Greig has claimed "famous scientists [he knows]" say heat can't propagate more than several km's through the earth's atmosphere, that France has "nothing like [the Massif Central]", that magma is "nowhere near [200 km]" from the surface of Pacific plates, and his exposition of radioactive decay on Sci.Env whereby he maintained for weeks everyone else's understandings and textbooks were wrong and his out-by-factor-of-10^10 calculation was correct (because he'd ignored significant daughter products, was using a 70s textbook that had incorrect decay rates and in any case used "simplified" decay sequences, and had confused 70s terminology being used by other posters for certain daughter products with some sound-alike from the Periodic Table), is now world-famous.
While Greig complains that other people are using 'net resources wastefully or inappropriately (and writes the occassional lying crank letter to anyone he thinks might listen), his own boss apparently doesn't mind Greig's own 9-5 posting profile.
For the full & annotated Greig (D) Ebeling output, see the relevant net.crank archives.
Typically
a
spate
of
these
requests
precede
(sic)
the
re-appearance
of
Greig
(D)
Ebeling
on
Aus.Politics
and/or
Sci.Environment
when
newspapers
headlines
require
him
to
re-introduce
his
ideas
on
the
"global
warming
myth",
1950's-style
nuclear
power,
waste-dumps,
the
comparative
safety
of
nuclear
fallout
(Greig
sports
a
large
bibliography
on
radiation
hormesis,
sometimes
posted
to
USENET),
and
anti-environmentalism
generally.
[Most
recent
'net
probing
by
Mr
Ebeling
appears
to
be
Sep,
2002].
crawl1.atext.com - - [25/Jun/1997:14:47:49 -1000] "GET /posts/Ebeling HTTP/1.0" 403 193 myriad.its.unimelb.EDU.AU - - [17/Jul/1997:13:57:08 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ebeling-query.html HTTP/1.0" 200 2295 myriad.its.unimelb.EDU.AU - - [17/Jul/1997:13:56:30 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ HTTP/1.0" 304 0 myriad.its.unimelb.EDU.AU - - [16/Jul/1997:16:44:18 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ HTTP/1.0" 200 8343 myriad.its.unimelb.EDU.AU - - [16/Jul/1997:16:42:49 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ HTTP/1.0" 200 8300 myriad.its.unimelb.EDU.AU - - [16/Jul/1997:16:41:37 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ HTTP/1.0" 200 8301 munkora.cs.mu.OZ.AU - - [17/Jul/1997:13:56:28 -1000] "GET /~khorsell/BOZO/Ebeling HTTP/1.0" 302 418 munkora.cs.mu.OZ.AU - - [16/Jul/1997:16:41:37 -1000] "GET /~khorsell/BOZO/Ebeling HTTP/1.0" 302 418 digger1.defence.gov.au - - [08/Jul/1997:15:00:02 -1000] "GET /%7Ekhorsell/posts/Ebeling/ HTTP/1.0" 200 7594 digger1.defence.gov.au - - [08/Jul/1997:15:00:00 -1000] "GET /%7Ekhorsell/posts/Ebeling HTTP/1.0" 302 419 d167-1.cpe.Sydney.aone.net.au - - [06/Jul/1997:20:11:41 -1000] "GET /%7Ekhorsell/posts/Ebeling/ HTTP/1.0" 304 0 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:11:06 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000001.raw HTTP/1.0" 200 1809 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:09:47 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000164.raw HTTP/1.0" 200 2732 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:09:16 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000165.raw HTTP/1.0" 200 1740 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:07:30 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000166.raw HTTP/1.0" 200 3482 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:06:44 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000167.raw HTTP/1.0" 200 1299 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:06:18 