.190.154 - - [21/Jan/2002:17:48:47 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.190.154 - - [21/Jan/2002:17:49:10 -0500] "GET /dmb/ HTTP/1.1" 200 0 207.159.190.154 - - [21/Jan/2002:17:52:37 -0500] "GET / HTTP/1.1" 304 - 207.159.190.154 - - [21/Jan/2002:17:52:44 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 207.159.185.198 - - [22/Jan/2002:12:04:24 -0500] "GET / HTTP/1.1" 200 4131 207.159.185.198 - - [22/Jan/2002:12:04:24 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.198 - - [22/Jan/2002:12:04:53 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 207.159.188.168 - - [22/Jan/2002:12:33:56 -0500] "GET / HTTP/1.1" 200 4131 207.159.188.168 - - [22/Jan/2002:12:33:57 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.188.168 - - [22/Jan/2002:12:34:23 -0500] "GET /playlist.html HTTP/1.1" 200 21864 207.159.188.168 - - [22/Jan/2002:12:34:23 -0500] "GET /null HTTP/1.1" 404 284 207.159.182.24 - - [22/Jan/2002:14:18:44 -0500] "GET / HTTP/1.1" 200 4131 207.159.182.24 - - [22/Jan/2002:14:18:47 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.182.24 - - [22/Jan/2002:14:19:38 -0500] "GET /null HTTP/1.1" 404 284 207.159.182.24 - - [22/Jan/2002:14:19:38 -0500] "GET /playlistnew.html HTTP/1.1" 200 113637 207.159.186.206 - - [23/Jan/2002:01:54:45 -0500] "GET / HTTP/1.1" 200 4309 207.159.186.206 - - [23/Jan/2002:01:54:48 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.221 - - [23/Jan/2002:10:07:37 -0500] "GET / HTTP/1.1" 200 4309 207.159.185.221 - - [23/Jan/2002:10:07:38 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.221 - - [23/Jan/2002:13:56:46 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 18044 207.12.170.187 - - [23/Jan/2002:16:04:08 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.12.170.187 - - [23/Jan/2002:16:04:09 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.12.170.187 - - [23/Jan/2002:16:04:09 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.12.170.187 - - [23/Jan/2002:16:04:10 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.12.170.187 - - [23/Jan/2002:16:04:10 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.12.170.187 - - [23/Jan/2002:16:04:11 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.12.170.187 - - [23/Jan/2002:16:04:12 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.12.170.187 - - [23/Jan/2002:16:04:13 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.12.170.187 - - [23/Jan/2002:16:04:14 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:15 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:16 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:19 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:20 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.12.170.187 - - [23/Jan/2002:16:04:20 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.12.170.187 - - [23/Jan/2002:16:04:21 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.12.170.187 - - [23/Jan/2002:16:04:22 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.79.223.201 - - [25/Jan/2002:00:04:32 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.79.223.201 - - [25/Jan/2002:00:04:33 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.79.223.201 - - [25/Jan/2002:00:04:34 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.79.223.201 - - [25/Jan/2002:00:04:38 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.79.223.201 - - [25/Jan/2002:00:04:38 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.79.223.201 - - [25/Jan/2002:00:04:39 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.79.223.201 - - [25/Jan/2002:00:04:39 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.79.223.201 - - [25/Jan/2002:00:04:40 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.79.223.201 - - [25/Jan/2002:00:04:44 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:44 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:45 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:45 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:46 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.79.223.201 - - [25/Jan/2002:00:04:46 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.79.223.201 - - [25/Jan/2002:00:04:47 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.79.223.201 - - [25/Jan/2002:00:04:48 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 172.136.154.122 - - [25/Jan/2002:07:03:39 -0500] "GET / HTTP/1.1" 200 3908 172.136.154.122 - - [25/Jan/2002:07:04:02 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 172.136.154.122 - - [25/Jan/2002:07:05:48 -0500] "GET /climb/climbpic.html HTTP/1.1" 200 1214 172.136.154.122 - - [25/Jan/2002:07:06:03 -0500] "GET /pic/climb-web/DiamondSunrise.jpg HTTP/1.1" 200 47405 172.136.154.122 - - [25/Jan/2002:07:06:14 -0500] "GET /pic/climb-web/ElMatadorJam.jpg