AWSTATS DATA FILE 5.9 (build 1.605) # If you remove this file, all statistics for date 2005-01 will be lost/reset. # Position (offset in bytes) in this file of beginning of each section # for direct I/O access. If you made changes somewhere in this file, you # should also remove completely the MAP section (AWStats will rewrite it # at next update). BEGIN_MAP 27 POS_GENERAL 1837 POS_TIME 2428 POS_VISITOR 37723 POS_DAY 39896 POS_DOMAIN 2898 POS_LOGIN 3127 POS_ROBOT 3261 POS_WORMS 40519 POS_EMAILSENDER 3594 POS_EMAILRECEIVER 3737 POS_SESSION 40579 POS_SIDER 40768 POS_FILETYPES 3872 POS_OS 4034 POS_BROWSER 4136 POS_SCREENSIZE 4278 POS_UNKNOWNREFERER 4352 POS_UNKNOWNREFERERBROWSER 4836 POS_ORIGIN 5309 POS_SEREFERRALS 5443 POS_PAGEREFS 5587 POS_SEARCHWORDS 5820 POS_KEYWORDS 5972 POS_MISC 2178 POS_ERRORS 6031 POS_CLUSTER 2983 POS_SIDER_404 6198 END_MAP # LastLine = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value # FirstTime = Date of first visit for history file # LastTime = Date of last visit for history file # LastUpdate = Date of last update - Nb of parsed records - Nb of old records - Nb of new records - Nb of corrupted - Nb of dropped # TotalVisits = Number of visits # TotalUnique = Number of unique visitors # MonthHostsKnown = Number of hosts known # MonthHostsUnKnown = Number of hosts unknown BEGIN_GENERAL 8 LastLine 20050126005520 1563 327958 13758377269 FirstTime 20050101000622 LastTime 20050126005520 LastUpdate 20050126040425 4 0 3 1 0 TotalVisits 226 TotalUnique 56 MonthHostsKnown 0 MonthHostsUnknown 57 END_GENERAL # Misc ID - Pages - Hits - Bandwidth BEGIN_MISC 9 QuickTimeSupport 0 0 0 JavaEnabled 0 0 0 WindowsMediaPlayerSupport 0 0 0 PDFSupport 0 0 0 AddToFavourites 0 0 0 RealPlayerSupport 0 0 0 TotalMisc 0 0 0 DirectorSupport 0 0 0 FlashSupport 0 0 0 END_MISC # Hour - Pages - Hits - Bandwidth BEGIN_TIME 24 0 47 47 24748 1 43 43 23134 2 37 37 19906 3 47 47 25286 4 8 8 4304 5 7 7 3766 6 16 16 8608 7 46 46 24922 8 45 45 24210 9 45 45 24210 10 45 45 24210 11 63 63 28916 12 43 43 23134 13 42 42 27296 14 41 41 21520 15 40 40 24946 16 43 43 23134 17 39 39 20982 18 40 41 21520 19 39 39 20982 20 45 45 23672 21 40 40 21520 22 38 38 20444 23 41 41 22058 END_TIME # Domain - Pages - Hits - Bandwidth # The 10 first Pages must be first (order not required for others) BEGIN_DOMAIN 1 ip 940 941 507428 END_DOMAIN # Cluster ID - Pages - Hits - Bandwidth BEGIN_CLUSTER 0 END_CLUSTER # Login - Pages - Hits - Bandwidth - Last visit # The 10 first Pages must be first (order not required for others) BEGIN_LOGIN 0 END_LOGIN # Robot ID - Hits - Bandwidth - Last visit # The 10 first Hits must be first (order not required for others) BEGIN_ROBOT 7 netcraft 6 0 20050123100749 wget 3 25746 20050107073358 turnitinbot 3 52085 20050108033247 slurp 3 51731 20050103192534 msnbot 2 5776 20050110082429 crawl 2 7402 20050107112208 ibm 1 538 20050121203939 END_ROBOT # EMail - Hits - Bandwidth - Last visit # The 20 first Hits must be first (order not required for others) BEGIN_EMAILSENDER 0 END_EMAILSENDER # EMail - Hits - Bandwidth - Last visit # The 20 first hits must be first (order not required for others) BEGIN_EMAILRECEIVER 0 END_EMAILRECEIVER # Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression BEGIN_FILETYPES 8 htm 1 0 0 0 php 1 0 0 0 dll 1 0 0 0 html 925 493884 0 0 Unknown 5 6695 0 0 exe 3 96 0 0 gif 1 0 0 0 gz 4 6753 0 0 END_FILETYPES # OS ID - Hits BEGIN_OS 7 winxp 16 unix 8 winnt 1 win2000 2 Unknown 879 win98 32 linux 3 END_OS # Browser ID - Hits BEGIN_BROWSER 8 msie6.0 18 konqueror 1 mozilla 2 netscape4.75 8 msie4.01 1 msie5.0 4 msie5.5 28 Unknown 879 END_BROWSER # Screen size - Hits BEGIN_SCREENSIZE 