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000168.raw HTTP/1.0" 200 1268 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:03:53 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000169.raw HTTP/1.0" 200 4117 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:02:54 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000170.raw HTTP/1.0" 200 1316 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:02:33 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000171.raw HTTP/1.0" 200 1491 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:01:38 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000172.raw HTTP/1.0" 200 1624 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:16:00:21 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000173.raw HTTP/1.0" 200 1455 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:15:56:23 -1000] "GET /%7Ekhorsell/posts/Ebeling/ebeling-query.html HTTP/1.0" 200 2295 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:15:54:26 -1000] "GET /%7Ekhorsell/posts/Ebeling/Ebeling-dates.txt HTTP/1.0" 200 7321 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:15:53:25 -1000] "GET /%7Ekhorsell/posts/Ebeling/raw/0000000000.raw HTTP/1.0" 200 1648 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:15:51:56 -1000] "GET /%7Ekhorsell/posts/Ebeling/nuclear-truth.html HTTP/1.0" 200 13369 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:15:45:43 -1000] "GET /%7Ekhorsell/posts/Ebeling/ HTTP/1.0" 200 7594 d142-1.cpe.Sydney.aone.net.au - - [05/Jul/1997:15:45:42 -1000] "GET /%7Ekhorsell/posts/Ebeling HTTP/1.0" 302 419 murlibobo.cs.mu.OZ.AU - - [22/Aug/1997:18:31:40 -1000] "GET /BOZO//Ebeling/raw/0000000763.raw HTTP/1.0" 403 193 murlibobo.cs.mu.OZ.AU - - [22/Aug/1997:18:31:29 -1000] "GET /~khorsell/BOZO/Ebeling/raw/0000000763.raw HTTP/1.0" 200 3027 murlibobo.cs.mu.OZ.AU - - [22/Aug/1997:18:31:15 -1000] "GET /BOZO//Ebeling/raw/0000000763.raw HTTP/1.0" 403 193 murlibobo.cs.mu.OZ.AU - - [22/Aug/1997:18:29:37 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ebeling-query.html HTTP/1.0" 200 2295 murlibobo.cs.mu.OZ.AU - - [22/Aug/1997:18:29:29 -1000] "GET /~khorsell/BOZO/Ebeling HTTP/1.0" 302 418 murlibobo.cs.mu.OZ.AU - - [22/Aug/1997:18:29:29 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ HTTP/1.0" 200 8660 204.177.145.96 - - [17/Oct/1997:07:39:40 -1000] "GET /%7Ekhorsell/BOZO/Ebeling/ HTTP/1.0" 200 8661 204.177.145.96 - - [17/Oct/1997:07:39:39 -1000] "GET /~khorsell/BOZO/Ebeling HTTP/1.0" 302 418 1Cust71.tnt1.mel1.da.uu.net - - [21/Jul/2000:01:10:50 -1000] "GET /BOZO/get_BOZO.sh?Ebeling/ HTTP/1.1" 200 556 1Cust71.tnt1.mel1.da.uu.net - - [21/Jul/2000:01:10:49 -1000] "GET /BOZO/Ebeling/ HTTP/1.1" 302 372 129.78.64.5 - - [18/Sep/2000:17:13:09 +1100] "GET /~kym/BOZO/dates/Ebeling.dat HTTP/1.0" 200 6827 128.250.22.10 - - [18/Sep/2000:14:15:03 +1100] "GET /~kym/BOZO/dates/Ebeling.dat HTTP/1.0" 200 6827 128.250.22.10 - - [04/Sep/2000:18:35:25 +1100] "GET /~kym/BOZO/dates/Ebeling.dat HTTP/1.0" 200 6774 cr020r01.bos2.fastsearch.net - - [12/Nov/2000:11:22:01 -1000] "GET /BOZO/Ebeling/ HTTP/1.0" 302 372 platypus.panopticsearch.com - - [23/Dec/2000:23:27:03 -1000] "GET /BOZO/get_BOZO.sh?Ebeling/ HTTP/1.1" 200 501 platypus.panopticsearch.com - - [23/Dec/2000:19:41:26 -1000] "GET /BOZO/get_BOZO.sh?Ebeling/ HTTP/1.1" 200 501 platypus.panopticsearch.com - - [23/Dec/2000:19:41:26 -1000] "GET /BOZO/Ebeling/ HTTP/1.1" 302 372 crawler20.bos2.fast-search.net - - [16/Dec/2000:23:47:34 -1000] "GET /BOZO/Ebeling/ HTTP/1.0" 302 372 crawler20.bos2.fast-search.net - - [23/Jan/2001:02:15:56 -1000] "GET /BOZO/Ebeling/ HTTP/1.0" 302 372 tercel-bt.act.cmis.CSIRO.AU - - [20/Feb/2001:10:44:25 -1000] "GET /BOZO/get_BOZO.sh?Ebeling/ HTTP/1.1" 200 653 tercel-bt.act.cmis.CSIRO.AU - - [20/Feb/2001:08:53:09 -1000] "GET /BOZO/get_BOZO.sh?Ebeling/ HTTP/1.1" 200 653 tercel-bt.act.cmis.CSIRO.AU - - [20/Feb/2001:08:53:09 -1000] "GET /BOZO/Ebeling/ HTTP/1.1" 302 372 216.34.42.14 - - [21/Feb/2001:19:52:47 +1100] "GET /BOZO/Ebeling/ HTTP/1.1" 404 294 crawler20.bos2.fast-search.net - - [11/Mar/2001:10:59:45 -1000] "GET /BOZO/Ebeling/ HTTP/1.0" 302 355 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl I SUSPECT THE FOLLOWING .av.com *ARE* MR EBELING @WORK (note the unusual probing for "/bozo/ebeling" and "/eggsoft..." ;-) bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl 209.202.148.23 - - [12/Mar/2001:18:49:55 +1100] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 404 293 209.202.148.23 - - [11/Mar/2001:23:27:09 +1100] "GET /BOZO/Ebeling/ HTTP/1.0" 404 282 crawler20.bos2.fast-search.net - - [19/Apr/2001:21:31:56 -1000] "GET /BOZO/Ebeling/ HTTP/1.0" 302 355 207.31.249.209 - - [26/May/2001:07:03:09 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 2615 207.31.249.209 - - [26/May/2001:07:03:01 +1000] "GET /BOZO/Ebeling HTTP/1.1" 301 330 198.4.83.49 - - [11/May/2001:02:48:01 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 200 2615 198.4.83.49 - - [10/May/2001:07:26:33 +1000] "GET /BOZO/dates/ebeling.dat HTTP/1.0" 200 6706 ptr.wisenut.com - - [16/Jul/2001:14:31:28 +1000] "GET /BOZO/history/Ebeling/ HTTP/1.1" 200 9300 ptr.wisenut.com - - [16/Jul/2001:14:31:25 +1000] "GET /BOZO/history/Ebeling HTTP/1.1" 301 338 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl I SUSPECT THE FOLLOWING .av.com *ARE* MR EBELING @WORK (note the unusual probing for "/bozo/ebeling" and "/eggsoft..." ;-) bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl trek29.sv.av.com - - [14/Aug/2001:08:31:42 +1000] "GET /bozo/ebeling/ HTTP/1.0" 404 282 theta.turboflops.org - - [30/Aug/2001:20:05:28 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 2338 pad-cache2-1.cache.telstra.net - - [03/Aug/2001:20:22:10 +1000] "GET /BOZO/history/Ebeling/ HTTP/1.0" 200 9554 pad-cache2-1.cache.telstra.net - - [03/Aug/2001:20:22:09 +1000] "GET /BOZO/history/Ebeling HTTP/1.0" 301 326 ocmax2-201.dialup.optusnet.com.au - - [22/Aug/2001:16:31:07 +1000] "GET /BOZO/dates/Ebeling.dat HTTP/1.0" 200 6962 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:57:11 +1000] "GET /BOZO/dates/ebeling.dat HTTP/1.1" 404 303 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:56:30 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 2615 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:56:29 +1000] "GET /BOZO/Ebeling HTTP/1.1" 301 330 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:56:19 +1000] "GET /BOZO/EBeling HTTP/1.1" 404 293 crawler13.bos2.fast-search.net - - [21/Aug/2001:19:52:57 +1000] "GET /BOZO/history/Ebeling/Ebeling-log.txt HTTP/1.0" 403 309 crawler13.bos2.fast-search.net - - [21/Aug/2001:10:44:16 +1000] "GET /BOZO/history/Ebeling/refs.html HTTP/1.0" 403 303 crawler13.bos2.fast-search.net - - [20/Aug/2001:07:23:11 +1000] "GET /BOZO/history/Ebeling/ HTTP/1.0" 403 294 crawler13.bos2.fast-search.net - - [20/Aug/2001:07:02:28 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 403 286 theta.turboflops.org - - [30/Aug/2001:20:05:28 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 2338 fti.framatech.com - - [30/Aug/2001:23:48:24 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 2338 cyclorana.ppp2.cse.unsw.edu.au - - [29/Aug/2001:20:28:24 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 403 309 cyclorana.ppp2.cse.unsw.edu.au - - [29/Aug/2001:20:25:50 