Oh, and whoever was 66.229.23.159 on 7/1/02 (and happens to be using a broadband connection provided by AT&T and lives in the Los Angeles area), you're infected with code red. Either that, or you aren't capable of using nmap.
Code: Select all
[Mon Jul 1 18:07:54 2002] [error] [client 66.229.23.159] File does not exist: xxx/scripts/root.exe
[Mon Jul 1 18:07:54 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/MSADC/root.exe
[Mon Jul 1 18:07:55 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/c/winnt/system32/cmd.exe
[Mon Jul 1 18:07:55 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/d/winnt/system32/cmd.exe
[Mon Jul 1 18:07:55 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/scripts/..%5c../winnt/system32/cmd.exe
[Mon Jul 1 18:07:55 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Mon Jul 1 18:07:55 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Mon Jul 1 18:07:56 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe
[Mon Jul 1 18:07:56 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/scripts/..Á../winnt/system32/cmd.exe
[Mon Jul 1 18:07:56 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/scripts/..À¯../winnt/system32/cmd.exe
[Mon Jul 1 18:07:57 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/scripts/..Áœ../winnt/system32/cmd.exe
[Mon Jul 1 18:07:57 2002] [error] [client 66.229.23.159] File does not exist:xxx/htdocs/scripts/..%5c../winnt/system32/cmd.exe
[Mon Jul 1 18:07:57 2002] [error] [client 66.229.23.159] File does not exist: xxx/htdocs/scripts/..%2f../winnt/system32/cmd.exe