0 END_SCREENSIZE # Unknown referer OS - Last visit date BEGIN_UNKNOWNREFERER 6 - 20050126005520 NetMonitor/2.0_(See_http://expertmonitor.com/explanation/) 20050114211405 MJ12bot/v0.7.3_(http://www.majestic12.co.uk/projects/dsearch/mj12bot.php?V=v0.7.3&NID=B0E44C4EE98B33C4&MID=EE1DD60ABC2AE863 20050101163120 Mozilla/4.0_(compatible;_T-H-U-N-D-E-R-S-T-O-N-E) 20050110105601 Mozilla/3.0_(compatible) 20050112201433 InnerpriseBot/1.0_(http://www.innerprise.com/) 20050105033342 END_UNKNOWNREFERER # Unknown referer Browser - Last visit date BEGIN_UNKNOWNREFERERBROWSER 5 curl/7.10.6_(i386-redhat-linux-gnu)_libcurl/7.10.6_OpenSSL/0.9.7a_ipv6_zlib/1.2.0.7 20050107072447 - 20050126005520 NetMonitor/2.0_(See_http://expertmonitor.com/explanation/) 20050114211405 MJ12bot/v0.7.3_(http://www.majestic12.co.uk/projects/dsearch/mj12bot.php?V=v0.7.3&NID=B0E44C4EE98B33C4&MID=EE1DD60ABC2AE863 20050101163120 InnerpriseBot/1.0_(http://www.innerprise.com/) 20050105033342 END_UNKNOWNREFERERBROWSER # Origin - Pages - Hits BEGIN_ORIGIN 6 From0 934 935 From1 0 0 From2 0 0 From3 6 6 From4 0 0 From5 0 0 END_ORIGIN # Search engine referers ID - Pages - Hits BEGIN_SEREFERRALS 0 END_SEREFERRALS # External page referers - Pages - Hits # The 10 first Pages must be first (order not required for others) BEGIN_PAGEREFS 2 http://forum.ev1servers.net/showthread.php 3 3 http://friendfinder.com/go/b37129 3 3 END_PAGEREFS # Search keyphrases - Number of search # The 10 first number of search must be first (order not required for others) BEGIN_SEARCHWORDS 0 END_SEARCHWORDS # Search keywords - Number of search # The 10 first number of search must be first (order not required for others) BEGIN_KEYWORDS 0 END_KEYWORDS # Errors - Hits - Bandwidth BEGIN_ERRORS 8 403 32 269 206 2 1076 400 117 23662 401 8 1386 302 48 14857 500 1 0 301 1 0 404 1104 100454 END_ERRORS # URL with 404 errors - Hits - Last URL referer BEGIN_SIDER_404 1055 /........../boot.ini 1 - /cgi-bin/campas 1 - /msadc/pskill.exe 1 - /incoming/ 1 - /msadc/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /phpgroupware/inc/phpgwapi/phpgw.inc.php 1 - /domcfg.nsf 1 - /wstats/ 1 - /cfappman/ 1 - /msadc/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /scripts/pwdump3.exe 1 - /cgi-bin/auktion.pl 1 - /msadc/sspifilt.dll 1 - /scripts/fscan.exe 1 - /_vti_pvt%5cwriteto.cnf 1 - /search 1 - /index.php.bak 1 - /sex/ 1 - /msadc/httpext.dll 1 - /scripts 2 - /scripts/iise.dll 1 - /cfdocs/expeval/openfile.cfm 1 - /php/ 1 - /pccsmysqladm/incs/dbconnect.inc 2 - /cgi-bin/guestbook.pl 1 - /cgi-bin/php 1 - /cgi-bin/search/tidfinder.cgi 1 - /cgi-bin/ad.cgi 1 - /cfdocs/exampleapp/email/application.cfm 1 - /WebShop/logs/cc.txt 1 - /cgi-bin/bb-hist.sh 1 - /cgi-bin/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /cgi-bin/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /inc/ 1 - /accept/ 1 - /scripts/.._../winnt/system32/cmd.exe 1 - /scripts/admdll.dll 1 - /cfdocs/mole.cfm 1 - /..\\\\..\\\\..\\winnt\\repair\\sam._ 1 - /msadc/test.exe 1 - /cgi-bin/textcounter.pl 1 - /cgi-bin/everythingform.cgi 1 - /tree.dat 1 - /scripts/sspifilt.dll 1 - /include/ 1 - /_mem_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /cgi-bin/classifieds.cgi 1 - /cgi-bin/.cobalt/siteUserMod/siteUserMod.cgi 1 - /cgi-bin/htgrep 1 - /cgi-bin/calender_admin.pl 1 - /test/test.cgi 1 - /cgi-bin/admin/admin 1 - /msadc/.._../winnt/system32/cmd.exe 1 - /cgi-bin/register.cgi 1 - /scripts/up.asp 1 - /msadc/..\\../..\\../..\\../winnt/system32/cmd.exe 2 - /scripts/ncx.exe 1 - /forum/ 1 - /index.js%2570 1 - /dbase/ 1 - /db/ 1 - /cgi-bin/global.cgi 1 - /enter_bug.cgi 1 - /cgi-bin/filemail.pl 1 - /cgi-bin/..\\..\\..