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.1" 403 321 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:55:48 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.1" 403 321 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:55:36 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.1" 403 321 fti.framatech.com - - [30/Aug/2001:23:48:24 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 2338 cyclorana.ppp2.cse.unsw.edu.au - - [29/Aug/2001:20:28:24 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 403 309 cyclorana.ppp2.cse.unsw.edu.au - - [29/Aug/2001:20:25:50 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.1" 403 321 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:56:30 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 2615 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:56:29 +1000] "GET /BOZO/Ebeling HTTP/1.1" 301 330 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:55:48 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.1" 403 321 cwip-t-009-p-222-38.tmns.net.au - - [29/Aug/2001:21:55:36 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.1" 403 321 crawler13.bos2.fast-search.net - - [21/Aug/2001:19:52:57 +1000] "GET /BOZO/history/Ebeling/Ebeling-log.txt HTTP/1.0" 403 309 crawler13.bos2.fast-search.net - - [21/Aug/2001:10:44:16 +1000] "GET /BOZO/history/Ebeling/refs.html HTTP/1.0" 403 303 crawler13.bos2.fast-search.net - - [20/Aug/2001:07:23:11 +1000] "GET /BOZO/history/Ebeling/ HTTP/1.0" 403 294 crawler13.bos2.fast-search.net - - [20/Aug/2001:07:02:28 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 403 286 209.73.162.82 - - [12/Aug/2001:15:05:17 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 404 282 c43195-a.lvrmr1.sfba.home.com - - [01/Sep/2001:15:04:18 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 2338 cr013r01.sac2.fastsearch.net - - [09/Sep/2001:04:23:04 +1000] "GET /BOZO/history/Ebeling/Ebeling-keywords.html HTTP/1.0" 404 311 cr013r01.sac2.fastsearch.net - - [09/Sep/2001:02:45:49 +1000] "GET /BOZO/history/Ebeling/nuclear-truth.html HTTP/1.0" 404 308 cr013r01.sac2.fastsearch.net - - [09/Sep/2001:01:45:27 +1000] "GET /BOZO/history/Ebeling/ebeling-query.html HTTP/1.0" 404 308 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl Following appear to be Mr Ebeling and correspond to a re-appearance on Aus.Politics. bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl cpe-144-132-193-185.nsw.bigpond.net.au - - [07/Sep/2001:08:52:21 +1000] "GET /BOZO/ HTTP/1.0" 403 279 cpe-144-132-193-185.nsw.bigpond.net.au - - [07/Sep/2001:08:52:11 +1000] "GET /BOZO/Ebeling HTTP/1.0" 403 286 c43195-a.lvrmr1.sfba.home.com - - [01/Sep/2001:15:04:18 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 2338 144.132.193.185 - - [07/Sep/2001:08:52:01 +1000] "GET /index.sh HTTP/1.0" 200 167 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl Following from somewhere in rural NSW, according to traceroute. bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl cpe-144-132-193-185.nsw.bigpond.net.au - - [07/Sep/2001:08:52:11 +1000] "GET /BOZO/Ebeling HTTP/1.0" 403 286 cpe-144-132-193-185.nsw.bigpond.net.au - - [07/Sep/2001:08:52:21 +1000] "GET /BOZO/ HTTP/1.0" 403 279 144.136.65.125 - - [16/Oct/2001:17:17:28 +1000] "GET /backgrounds/smiley.gif HTTP/1.0" 200 93 144.136.65.125 - - [16/Oct/2001:17:18:08 +1000] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 200 87 144.136.65.125 - - [16/Oct/2001:17:18:21 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 200 14574 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:12:56:38 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 404 282 