PDA

Bekijk Volledige Versie : scan.sygate.com. over-scanning?


Stephen Samuel
31/07/03, 14:00
On a lark, I went to the sygate site, and asked them to do a
port scan. From all I can see on the site, they seem to ONLY
claim to do a port scan, but a while later, I got a note from
my system about them doing a good bit more than just scanning
for an open port 80.

http://scan.sygatetech.com/

Is it just me, or are these kinds of vulnerability scans far
beyond what they were purporting to do? Has anybody seen the
sygate site warn them of vulnerability to any of these scans?

______________________________________
from apache access log:

scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "HEAD / HTTP/1.0" 200 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "GET /cfdocs/ HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "GET /cfide/Administrator/startstop.html HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:53 -0700] "GET /cfappman/index.cfm HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "GET /cgi-bin/ HTTP/1.0" 403 1056 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "GET /cgi-bin/dbmlparser.exe HTTP/1.0" 404 1181 "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/webdist.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/handler HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/wrap HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:54 -0700] "HEAD /cgi-bin/pfdisplay.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /cgi-bin/MachineInfo HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /mall_log_files/order.log HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /PDG_Cart/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /quikstore.cfg HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /orders/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /Admin_files/order.log HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:55 -0700] "HEAD /bigconf.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgi-local/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /htbin/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgibin/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgis/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgi/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:56 -0700] "HEAD /cgi-bin/flexform.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/flexform HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/LWGate HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/lwgate HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/LWGate.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:57 -0700] "HEAD /cgi-bin/lwgate.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/perlshop.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/download.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/bnbform.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/bnbform HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/rwwwshell.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/nlog-smb.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:58 -0700] "HEAD /cgi-bin/wwwboard/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /wwwboard/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /cgi-bin/wwwboard.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /logs/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /cgi-bin/cachemgr.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
207.33.111.35 - - [25/Jul/2003:11:18:59 -0700] "HEAD /.htaccess HTTP/1.0" 403 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
207.33.111.35 - - [25/Jul/2003:11:18:59 -0700] "HEAD /cgi-bin/.htaccess HTTP/1.0" 403 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:18:59 -0700] "HEAD /.wwwacl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /cgi-bin/.wwwacl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /docs/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
207.33.111.35 - - [25/Jul/2003:11:19:00 -0700] "HEAD /~root/ HTTP/1.0" 403 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /ws_ftp.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /cgi-bin/ws_ftp.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /WS_FTP.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:00 -0700] "HEAD /cgi-bin/WS_FTP.ini HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/ax-admin.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/axs.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/responder.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/w3-sql HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /search97.vts HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/unlg1.1 HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:01 -0700] "HEAD /cgi-bin/test-cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/campas HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/www-sql HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/w3-msql HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/view-source HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/add_ftp.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /cgi-bin/whois_raw.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /webcart/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:02 -0700] "HEAD /webcart-lite/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/Count.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/count.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/nph-test-cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/webgais HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/websendmail HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /cgi-bin/bb-hist.sh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:03 -0700] "HEAD /bb-dnbd/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/faxsurvey HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/htmlscript HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/aglimpse HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/man.sh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/architext_query.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:04 -0700] "HEAD /cgi-bin/filemail.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/filemail HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/jj HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/info2www HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/nph-publish HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/AnyForm2 HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/AnyForm HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:05 -0700] "HEAD /cgi-bin/textcounter.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/wwwthreads/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /wwwthreads/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/classified.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/classifieds.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/classifieds HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/survey.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:06 -0700] "HEAD /cgi-bin/survey HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/environ.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/session/adminlogin HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/finger HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/finger.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/finger.cgi HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/maillist.pl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:07 -0700] "HEAD /cgi-bin/sh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/bash HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/ash HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/tcsh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/ksh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:08 -0700] "HEAD /cgi-bin/csh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/rksh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/rsh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/zsh HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/perl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /cgi-bin/test-cgi.tcl HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /php/ HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:09 -0700] "HEAD /mlog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:10 -0700] "HEAD /cgi-bin/mlog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:10 -0700] "HEAD /mylog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:19:10 -0700] "HEAD /cgi-bin/mylog.phtml HTTP/1.0" 404 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
scan.sygate.com - - [25/Jul/2003:11:21:57 -0700] "HEAD / HTTP/1.0" 200 - "http://66.183.186.234/" "Mozilla/4.7 [en] (Win95; U)"
==================================================
==================================================

attack from machine name:: scan.sygate.com. ip:: 207.33.111.35
H D Moore
31/07/03, 14:00
I requested a scan from them over a year ago. They ran a complete
vulnerability scan about five minutes after the port scan, followed by a
*second* vulnerability scan almost six hours later. Following the second
scan, there appeared to be some manual attempts by someone on their staff
to verify certain (fake) vulnerabilities found. The whole process was
bordering criminal, glad to see someone else noticed it...

-HD

On Friday 25 July 2003 03:29 pm, Stephen Samuel wrote:
> On a lark, I went to the sygate site, and asked them to do a
> port scan. From all I can see on the site, they seem to ONLY
> claim to do a port scan, but a while later, I got a note from
> my system about them doing a good bit more than just scanning
> for an open port 80.