\\../winnt/system32/cmd.exe 1 - /ex/jsp/simple.jsp. 1 - /cgi-bin/perlshop.cgi 1 - /admisapi/ 1 - /scripts/dumdedum.dll 1 - /ROADS/cgi-bin/search.pl 1 - /global.asa+.htr 1 - /..\\\\..\\\\..\\\\..\\\\..\\\\..\\autoexec.bat 1 - /cgi-bin/ikonboard/help.cgi 1 - /msadc/raddrv.dll 1 - /passwd 1 - /scripts/samples/ctguestb.idc 1 - /........../autoexec.bat 1 - /msadc/blackbeard.exe 1 - /main.asp%2e 1 - /cgi-bin/statsconfig.pl 1 - /domlog.nsf 1 - /cgi-bin/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /iisamples/Sdk 1 - /secrets/ 1 - /cgi-bin/guestbook.cgi 1 - /cgi-bin/webdriver 1 - /password 1 - /iisadmpwd/aexp2.htr 2 - /msadc/sensepost.exe 1 - /scripts/iisadmin/tools/getdrvrs.exe 1 - /galaxy_2352.6901 1 - /scripts/nc.exe 1 - /scripts/httpodbc.dll 1 - /msadc/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /msadc/samples/selector/showcode.asp 1 - /cgi-bin/mailform.exe 1 - /scripts/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /cfdocs/expressions.cfm 1 - /scripts/iisadmin/samples 1 - /..../boot.ini 1 - /null.idc 1 - /cgi-bin/snorkerz.cmd 1 - /cgi-bin/webgais 1 - /msadc/samdump.dll 1 - /msadc/inuse.exe 1 - /_vti_pvt%5cservice.cnf 1 - /img/ 1 - /cfdocs/examples/cvbeans/beaninfo.cfm 1 - /_vti_pvt%5caccess.cnf 1 - /server-status/ 1 - /iisadmpwd/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /config/ 1 - /rpc/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /msadc/netcat.exe 1 - /scripts/nsiislog.dll 3 - /scripts/proxy/w3proxy.dll 1 - /scripts/idq.dll 1 - /iissamples/iissamples/query.asp 1 - /exchange/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /scripts/cmd32.exe 2 - /cgi-bin/visitor.exe 1 - /cfdocs/expelval/exprcalc.cfm 1 - /scripts/emurl/RECMAN.dll 1 - /cgi-bin/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /pbserver/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /log.html 1 - /file/index.jsp 1 - /cgi-bin/c32web.exe/ShowAdminDir 1 - /msadc/tlist.exe 1 - /login.jsp 1 - /msadc/river.dll 1 - /pbserver/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /cgi-bin/ezshopper3/loadpage.cgi 1 - /scripts/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /cgi-bin/awl/auctionweaver.pl 1 - /msadc/pwdump2.exe 1 - /NULL.htr 2 - /cgi-bin/nph-test-cgi 1 - /cgi-bin/infosrch.cgi 1 - /\\../config.sys 1 - /msadc/red.dll 1 - /scripts/file.asp 1 - /msadc/ftp.exe 1 - /..../Windows/Admin.pwl 1 - /search97.vts 1 - /scripts/dmailweb.exe 1 - /cgi-bin/windmail.exe 1 - /anything.ida 1 - /cgi-auth/userreg.cgi 1 - /cgi-bin/db2www/library/document.d2w/show 1 - /cgi-bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /cgi-bin/nph-publish 1 - /main.asp+.htr 1 - /cgi-bin/survey.cgi 1 - /log.txt 1 - /secret/ 1 - /htdocs/ 1 - /bbs/admin/config/ 1 - /scripts/iiscrack.dll 1 - /cgi-bin/fpcount.exe 1 - /XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 1 - /msadc/superlol.exe 1 - /servlet/com.unify.ewave.servletexec.UploadServlet 1 - /cgi-bin/formmail.cgi 1 - /cgi-bin/simplestmail.cgi 1 - /scripts/hack.exe 1 - /programming/ 1 - /girl/ 1 - /scripts/hk.exe 1 - /cgi-bin/phf.cgi 1 - /scripts/iisadmin/ism.dll 2 - /technote/print.cgi 1 - /cgi-bin/Xrun.cgi 1 - /scripts/dbman/db.cgi 2 - /index.jsp 1 - /example/ 1 - /scripts/x.asp 1 - /scripts/repost.asp 1 - /..\\..\\..\\winnt\\repair\\sam._ 1 - /sources/ 1 - /admin.php3 1 - /cgi-bin/simplestguest.cgi 1 - /site/eg/source.asp 1 - /cfdocs/exampleapp/publish/admin/application.cfm 1 - /pbserver/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /scripts/cmd.asp 1 - /msadc/0wn.asp 1 - /scripts/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /iissamples 1 - /scripts/admin.exe 1 - /.........../boot.ini 1 - /.jsp/WEB-INF/classes/Env.java 1 - /scripts/pfieffer.cmd 1 - /cgi-win/wincgi.bat 1 - /index.asp::$DATA 1 - /..