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:08:19:42 +1000] "GET /BOZO/history/Ebeling/ HTTP/1.0" 404 290 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:07:05:35 +1000] "GET /BOZO/history/Ebeling/Ebeling-log.txt HTTP/1.0" 404 305 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:05:34:05 +1000] "GET /BOZO/history/Ebeling/ebeling-query.html HTTP/1.0" 404 308 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:05:16:27 +1000] "GET /BOZO/history/Ebeling/refs.html HTTP/1.0" 404 299 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:04:40:17 +1000] "GET /BOZO/history/Ebeling/raw/ HTTP/1.0" 404 294 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:03:45:40 +1000] "GET /BOZO/history/Ebeling/Ebeling-posting-dates.txt HTTP/1.0" 404 315 cr013r01.sac2.fastsearch.net - - [22/Oct/2001:01:54:56 +1000] "GET /BOZO/history/Ebeling/Ebeling-keywords.html HTTP/1.0" 404 311 144.132.198.195 - - [14/Nov/2001:23:05:30 +1100] "GET /khorsell.html HTTP/1.1" 2 00 9285 cpe-144-132-198-195.nsw.bigpond.net.au - - [14/Nov/2001:23:05:30 +1100] "GET /ba ckgrounds/smiley.gif HTTP/1.1" 200 93 144.132.198.195 - - [14/Nov/2001:23:05:30 +1100] "GET /khorsell.html HTTP/1.1" 200 9285 66.237.60.48 - - [11/Apr/2002:15:59:00 +1000] "GET /eggsoft%40sydney.dialix.oz HTTP/1.0" 200 87 error_log:[Fri May 17 23:22:30 2002] [error] [client 65.214.36.158] File does not exist: /u/kym/kym_html/BOZO/Ebeling/ bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl MR EBELING? bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl eglt408.directhit.com - - [17/May/2002:23:22:30 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 404 282 cache0.syd.ops.aspac.uu.net - - [11/Jun/2002:16:07:18 +1000] "GET //BOZO/dates/Ebeling.dat HTTP/1.1" 200 8240 66.196.72.93 - - [16/Jun/2002:20:34:37 +1000] "GET /~kym/eggsoft@sydney.dialix.oz HTTP/1.0" 404 298 ezspider421.directhit.com - - [10/Aug/2002:01:36:08 +1000] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 200 87 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl MR EBELING? bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl ezspider421.directhit.com - - [25/Sep/2002:09:31:55 +1000] "GET /BOZO/Ebeling/ HTTP/1.0" 200 16271 207.159.196.2 - - [26/Sep/2002:06:33:25 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 16271 ezspider421.directhit.com - - [05/Oct/2002:06:36:28 +1000] "GET /BOZO/Ebeling/complaint-to-abuse-group.txt HTTP/1.0" 200 2678 ezspider421.directhit.com - - [05/Oct/2002:06:38:45 +1000] "GET /BOZO/dates/ebeling.dat HTTP/1.0" 404 110 ezspider421.directhit.com - - [05/Oct/2002:06:43:42 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 4302 egspd401.directhit.com - - [23/Oct/2002:00:48:08 +1000] "GET /BOZO/dates/ebeling.dat HTTP/1.0" 200 8420 egspd401.directhit.com - - [23/Oct/2002:01:55:14 +1000] "GET /BOZO/dates/ebeling.dat HTTP/1.0" 200 8420 egspd401.directhit.com - - [15/Jan/2003:16:57:54 +1100] "GET /BOZO/Ebeling/complaint-to-abuse-group.txt HTTP/1.0" 200 2678 egspd401.directhit.com - - [15/Jan/2003:18:54:23 +1100] "GET /BOZO/dates/ebeling.dat HTTP/1.0" 403 295 egspd401.directhit.com - - [15/Jan/2003:22:19:36 +1100] "GET /BOZO/Ebeling/ HTTP/1.0" 200 17371 egspd401.directhit.com - - [16/Jan/2003:00:36:34 +1100] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 404 - egspd401.directhit.com - - [16/Jan/2003:07:00:46 +1100] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 4397 egspd401.directhit.com - - [16/Jan/2003:11:04:39 +1100] "GET /BOZO/Ebeling/ HTTP/1.0" 200 17371 egspd401.directhit.com - - [16/Jan/2003:13:50:18 +1100] "GET /BOZO/Ebeling/complaint-to-abuse-group.txt HTTP/1.0" 200 2678 egspd401.directhit.com - - [16/Jan/2003:14:23:04 +1100] "GET /BOZO/dates/ebeling.dat HTTP/1.0" 403 295 egspd401.directhit.com - - [16/Jan/2003:15:15:43 +1100] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 404 - egspd401.directhit.com - - [16/Jan/2003:17:38:36 +1100] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 4397 cr013r01.sac2.fastsearch.net - - [20/Jan/2003:17:48:40 +1100] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 404 148 64.68.82.54 - - [21/Feb/2003:14:30:47 +1100] "GET /BOZO/Ebeling/ HTTP/1.0" 200 17371 cr013r01.sac2.fastsearch.net - - [26/Feb/2003:11:41:03 +1100] "GET /eggsoft@sydney.dialix.oz HTTP/1.0" 200 88 209.249.67.135 - - [05/Mar/2003:07:00:48 +1100] "GET /BOZO/Ebeling/ HTTP/1.1" 20 0 18542 crawlers.looksmart.com - - [02/Sep/2003:17:35:23 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 0 crawlers.looksmart.com - - [04/Sep/2003:04:08:39 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 0 crawlers.looksmart.com - - [05/Sep/2003:09:50:47 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 0 crawlers.looksmart.com - - [10/Sep/2003:04:04:57 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 0 crawlers.looksmart.com - - [11/Sep/2003:13:09:49 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 0 crawlers.looksmart.com - - [14/Sep/2003:21:09:59 +1000] "GET /BOZO/Ebeling/ HTTP/1.1" 200 0 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl GREIG STARTED POSTING AGAIN ON 16 OCT 2003 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl egspd449.teoma.com - - [12/Oct/2003:06:16:27 +1000] "GET /robots.txt HTTP/1.0" 200 372 egspd449.teoma.com - - [12/Oct/2003:06:16:28 +1000] "GET / HTTP/1.0" 200 417 egspd449.teoma.com - - [12/Oct/2003:06:16:30 +1000] "GET /khorsell.html HTTP/1.0" 200 13516 egspd449.teoma.com - - [12/Oct/2003:08:38:35 +1000] "GET /junkmail.html HTTP/1.0" 200 86002 egspd449.teoma.com - - [12/Oct/2003:08:40:24 +1000] "GET /glimpse.log HTTP/1.0" 200 10501 egspd449.teoma.com - - [12/Oct/2003:08:46:24 +1000] "GET /junkmail.log HTTP/1.0" 200 1081344 egspd449.teoma.com - - [12/Oct/2003:08:59:44 +1000] "GET /top-query.html HTTP/1.0" 200 2051 egspd449.teoma.com - - [12/Oct/2003:09:00:16 +1000] "GET /kym.massbus.org-refs.html HTTP/1.0" 200 523 egspd449.teoma.com - - [12/Oct/2003:09:06:06 +1000] "GET /tf_cost.html HTTP/1.0" 200 3190 egspd449.teoma.com - - [12/Oct/2003:09:11:37 +1000] "GET /filedate_refs.html HTTP/1.0" 404 63 egspd449.teoma.com - - [12/Oct/2003:09:16:53 +1000] "GET /glimpsehelp.html HTTP/1.0" 200 33525 egspd449.teoma.com - - [12/Oct/2003:09:22:28 +1000] "GET /file_refs.html HTTP/1.0" 404 63 egspd449.teoma.com - - [14/Oct/2003:10:12:23 +1000] "GET /robots.txt HTTP/1.0" 200 372 egspd449.teoma.com - - [14/Oct/2003:10:17:37 +1000] "GET /file_refs.html HTTP/1.0" 404 63 egspd449.teoma.com - - [14/Oct/2003:10:32:42 +1000] "GET /robots.txt HTTP/1.0" 200 372 egspd449.teoma.com - - [14/Oct/2003:10:53:17 +1000] "GET /BOZO/Ebeling/Ebeling-mail-fraud.txt HTTP/1.0" 200 4397 egspd449.teoma.com - - [14/Oct/2003:10:53:54 +1000] "GET /BOZO/Ebeling/complaint-to-abuse-group.txt HTTP/1.0" 200 2678 bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl probably checking on who's watching him ;-) bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl (but using old refs) bim.zip exploit found found.new iframer.sh index_files.if run template_index_html.tmpl template_index_htm.tmpl template_index_php.tmpl egspd449.teoma.com - - [14/Oct/2003:18:25:03 +1000] "GET /file_refs.html HTTP/1.0" 404 63 egspd449.teoma.com - - [16/Oct/2003:08:25:28 +1000] "GET /robots.txt HTTP/1.0" 200 372 egspd449.teoma.com - - [16/Oct/2003:08:30:34 +1000] "GET /file_refs.html HTTP/1.0" 404 63