HTTP/1.1" 200 44299 172.136.154.122 - - [25/Jan/2002:07:06:19 -0500] "GET /pic/climb-web/ElMatadorLead.jpg HTTP/1.1" 200 16384 172.136.154.122 - - [25/Jan/2002:07:06:53 -0500] "GET /pass.html HTTP/1.1" 200 541 207.69.105.152 - - [25/Jan/2002:08:43:41 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.69.105.152 - - [25/Jan/2002:08:43:42 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.69.105.152 - - [25/Jan/2002:08:43:44 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.69.105.152 - - [25/Jan/2002:08:43:44 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.69.105.152 - - [25/Jan/2002:08:43:45 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.69.105.152 - - [25/Jan/2002:08:43:46 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.69.105.152 - - [25/Jan/2002:08:43:46 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.69.105.152 - - [25/Jan/2002:08:43:47 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.69.105.152 - - [25/Jan/2002:08:43:47 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:49 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.69.105.152 - - [25/Jan/2002:08:43:53 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.69.105.152 - - [25/Jan/2002:08:43:53 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.69.105.152 - - [25/Jan/2002:08:43:54 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 172.150.104.186 - - [25/Jan/2002:17:00:57 -0500] "GET / HTTP/1.1" 200 3908 172.150.104.186 - - [25/Jan/2002:17:01:00 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 172.150.104.186 - - [25/Jan/2002:17:01:26 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 172.150.104.186 - - [25/Jan/2002:17:01:36 -0500] "GET /pass.html HTTP/1.1" 200 541 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.191.114.210 - - [26/Jan/2002:01:41:50 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:42:01 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.191.114.210 - - [26/Jan/2002:01:42:08 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 63.48.237.131 - - [26/Jan/2002:04:24:43 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 8192 63.48.237.131 - - [26/Jan/2002:04:26:05 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 18044 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:56 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.224.107.109 - - [26/Jan/2002:09:33:00 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.65.157.54 - - [27/Jan/2002:20:30:13 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.65.157.54 - - [27/Jan/2002:20:30:13 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 216.152.64.163 - - [27/Jan/2002:21:09:32 -0500] "CONNECT 216.152.64.23:7000 HTTP/1.0" 405 305 207.235.88.131 - - [27/Jan/2002:23:09:50 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.235.88.131 - - [27/Jan/2002:23:09:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.235.88.131 - - [27/Jan/2002:23:09:53 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.235.88.131 - - [27/Jan/2002:23:09:54 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.235.88.131 - - [27/Jan/2002:23:09:55 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.235.88.131 - - [27/Jan/2002:23:09:57 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.235.88.131 - - [27/Jan/2002:23:09:58 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.235.88.131 - - [27/Jan/2002:23:09:59 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.235.88.131 - - [27/Jan/2002:23:10:00 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:02 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:06 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:11 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:16 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.235.88.131 - - [27/Jan/2002:23:10:17 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.235.88.131 - - [27/Jan/2002:23:10:22 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.235.88.131 - - [27/Jan/2002:23:10:23 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.159.185.216 - - [28/Jan/2002:20:01:59 -0500] "GET / HTTP/1.1" 200 3908 207.159.185.216 - - [28/Jan/2002:20:01:59 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.216 - - [28/Jan/2002:20:02:05 -0500] "GET /pass.html HTTP/1.1" 200 541 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /checkarhsccxxxx.html HTTP/1.1" 200 170 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /scores.html HTTP/1.1" 200 3835 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 304 - 207.159.185.216 - - [28/Jan/2002:20:02:21 -0500] "GET /time/9.23.00.html HTTP/1.1" 200 1687 207.159.185.216 - - [28/Jan/2002:20:02:21 -0500] "GET /time/pic/run.gif HTTP/1.1" 404 296 --End of acess log--- -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