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /scripts/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /\\../boot.ini 1 - /pbserver/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /scripts/cart32.exe 1 - /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /scripts/iisadmin/tools/ctss.idc 1 - /scripts/exec.asp 1 - /common/browser.inc 1 - /cgi-bin/webspirs.cgi 1 - /bbs/admin/ 1 - /temporary/ 1 - /msadc/exec.asp 1 - /caspsamp/codebrws.asp 5 - /cgi-bin/mailfile.cgi 1 - /cgi-bin/webplus.cgi 1 - /scripts/tools/mkilog.exe 1 - /hire/ 1 - /_vti_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /WebShop/logs/ck.log 1 - /scripts/md5filt.dll 1 - /cgi-bin/iisadmpwd/aexp.htr 1 - /cgi-bin/tst.bat\\dir 1 - /66.209.65.90:19638/webhost/services/virtualhosting/siteadmin 1 - /pbserver/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /scripts/samples 1 - /..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /msadc/md5filt.dll 1 - /cgi/ 1 - /cmd.exe 1 - /rpc/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /scripts/netcat.exe 1 - /bbs/include/ 1 - /msadc/bin.exe 1 - /msadc/fscan.exe 1 - /cgi-bin/nph-maillist.pl 1 - /scripts/no-such-file.pl 2 - /cgi-bin/redirect.cgi 1 - /..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini 1 - /WebShop/templates/cc.txt 1 - /iissamples/exair/search/qsumrhit.htw 1 - /cgi-bin/processit.pl 1 - /....../config.sys 1 - /default.asp%2e%41sp 1 - /banners.php 1 - /cfusion/database/smpolicy.mdb 1 - /cgi-bin/Web_Store/web_store.cgi 1 - /scripts/blackbeard.exe 1 - /msadc/list.exe 1 - /cgi-bin/postings.cgi 1 - /bbs/data/ 1 - /pbserver/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /scripts/*.pl 1 - /access.log 1 - /exec/show/config/cr 1 - /msadc/nsiislog.dll 1 - /msadc/hunt.exe 1 - /scripts/ 1 - /msadc/crack.dll 1 - /msadc/ssinc.dll 1 - /msadc/ncx.exe 1 - /scripts/iisadmin/default.htm 1 - /index.asp%81 1 - /script/.._../winnt/system32/cmd.exe 1 - /..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /cfdocs/root.cfm 1 - /cgi-bin/allmanageup.pl 1 - /cgi-bin/news/news.cgi 1 - /_mem_bin/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /cgi-bin/scripts/perl.exe 1 - /iissamples/exair/howitworks/codebrws.asp 1 - /main.asp::$DATA 1 - /msadc/pwdump.exe 1 - /cfcache.map 1 - /msadc/3.exe 1 - /scripts/hunt.exe 1 - /scripts/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /bin/scripts/openvendor/gnete/RetrievePNBody.asp 1 - /scripts/visadmin.exe 1 - /files/ 1 - /cgi-bin/adcycle 1 - /cgi-bin/iisadmpwd/achg.htr 1 - /scripts/bin.exe 1 - /cfdocs/snippets/evaluate.cfm 1 - /config/import.txt 1 - /programs/ 1 - /idea/ 1 - /msadc/az.exe 1 - /msadc/cmd1.exe 1 - /work/ 1 - /cgi-bin/man.sh 1 - /msadc/1.dll 1 - /sql/ 1 - /scripts/iisadmin/bdir.htr 2 - /msadc/1.exe 1 - /scripts/samples/search/webhits.exe 1 - /scripts/perl 1 - /scripts/ssinc.dll 1 - /cgi-bin/shop.cgi 1 - /servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter 1 - /msql/ 1 - /_vti_pvt%5csvcacl.cnf 1 - /manual.php 1 - /iissamples/issamples/oop/qfullhit.htw 1 - /Proxy/LoginResponse 1 - /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /......./boot.ini 1 - /iisprotect/admin/SiteAdmin.ASP 2 - /cgi-bin/cachemgr.cgi 1 - /log.nsf 1 - /cgi-bin/input.bat 1 - /cgi-win/wguest.exe 1 - /scripts/uploadx.asp 2 - /ASPSamp/AdvWorks/equipment/catalog_type.asp 1 - /cgi-bin/cgiforum.pl 1 - /process_bug.cgi 1 - /....../boot.ini 1 - /msadc/iisadmin.dll 1 - /piranha/secure/passwd.php3 1 - /scripts/list.exe 1 - /msadc/iise.dll 1 - /msadc/info.exe 1 - /scripts/own.asp 1 - /include/inc/ 1 - /cgi-bin/c32web.exe/CheckError 1 - /scripts/4.exe 1 - /doc 1 - /cgi-bin/handler 1 - /cgi-bin/wrap 1 - /cgi-bin/AnyForm2 1 - /msadc/dumdedum.dll 1 - /x.ida 1 - /..................../boot.ini 1 - /subscribe.pl 1 - /cgi-bin/htmlscript 1 - /..../config.sys 1 - /app.cfm 1 - /bin/scripts/..