[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <3F219318.5060805@bcgreen.com>
Date: Fri, 25 Jul 2003 13:29:12 -0700
From: Stephen Samuel <samuel@...reen.com>
To: bugtraq@...urityfocus.com
Subject: scan.sygate.com. over-scanning?
On a lark, I went to the sygate site, and asked them to do a
port scan. From all I can see on the site, they seem to ONLY
claim to do a port scan, but a while later, I got a note from
my system about them doing a good bit more than just scanning
for an open port 80.
http://scan.sygatetech.com/
Is it just me, or are these kinds of vulnerability scans far
beyond what they were purporting to do? Has anybody seen the
sygate site warn them of vulnerability to any of these scans?
______________________________________
from apache access log:
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "HEAD / HTTP/1.0" 200 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "GET /cfdocs/ HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "GET /cfide/Administrator/startstop.html HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "GET /cfappman/index.cfm HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "GET /cgi-bin/ HTTP/1.0" 403 1056 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "GET /cgi-bin/dbmlparser.exe HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/webdist.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/handler HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/wrap HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/pfdisplay.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /cgi-bin/MachineInfo HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /mall_log_files/order.log HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /PDG_Cart/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /quikstore.cfg HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /orders/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /Admin_files/order.log HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /bigconf.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgi-local/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /htbin/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgibin/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgis/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgi/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgi-bin/flexform.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/flexform HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/LWGate HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/lwgate HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/LWGate.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/lwgate.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/perlshop.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/download.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/bnbform.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/bnbform HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/rwwwshell.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/nlog-smb.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/wwwboard/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /wwwboard/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /cgi-bin/wwwboard.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /logs/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /cgi-bin/cachemgr.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
207.33.111.35 - - [25/Jul/2003:11:18:59 -0700] "HEAD /.htaccess HTTP/1.0" 403 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
207.33.111.35 - - [25/Jul/2003:11:18:59 -0700] "HEAD /cgi-bin/.htaccess HTTP/1.0" 403 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /.wwwacl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /cgi-bin/.wwwacl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /docs/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
207.33.111.35 - - [25/Jul/2003:11:19:00 -0700] "HEAD /~root/ HTTP/1.0" 403 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /ws_ftp.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /cgi-bin/ws_ftp.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /WS_FTP.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /cgi-bin/WS_FTP.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/ax-admin.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/axs.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/responder.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/w3-sql HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /search97.vts HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/unlg1.1 HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/test-cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/campas HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/www-sql HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/w3-msql HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/view-source HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/add_ftp.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/whois_raw.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /webcart/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /webcart-lite/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/Count.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/count.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/nph-test-cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/webgais HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/websendmail HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/bb-hist.sh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /bb-dnbd/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/faxsurvey HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/htmlscript HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/aglimpse HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/man.sh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/architext_query.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/filemail.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/filemail HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/jj HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/info2www HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/nph-publish HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/AnyForm2 HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/AnyForm HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/textcounter.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/wwwthreads/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /wwwthreads/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/classified.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/classifieds.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/classifieds HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/survey.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/survey HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/environ.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/session/adminlogin HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/finger HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/finger.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/finger.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/maillist.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/sh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/bash HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/ash HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/tcsh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/ksh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/csh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/rksh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/rsh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/zsh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/perl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/test-cgi.tcl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /php/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /mlog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:10 -0700] "HEAD /cgi-bin/mlog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:10 -0700] "HEAD /mylog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:10 -0700] "HEAD /cgi-bin/mylog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:21:57 -0700] "HEAD / HTTP/1.0" 200 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
==================================================
==================================================
attack from machine name:: scan.sygate.com. ip:: 207.33.111.35
Powered by blists - more mailing lists