Jan. 29, 2002

RE: [Wlug] apache help

by Keller, Tim

You've got nothing to worry about (unless your running an unpatched version of IIS) That's just CODE */Nimda/[insert some other hilariously obvious security hole] attack on IIS... Tim. -----Original Message----- From: bryon3245(a)netzero.com [mailto:bryon3245@netzero.com] Sent: Tuesday, January 29, 2002 14:36 PM To: wlug(a)mail.wlug.org Subject: [Wlug] apache help I had some questions about apache. I am running apache on my dorm computer which is a win 98 and I started getting some strange log's. Sorry about it being so long but the stuff that scares is near the bottom. Could you also help me make it so users have to enter a password and username to acess certain sections of the site. Thanks everyone. Here are the log's ---Start of acess long--- 207.159.186.214 - - [21/Jan/2002:13:37:39 -0500] "GET / HTTP/1.1" 200 3848 207.159.186.214 - - [21/Jan/2002:13:37:39 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.186.214 - - [21/Jan/2002:13:37:55 -0500] "GET /westfield/index.html HTTP/1.1" 200 25 207.159.186.214 - - [21/Jan/2002:13:37:58 -0500] "GET /pass.html HTTP/1.1" 200 541 207.159.186.214 - - [21/Jan/2002:13:38:02 -0500] "GET /playlistnew.html HTTP/1.1" 200 113637 207.159.186.214 - - [21/Jan/2002:13:38:02 -0500] "GET /null HTTP/1.1" 404 284 205.188.209.137 - - [21/Jan/2002:16:55:03 -0500] "GET / HTTP/1.0" 200 3848 205.188.209.103 - - [21/Jan/2002:16:55:06 -0500] "GET /pic/coolrun.GIF HTTP/1.0" 200 35654 205.188.209.171 - - [21/Jan/2002:16:55:39 -0500] "GET /playlist.html HTTP/1.0" 200 21864 205.188.209.107 - - [21/Jan/2002:16:55:42 -0500] "GET /null HTTP/1.0" 404 272 205.188.209.171 - - [21/Jan/2002:16:56:20 -0500] "GET /dmb/ HTTP/1.0" 200 0 207.159.184.101 - - [21/Jan/2002:17:29:09 -0500] "GET / HTTP/1.1" 200 3848 207.159.184.101 - - [21/Jan/2002:17:29:09 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.190.154 - - [21/Jan/2002:17:48:47 -0500] "GET / HTTP/1.1" 200 3848 207.159.190.154 - - [21/Jan/2002:17:48:47 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.190.154 - - [21/Jan/2002:17:49:10 -0500] "GET /dmb/ HTTP/1.1" 200 0 207.159.190.154 - - [21/Jan/2002:17:52:37 -0500] "GET / HTTP/1.1" 304 - 207.159.190.154 - - [21/Jan/2002:17:52:44 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 207.159.185.198 - - [22/Jan/2002:12:04:24 -0500] "GET / HTTP/1.1" 200 4131 207.159.185.198 - - [22/Jan/2002:12:04:24 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.198 - - [22/Jan/2002:12:04:53 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 207.159.188.168 - - [22/Jan/2002:12:33:56 -0500] "GET / HTTP/1.1" 200 4131 207.159.188.168 - - [22/Jan/2002:12:33:57 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.188.168 - - [22/Jan/2002:12:34:23 -0500] "GET /playlist.html HTTP/1.1" 200 21864 207.159.188.168 - - [22/Jan/2002:12:34:23 -0500] "GET /null HTTP/1.1" 404 284 207.159.182.24 - - [22/Jan/2002:14:18:44 -0500] "GET / HTTP/1.1" 200 4131 207.159.182.24 - - [22/Jan/2002:14:18:47 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.182.24 - - [22/Jan/2002:14:19:38 -0500] "GET /null HTTP/1.1" 404 284 207.159.182.24 - - [22/Jan/2002:14:19:38 -0500] "GET /playlistnew.html HTTP/1.1" 200 113637 207.159.186.206 - - [23/Jan/2002:01:54:45 -0500] "GET / HTTP/1.1" 200 4309 207.159.186.206 - - [23/Jan/2002:01:54:48 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.221 - - [23/Jan/2002:10:07:37 -0500] "GET / HTTP/1.1" 200 4309 207.159.185.221 - - [23/Jan/2002:10:07:38 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.221 - - [23/Jan/2002:13:56:46 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 18044 207.12.170.187 - - [23/Jan/2002:16:04:08 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.12.170.187 - - [23/Jan/2002:16:04:09 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.12.170.187 - - [23/Jan/2002:16:04:09 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.12.170.187 - - [23/Jan/2002:16:04:10 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.12.170.187 - - [23/Jan/2002:16:04:10 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.12.170.187 - - [23/Jan/2002:16:04:11 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.12.170.187 - - [23/Jan/2002:16:04:12 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.12.170.187 - - [23/Jan/2002:16:04:13 