\\..\\..\\../winnt/system32/cmd.exe 2 - /scripts/htimage.exe 1 - /scripts/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /cgi-bin/htsearch 2 - /ConsoleHelp/login.jsp 1 - /E-Guest_sign.pl 1 - /scripts/hack.jsp 1 - /cgi-bin/pals-cgi 1 - /msadc/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /_vti_bin/fpexe 1 - /Admin_files/order.log 1 - /smdata.dat 1 - /msadc/samples/adctest.asp 1 - /cfdocs/expelval/sendmail.cfm 1 - /scripts/shell.exe 1 - /pbserver/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /index.html.bak 1 - /................./boot.ini 1 - /secure/.wwwacl 1 - /scripts/jasfv.dll 1 - /scripts/2.exe 1 - /main.asp%81 1 - /main.asp\\\\ 1 - /scripts/raddrv.dll 1 - /iisadmpwd/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /cgi-bin/webbbs/webbbs_config.pl 1 - /getfile.cfm 2 - /msadc/shell.jsp 1 - /class/mysql.class 1 - /head.css 1 - /adminlogin 1 - /scripts/compfilt.dll 1 - /rpc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /scripts/stromake.exe 1 - /srchadm 1 - /scripts/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /rpc/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /servlet/SessionServlet 1 - /cfdocs/examples/httpclient/mainframeset.cfm 1 - /pbserver/ 1 - /stats.html 1 - /iissamples/exair/howitworks/showcode.asp 1 - /cgi-bin/www-sql 1 - /scripts/tools 1 - /cfide/Administrator/startstop.html 1 - /blah.htm 1 - /cfappman/index.cfm 1 - /source/ 1 - /scripts/httpext.dll 1 - /deny/ 1 - /msadc/hack.exe 1 - /scripts/gogo.exe 1 - /_mem_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /iissamples/exair/search/advsearch.asp 1 - /stat/ 1 - /_vti_pvt%5cservices.cnf 1 - /....../autoexec.bat 1 - /msadc/ftpx.exe 1 - /cfide/Administrator/ 1 - /cgi-bin/anacondaclip.pl 1 - /access-log 1 - /msadc/cmd.jsp 1 - /cgi-bin/dcadmin.cgi 1 - /card/ 1 - /scripts/tkill.exe 1 - /.................../boot.ini 1 - /.\"./.\"./winnt/win.ini%20.php3 1 - /NessusTest11485.html 1 - /cgi-bin/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\system32\\cmd.exe 1 - /_vti_bin/..\\..\\..\\../winnt/system32/cmd.exe 2 - /msadc/exchange.exe 1 - /cgi-bin/GW5 1 - /scripts/cmd1.exe 1 - /cgi-shl/win-c-sample.exe 1 - /scripts/Carello/add.exe 1 - /filemanager/filemanager_forms.php 1 - /cgi-bin/dumpenv.pl 1 - /cgi-bin/s.cgi 1 - /msadc/admdll.dll 1 - /msadc/exec.jsp 1 - /scripts/pfieffer.bat 1 - /..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /phpPhotoAlbum/explorer.php 1 - /number/ 1 - /pservlet.html 1 - /cgi-bin/cal_make.pl 1 - /cgi-bin/csvform.pl 1 - /cfdocs/cfcache.map 1 - /wwwboard/passwd.txt 1 - /cgi-bin/ipf/etc/gfw/ui/pwd.dat 1 - /scripts/rooter.exe 1 - /cgi-bin/test.bat 1 - /cgi-bin/dcforumlib.pl 1 - /cgi-dos/args.cmd 1 - /catalog.nsf 1 - /cgi-bin/unlg1.1 1 - /cgi-bin/scripts/whois.cgi 1 - /cgi-bin/tst.bat 1 - /document/ 1 - /cgi-bin/cgiwrap 1 - /user.php&op=saveuser 1 - /logfile.html 1 - /cfdocs/zero.cfm 1 - /cgi-bin/view_page.html 1 - /msadc/upload.asp 1 - /program/ 1 - /iisadmpwd/aexp4.htr 2 - /exchange/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /linux/ 1 - /default.asp 1 - /index.asp. 1 - /cgibin 1 - /include/head.html 1 - /cgi-bin/get32.exe\\dir 1 - /scripts/shell.asp 1 - /msadc/nc.exe 1 - /acid/ 1 - /officescan/cgi/jdkRqNotify.exe 1 - /scripts/tools/getdrvrs.exe 1 - /phorum/common.php 1 - /............