OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Simon Hughes (systsecyahoo.com)
Date: Sat May 26 2001 - 21:24:41 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Could someone please tell me whats going on below,
    it is on an apache (x86) webservers log.


    ---- BEGIN LOG EXTRACT ----

    12.16.74.70 - - [20/May/2001:14:08:03
    +1000] "GET /file.zip HTTP/1.1" 206 139264
    24.141.140.191 - - [20/May/2001:14:09:26
    +1000] "GET /FTP.html HTTP/1.1" 200 5766
    21.164.7.69 - - [20/May/2001:14:29:44
    +1000] "GET /Storage/ HTTP/1.1" 200 444
    24.94.179.200 - - [20/May/2001:14:50:02
    +1000] "GET /FTP.html HTTP/1.1" 200 5846
                                                                                           
                                                                
    ;HndFBFNB fŎ[G1%
    tik:hJdVDQƢiЗ
    :O C(65%pїanԯ.?
    7w.ɾ틻ι`c,7?3
            弓kIHpJV։ ks
    -)q
    :1'hbQ[{
    3 yJMMsG*)~c[t;=;
    ,z|zGk<\2OVpnyoc¯:*~n^ЀA
    'rXtg5LWr8_X忊MCo
    Ȥ5rs5[q#+O$ɝ9zI
    +Y퓸 EWM7
    {FULC#EI_6Ҽ~)\
    Hx5Yyn/ľ|&(vj V
    {֣Qb<A>B) S͔2J;n
    JQu3f sr ˴~ʚ$9
    D27Dk
    )y y UssI$ Fq|' -
            HMƌɝq2σ [-
    eJ~Ƿ$ 2Jٽ$<'7l[
    jyr6|"Vqf.*
    >X̢n!y9:-Z{Ϋd0<
    jRH'h=n&4&3 ˰-
    HTA'VY"0}
    x[bUR~pB*%|mn =k}
    <<2FPzQ<MP11_'IK
    O)8\0c'WdhE
    KR t/7U^ڟ̨D/N睃
    CI׀]*dPAϟ%=lRЋ?ti']~
    ;>keh3).$n<F,X &PO<
    {TL15 HVeut޻>0sW 
            ,NItRa
    F'6Q]
    6H57AvAw 1V<G_R
    ɫ^oW=&ӭ+hJ]
    +rز&;]vV/
    JsW|)wec3f
    U͙HA05I]y,ٯ/:A]
    ڸ2u>:sYt#Q?n
    V 6=UJrv\,
    G%7 Sl%ׂ&~UsGaJ}
    ͼ_cTOR>g>(|N,_ngTcg
    Oe?O_җ$ \s6g
    E$钪_]Bm#z'fSz~wi
    &3;W'
    j<p.2 &2 *=jIѬszX
    -qh$S0PYxlo)Bek
            DT"*sZ2!T%
    j<W1Ԇ tz¯B՜0*N"B
    _dAS8,#JFof<F${
    g=߅`_W
    lɩpÐ޵?&4b5g'
    F/La`dh
    fwnk*7kT:QWzYȉ
    f0T0<>imDmV&EK˝/U!
    ͲJ*fp,ܺe NBH$IihmPV
    .2D15 3DLdj&R\TW]
    Y'dT2q$et̓2_g_vge$dR.
    U0q/hץzL TZɡl7cf
    8z ɚ)gLJB7ݩ=5
    {4\ ^嬞ή9cS;
    `۸#alzPҔ3PH}(%O`.
    e2&ћ$K'*: mD Ip8L(T.[]
    gUgu& (i!
    Td eKqY9 h`K0 &j
    K(M~<[ 'Lf_D
    ' qW턂,8qJO߈t)7^c//
    PYaR}R,%7!
    WegL74t8x87ۓMJS
    {/]kdjw)^ 4}-v?
    PBũѺZFz~= #274d.u
    5/mcccN{
     MIL}
    Ϟ
    cfp޲'5
    ^ڷUy
    =ԅd"62MmBG-ryrM*,%
    ;X<d9+|=`O!`F
    fו?'&wLk Us>5]bvHJ!
    Q&Pr`]N/En'$Lq
    xi"N,NR7k
    b`=OJFVT%#!P1r0%
    c7Y|04 (w7SԿDpPsavf-/!
    C;x[&9k }ꇠ銦U-;2}
    JUCjسd"gcz
    <ҊhӹP? %f2UɫS
    {uQ7<m֛:w^*}F:ǥpHJJZ8T*R
    XcbRA*f ,`dJN0'1un
    {kzR :h:bwcA>,ZgY =I;;Zo
    G
    hEv^#kղdB"n0QB
    IV\:ЪڞZqIeS>l]އTJ
    ŋE0<&D
    fEܵ2 p
            '|TWd+ݰ
    q;2#1[8!*9!$9P 3
    ,qJ|٨''ьJs$udFlw2Wݿ樆1
    ZgH
    eV)g7n2l0vGڌ,VmA6u
    (YYpnLb7ԟ(A;T&D6N&!
    BlJS7^P43}T$
    iMWN=R3 ݢ"9s
    n<)
    cc.kهfoO˕m5yqAiB?
    _ztПTN !
    +wK.rl,ꇂA_D+xHgfS!
    |q7QE bS1oU
            qTdmyCPBz"ZN"h
    -ꊥ~$Ld`{ A
    1ҵ'|՘,^xHN`Vp(]
    e5ybxyQQM%CXQo
    Y52fǞ/K)UxC4]T ?]la
    #oXX3H^'S~
    3y.^]MVr)r
    Zq>195.130.132.178 - -
    [24/May/2001:20:26:09
    +1000] "GET /Storage/Exploits/WinNT/sop-adm.txt
    HTTP/1.1" 200 6288

    ---- END LOG EXTRACT ----