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.12.170.187 - - [23/Jan/2002:16:04:14 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:15 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:16 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:19 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.12.170.187 - - [23/Jan/2002:16:04:20 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.12.170.187 - - [23/Jan/2002:16:04:20 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.12.170.187 - - [23/Jan/2002:16:04:21 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.12.170.187 - - [23/Jan/2002:16:04:22 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.79.223.201 - - [25/Jan/2002:00:04:32 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.79.223.201 - - [25/Jan/2002:00:04:33 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.79.223.201 - - [25/Jan/2002:00:04:34 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.79.223.201 - - [25/Jan/2002:00:04:38 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.79.223.201 - - [25/Jan/2002:00:04:38 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.79.223.201 - - [25/Jan/2002:00:04:39 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.79.223.201 - - [25/Jan/2002:00:04:39 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.79.223.201 - - [25/Jan/2002:00:04:40 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.79.223.201 - - [25/Jan/2002:00:04:44 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:44 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:45 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:45 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.79.223.201 - - [25/Jan/2002:00:04:46 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.79.223.201 - - [25/Jan/2002:00:04:46 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.79.223.201 - - [25/Jan/2002:00:04:47 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.79.223.201 - - [25/Jan/2002:00:04:48 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 172.136.154.122 - - [25/Jan/2002:07:03:39 -0500] "GET / HTTP/1.1" 200 3908 172.136.154.122 - - [25/Jan/2002:07:04:02 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 172.136.154.122 - - [25/Jan/2002:07:05:48 -0500] "GET /climb/climbpic.html HTTP/1.1" 200 1214 172.136.154.122 - - [25/Jan/2002:07:06:03 -0500] "GET /pic/climb-web/DiamondSunrise.jpg HTTP/1.1" 200 47405 172.136.154.122 - - [25/Jan/2002:07:06:14 -0500] "GET /pic/climb-web/ElMatadorJam.jpg HTTP/1.1" 200 44299 172.136.154.122 - - [25/Jan/2002:07:06:19 -0500] "GET /pic/climb-web/ElMatadorLead.jpg HTTP/1.1" 200 16384 172.136.154.122 - - [25/Jan/2002:07:06:53 -0500] "GET /pass.html HTTP/1.1" 200 541 207.69.105.152 - - [25/Jan/2002:08:43:41 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.69.105.152 - - [25/Jan/2002:08:43:42 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.69.105.152 - - [25/Jan/2002:08:43:44 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.69.105.152 - - [25/Jan/2002:08:43:44 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.69.105.152 - - [25/Jan/2002:08:43:45 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.69.105.152 - - [25/Jan/2002:08:43:46 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.69.105.152 - - [25/Jan/2002:08:43:46 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.69.105.152 - - [25/Jan/2002:08:43:47 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.69.105.152 - - [25/Jan/2002:08:43:47 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:48 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.69.105.152 - - [25/Jan/2002:08:43:49 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.69.105.152 - - [25/Jan/2002:08:43:53 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.69.105.152 - - [25/Jan/2002:08:43:53 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.69.105.152 - - [25/Jan/2002:08:43:54 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 172.150.104.186 - - [25/Jan/2002:17:00:57 -0500] "GET / HTTP/1.1" 200 3908 172.150.104.186 - - [25/Jan/2002:17:01:00 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 172.150.104.186 - - [25/Jan/2002:17:01:26 -0500] "GET /westfield/index.html HTTP/1.1" 200 230 172.150.104.186 - - [25/Jan/2002:17:01:36 -0500] "GET /pass.html HTTP/1.1" 200 541 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.127.214.82 - - [25/Jan/2002:17:53:17 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:18 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.127.214.82 - - [25/Jan/2002:17:53:19 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.191.114.210 - - [26/Jan/2002:01:41:50 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.191.114.210 - - [26/Jan/2002:01:41:51 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:41:52 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:42:01 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.191.114.210 - - [26/Jan/2002:01:42:02 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.191.114.210 - - [26/Jan/2002:01:42:08 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 63.48.237.131 - - [26/Jan/2002:04:24:43 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 8192 63.48.237.131 - - [26/Jan/2002:04:26:05 -0500] "GET /ebay/dict.jpg HTTP/1.1" 200 18044 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.224.107.109 - - [26/Jan/2002:09:32:51 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:52 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:56 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.224.107.109 - - [26/Jan/2002:09:32:59 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.224.107.109 - - [26/Jan/2002:09:33:00 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.65.157.54 - - [27/Jan/2002:20:30:13 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.65.157.54 - - [27/Jan/2002:20:30:13 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.65.157.54 - - [27/Jan/2002:20:30:14 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:15 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.65.157.54 - - [27/Jan/2002:20:30:16 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.65.157.54 - - [27/Jan/2002:20:30:17 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 216.152.64.163 - - [27/Jan/2002:21:09:32 -0500] "CONNECT 216.152.64.23:7000 HTTP/1.0" 405 305 207.235.88.131 - - [27/Jan/2002:23:09:50 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 284 207.235.88.131 - - [27/Jan/2002:23:09:51 -0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 282 207.235.88.131 - - [27/Jan/2002:23:09:53 -0500] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.235.88.131 - - [27/Jan/2002:23:09:54 -0500] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 292 207.235.88.131 - - [27/Jan/2002:23:09:55 -0500] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.235.88.131 - - [27/Jan/2002:23:09:57 -0500] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.235.88.131 - - [27/Jan/2002:23:09:58 -0500] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 323 207.235.88.131 - - [27/Jan/2002:23:09:59 -0500] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy stem32/cmd.exe?/c+dir HTTP/1.0" 404 339 207.235.88.131 - - [27/Jan/2002:23:10:00 -0500] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:02 -0500] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:06 -0500] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:11 -0500] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 305 207.235.88.131 - - [27/Jan/2002:23:10:16 -0500] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.235.88.131 - - [27/Jan/2002:23:10:17 -0500] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 289 207.235.88.131 - - [27/Jan/2002:23:10:22 -0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.235.88.131 - - [27/Jan/2002:23:10:23 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 306 207.159.185.216 - - [28/Jan/2002:20:01:59 -0500] "GET / HTTP/1.1" 200 3908 207.159.185.216 - - [28/Jan/2002:20:01:59 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 200 35654 207.159.185.216 - - [28/Jan/2002:20:02:05 -0500] "GET /pass.html HTTP/1.1" 200 541 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /checkarhsccxxxx.html HTTP/1.1" 200 170 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /scores.html HTTP/1.1" 200 3835 207.159.185.216 - - [28/Jan/2002:20:02:16 -0500] "GET /pic/coolrun.GIF HTTP/1.1" 304 - 207.159.185.216 - - [28/Jan/2002:20:02:21 -0500] "GET /time/9.23.00.html HTTP/1.1" 200 1687 207.159.185.216 - - [28/Jan/2002:20:02:21 -0500] "GET /time/pic/run.gif HTTP/1.1" 404 296 --End of acess log--- -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ . _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Jan. 29, 2002