/boot.ini 1 - /cgi-win/uploader.exe 1 - /publisher 1 - /cgi-bin/sam._ 1 - /secret/secret/change-passwd.shtml 1 - /examples/applications/bboard/bboard_frames.html 1 - /cgibin/ 1 - /cfdocs/expeval/displayopenedfile.cfm 1 - /............./boot.ini 1 - /scripts/dllhosts.exe 1 - /private/ 1 - /cfdocs/examples/parks/detail.cfm 1 - /scripts/author.dll 1 - /login.asp%3F+.htr 1 - /scripts/whoami.exe 1 - /_vti_bin/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /a.asp/..\\../..\\../winnt/repair/sam 1 - /temp/ 1 - /scripts/tools/uploadn.asp 1 - /scripts/cmd.jsp 1 - /cgi-bin/ssi 1 - /msadc/kill.exe 1 - /cgi-bin/lasso.cgi 1 - /scripts/webbbs.exe 1 - /session/adminlogin 1 - /phorum/plugin/replace/admin.php 1 - /setup/ 1 - /cgi-bin/ultraboard.cgi 1 - /scripts/htadm.dll 1 - /cfdocs/examples/ 1 - /admin-serv/config/admpw 1 - /perl 1 - /iisadmpwd/aexp2b.htr 2 - /msadc/own.asp 1 - /cfdocs/exampleapp/docs/sourcewindow.cfm 1 - /cgi-win/perl.exe 1 - /scancfg.cgi 1 - /default.asp. 1 - /cgi-bin/GW5/GWWEB.EXE 1 - /user.dat 1 - /cgi-bin/edit.pl 1 - /..\\..\\..\\..\\autoexec.bat 1 - /cgi-bin/post32.exe 1 - /msadc/msadcs.dll 1 - /msadc/fx.asp 1 - /cgi-bin/AT-generate.cgi 1 - /...../boot.ini 1 - /scripts/plist.exe 1 - /includes/ 1 - /cgi-bin/aglimpse 1 - /rightfax/fuwww.dll 1 - /scripts/lsass.exe 1 - /cgi-bin/mmstdod.cgi 1 - /stats.txt 1 - /iisadmpwd/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /cgi-bin/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /php3/ 1 - /scripts/red.dll 1 - /cgi-bin/ezshopper2/loadpage.cgi 1 - /iisadmpwd/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /scripts/bbs.pl%3F+.htr 1 - /scripts/wsisa.dll 1 - /samples/search/queryhit.htm 1 - /cgi-bin/YaBB.pl 1 - /logfile.txt 1 - /carbo.dll 1 - /exchange/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /msadc/sys.exe 1 - /cgi-bin/ustorekeeper.pl 1 - /cgi-bin/changepw.cgi 1 - /iisadmpwd/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /rpc/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /scripts/newgina.dll 1 - /cgi-bin/search.cgi 1 - /msadc/spooler.exe 1 - /msadc/idq.dll 1 - /scripts/sklp.exe 1 - /private/.htpasswd 1 - /logs/access_log 1 - /iissamples/sdk/asp/docs/codebrws.asp 1 - /pbserver/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /documents/ 1 - /null.ida 1 - /phone/ 1 - /NessusTest23763.html 1 - /cgi-bin-sdb 1 - /msadc/shell.asp 1 - /iisadmpwd/anot3.htr 1 - /.../boot.ini 1 - /Stats/ 1 - /null.idq 1 - /cgi-bin/cgitest.exe 1 - /scripts/own.jsp 1 - /cgi-bin/build.cgi 1 - /install/ 1 - /msadc/gogo.exe 1 - /_mem_bin/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /cfdocs/expelval/displayopenedfile.cfm 1 - /cgi-bin/E-Guest_sign.pl 1 - /iisadmpwd/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /rpc/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /cgi-bin/iisadmpwd/anot.htr 1 - /..\\..\\..\\autoexec.bat 1 - /wwwboard.pl 1 - /users/scripts/submit.cgi 1 - /sample.asp 1 - /cgi-bin/wconsole.dll 1 - /include/css.css 1 - /_vti_bin/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /msadc/hh.dll 1 - /pbserver/pbserver.dll 1 - /ports/ 1 - /cgi-bin/environ.cgi 1 - /cgi-bin/wrap.cgi 1 - /databases/ 1 - /scripts/Fpadmcgi.exe 1 - /test/ 1 - /getFile.cfm 1 - /scripts/ftpx.exe 1 - /cgi-bin/wwwboard.pl 1 - /............../boot.ini 1 - /msadc/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /cgi-bin/_vti_cnf 1 - /cpqlogin.htm 1 - /administrator/ 1 - /cgi-bin/mailnews.cgi 1 - /_vti_pvt%5cbotinfs.cnf 1 - /scripts/pwdump.exe 1 - /sawmill 1 - /stats.htm 1 - /msadc/newgina.dll 1 - /cgi-win 1 - /search97cgi/vtopic 1 - /scripts/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /msadc/pwdump3.exe 1 - /scripts/c32web.exe/ChangeAdminPassword 1 - /passwd.txt 1 - /scripts/ftp.exe 1 - /msadc/cmd.asp 1 - /cgi-bin/query 1 - /index.php~ 1 - /exchange/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /scripts/fpcount.exe 1 - /_vti_pvt%5cbots.cnf 1 - /cgi-bin/perl.exe 1 - /library/ 1 - /exchange/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /logfile.htm 1 - /admisapi/fpadmin.htm 1 - /cgi-bin/alibaba.pl 1 - /cfusion/cfapps/security/data/realm.mdb 1 - /scripts/http.dll 1 - /scripts/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /pds/ 1 - /msadc/2.exe 1 - /scripts/0wn.asp 1 - /cfdocs/cfmlsyntaxcheck.cfm 1 - /iisadmpwd/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /cgi-bin/view-source 1 - /scripts/iishelp.dll 1 - /scripts/test.exe 1 - /msadc/ipconfig.exe 1 - /snort2html.html 1 - /default.asp\\\\ 1 - /ultraboard.pl 1 - /scripts/superlol.exe 1 - /submit.php 1 - /cgi-bin/newsdesk.cgi 1 - /scripts/submit.cgi 1 - /scripts/river.dll 1 - /bdir.htr 1 - /IISSAMPLES/ExAir/Search/search.asp 1 - /cgi-bin/subscribe.pl 1 - /cgi-bin/search97.vts 1 - /cgi-bin/Count.cgi 1 - /cgi-bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /cgi-bin/hsx.cgi 1 - /scripts/gupcgi.exe 1 - /bbs/db/ 1 - /cgi-bin/amlite/amadmin.pl 1 - /msadc/shell.exe 1 - /msadc/ft.exe 1 - /msadc/iishelp.dll 1 - /cgi-bin/fpexplore.exe 1 - /mp3/ 1 - /cgi-bin/finger 1 - /today.nsf 1 - /cgi-bin/upload_file.pl 1 - /........./boot.ini 1 - /scripts/exec.jsp 1 - /iissamples/issamples/query.asp 1 - /scripts/samples/details.idc 1 - /NULL.ida 2 - /msadc/httpodbc.dll 1 - /php4/ 1 - /iisadmpwd/aexp4b.htr 2 - /iissamples/exair/search/qfullhit.htw 1 - /msadc/..\\..\\..\\../winnt/system32/cmd.exe 2 - /scripts/iiscrack-upx.dll 1 - /scripts/samdump.dll 1 - /_mem_bin/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /msadc/mx.exe 1 - /cfdocs/exampleapp/email/getfile.cfm 2 - /porno/ 1 - /phorum/plugin/replace/plugin.php 1 - /iisadmpwd/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /telephone/ 1 - /msadc/rooter.exe 1 - /exchange/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /cgi-bin/Board/db/ 1 - /logfile/ 1 - /scripts/admin.dll 1 - /scripts/crack.dll 1 - /scripts/cpshost.dll 1 - /scripts/upload.asp 2 - /iisadmpwd/anot.htr 1 - /cfdocs/snippets/viewexample.cfm 1 - /scripts/wa.exe 1 - /ncl_items.html 1 - /scripts/info.exe 1 - /cgi-bin/ppdscgi.exe 1 - /scripts/omnithread_rt.dll 1 - /cgi-bin/wais.pl 1 - /_mem_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /cgi 1 - /scripts/kill.exe 1 - /cgi-bin/test.cgi 1 - /cgi-bin/pfdisplay.cgi 1 - /scripts/c32web.exe 1 - /cgi-bin/cached_feed.cgi 1 - /scripts/1.dll 1 - /cgi-bin/pagelog.cgi 1 - /cgi-bin/plusmail 1 - /cfdocs/expeval/ExprCalc.cfm 2 - /cgi-bin/htimage.exe 1 - /server-info 1 - /scripts/1.exe 1 - /iissamples/issamples/oop/qsumrhit.htw 1 - /cgi-bin/redirect.exe 1 - /logs/ 1 - /cgi-bin/rguest.exe 1 - /cfdocs/snippets/fileexists.cfm 1 - /default.asp+.htr 1 - /cfdocs/exampleapp/ 1 - /scripts/popper.dll 1 - /cfdocs/snippets/gettempdirectory.cfm 1 - /cgi-bin/replicator/webpage.cgi 1 - /iishelp/iis/misc/iirturnh.htw 1 - /config/orders.txt 1 - /msadc/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /iisadmpwd/aexp.htr 2 - /customer/ 1 - /scripts/* 1 - /msadc/Samples/SELECTOR/codebrws.cfm 1 - /exchange/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /msadc/own.jsp 1 - /catalog.nsf/ 1 - /scripts/sensepost.exe 1 - /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /examples/jsp/num/numguess.js%70 1 - /forum/common.php 1 - /scripts/samples/search/qsumrhit.htw 1 - /ws_ftp.ini 1 - /....../ 2 - /msadc/omnithread_rt.dll 1 - /..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /cgi-bin/dmailweb.cgi 1 - /scripts/slxweb.dll 1 - /..\\..\\..\\..\\..\\autoexec.bat 1 - /wwwstats.html 1 - /_mem_bin/..\\..\\..\\../winnt/system32/cmd.exe 2 - /cgi-bin/iisadmpwd/aexp2.htr 1 - /scripts/..