Thursday February 7, 2002

I threw together a perl script for better filtering and viewing of my server logs. What I found is a bunch of hackers out there trying to see if this is a windows machine they can crack:

/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir

And various other derivatives. It's like a little evil murmer under the general hubub of the internet, poking and prodding gollumlike to find something precious. Jeezum.

There's also a variety of spider/bots sniffing about:

  daypopbot/0.2
  Netprospector JavaCrawler
  Scooter-W3.1.2
  Googlebot/2.1 (+http://www.googlebot.com/bot.html)
  Slarp/0.1
  Openfind data gatherer, Openbot/3.0+(http://www.openfind.com.tw/robot.html)
  Cartographer 1.4
  BlogBot/1.1
  FAST-WebCrawler/3.3 (http://fast.no/support.php?c=faqs/crawler)
  larbin_2.*

I havn't heard of Larbin. It's a Linux based webcrawler and all of the traffic I'm getting from it is coming from France.

On closer inspection Cartographer may not be a bot, more of a browsing assistant the files away everything you've seen, evaluates it, and makes some nifty keen pictures.