Re: [Wlug] Cue Cats

by William Smith

On Mon, 28 Jan 2002, Adam Keck wrote: AK>Anyone play with these things (and associated Perl/php tools)? I just got AK>4 of 'em from a local Radio Shack for free. My coworkers and I are about AK>to attempt to setup a backup tape tracking system with them. I was AK>wondering if anyone had any comments on them. i've played with them. there were a few articles on Slashdot (slashdot.org) that led me to several "tools"... i have a couple Perl scripts that take the code and rip out the real information. (if you want them, they are free for the taking, as far as i know. drop me a line.) I also found a website where the scan would be decrypted online... all-told, it's worth what you pay for it. unless you feel like writing something that takes the output from something like those Perl scripts and does something useful with it, the CueCat is "just a toy"... Digital Convergence didn't have any plans for putting out anything for the Linux crowd last i checked. -- William Smith wsmith(a)chezsmith.com Fall River, MA http://www.chezsmith.com My resume is online at http://www.chezsmith.com/resume.html

Jan. 29, 2002

Re: [Wlug] Cue Cats

by Andy Stewart

On Monday 28 January 2002 03:07 pm, you wrote: > Anyone play with these things (and associated Perl/php tools)? I just > got 4 of 'em from a local Radio Shack for free. My coworkers and I are > about to attempt to setup a backup tape tracking system with them. I > was wondering if anyone had any comments on them. > > -Adam I played with mine briefly. It seemed to be OK considering that it was free. If I recall correctly, there is a GNU program for creating your own barcodes, and several of those were readable by the cue cat. I found physically larger bar codes easier for the cue cat to read, but again, your mileage may vary. Mine did seem a little sensitive to the speed of swiping the barcode. I suspect that if the cue cats were hung too low on the christmas tree, that the real cats would bat them around with their paws and break them. :-) Later, Andy -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Jan. 29, 2002

FS: Various EISA cards

by Phillip G Deneault

They're old, and if noone buys them, I'm just going to toss them. Last I knew all these cards were working properly. I have no drivers, .cfgs, manuals, or cables with them... however I found all of these very easily on the web. I'm making a push to eliminate all my EISA equipment. 5 bucks a card, any card, OBO. All sales final. No returns or refunds, I want this stuff gone. Make sure this stuff runs on the platform your going to run before buying. I ran most of them either under x386 Linux 2.2.x, Alpha OpenVMS, or Alpha Digital UNIX. I believe all have drivers for WinNT 4.0 too, if your into that sort of thing. -Model EILA8215 Intel EtherExpress32 LAN Adapter(AUI/BNC combo) -DTC-3292 SCSI controler(SCSI-2 narrow) -two 3com 3c597-TX NIC(10/half, 10/full, 100/half, no 100/full) -Adaptec AHA-2740A(FW SCSI-2) -Adaptec AHA-1740(SCSI-2) -DEC Etherworks DE422(TP/BNC combo) Reply if interested Phil -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Phil Deneault "We work in the dark, We do what we can, deneault(a)wpi.edu We give what we have. Our doubt is our passion, WPI NetOps and our passion is our task. The rest is the OpenVMS Guy maddness of art." - Henry James -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Jan. 29, 2002