\\../winnt/system32/cmd.exe 1 - /bin/scripts/.._../winnt/system32/cmd.exe 1 - /cgi-bin/maillist.pl 1 - /cfusion/cfapps/forums/data/forums.mdb 1 - /bin/common/user_update_admin.pl 1 - /iissamples/exair/howitworks/code.asp 1 - /exchange/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /cgi-bin/lsindex2.bat 1 - /weblog/ 1 - /wwwlog/ 1 - /cgi-bin/w3-msql 1 - /cfusion/database/cypress.mdb 1 - /logger/ 1 - /msadc/x.asp 1 - /cgi-bin/GWWEB.EXE 1 - /rpc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /scripts/cmd.exe 3 - /cgi-bin/csChatRBox.cgi 1 - /scripts/spooler.exe 1 - /scripts/counter.exe 1 - /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /msadc/hack.jsp 1 - /scripts/vnchooks.dll 1 - /msadc/fpexedll.dll 1 - /CompromisedScan.dll 2 - /msadc/admin.dll 1 - /index.php3 1 - /cgi-bin/webplus.exe 1 - /sumthin 6 - /logging/ 1 - /scripts/rguest.exe 1 - /mysql/ 1 - /cgi-bin/ceilidh.exe 1 - /survey 1 - /usage/ 1 - /cgi-bin/webwho.pl 1 - /iisprotect/sample/protected 1 - /hosts.dat 1 - /a.jsp//..//..//..//..//..//../winnt/win.ini 1 - /..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /server-info/ 1 - /cgi-bin/test-cgi 1 - /cgi-bin/php.cgi 1 - /cgi-bin/bb-hostsvc.sh 1 - /scripts/ipconfig.exe 1 - /manage/cgi/cgiproc 1 - /Newuser 1 - /msadc/vnchooks.dll 1 - /cfusion/database/cfsnippets.mdb 1 - /scripts/dnewsweb.exe 1 - /scripts/environ.pl 1 - /database/ 1 - /iissamples/issamples 1 - /cfdocs/expeval/eval.cfm 1 - /cgi-bin/rpm_query 1 - /devel/ 1 - /public/ 1 - /cgi-bin 1 - /scripts/lsaext.dll 1 - /cgi-bin/loadpage.cgi 1 - /msadc/jasfv.dll 1 - /cgi-bin/perl 1 - /msadc/cmdasp.asp 1 - /msadc/httpodbc2.dll 1 - /iisadmpwd/achg.htr 1 - /scripts/tools/uploadx.asp 1 - /ftp/ 1 - /scripts/samples/search/qfullhit.htw 1 - /cgi-bin/phf 1 - /iisadmpwd/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /scripts/sys.exe 1 - /cfide/ 1 - /setpasswd.cgi 1 - /cgi-bin/allmanage.pl 1 - /msadc/samples/selector/showcode.asp_2 1 - /Album/ 1 - /cgi-bin/webdata.cgi 1 - /msadc/whoami.exe 1 - /_mem_bin/.._../winnt/system32/cmd.exe 1 - /msadc/iiscrack-upx.dll 1 - /msadc/shtml.dll 1 - /PSUser/PSCOErrPage.htm 1 - /cgi-bin/csLiveSupport.cgi 1 - /config/mountain.cfg 1 - /autoexec.bat 1 - /cgi-dos/args.bat 1 - /cfdocs/ 1 - /scripts/issadmin/bdir.htr 1 - /secret/secret/sql_tool.shtml 1 - /cgi-bin/input2.bat 1 - /..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /cgi-bin/fpexplorer.exe 1 - /ssi/envout.bat 1 - /msadc/htadm.dll 1 - /names.nsf 1 - /password.log 1 - /private 1 - /secret/secret/add-user.shmtl 1 - /anything.idq 1 - /scripts/shtml.dll 1 - /..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /cgi-bin/webdist.cgi 1 - /scripts/tools/newdsn.exe 1 - /_mem_bin/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /server_stats/ 1 - /cgi-bin/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /rpc/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /_vti_bin/..%255c..%255c..%255c..%255c..%255c/winnt/system32/cmd.exe 1 - /msadc/author.dll 1 - /scripts/fpexe.dll 1 - /scripts/postinfo.asp 1 - /cgi-bin/whois_raw.cgi 1 - /scripts/iisadmin/tools 1 - /msadc/file.asp 1 - /...................../config.sys 1 - /inc/sendmail.inc 1 - /iisadmpwd/aexp3.htr 2 - /config/checks.txt 1 - /cgi-bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 - /webstats/ 1 - /log/ 1 - /index.asp%2e 1 - /_vti_bin/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /msadc/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /scripts/..\\..\\..\\..\\../winnt/system32/cmd.exe 2 - /cgi-bin/calender.pl 1 - /cfide/administrator/index.cfm 1 - /scripts/tlist.exe 1 - /down/ 1 - /scripts/hh.dll 1 - /_vti_bin/.._../winnt/system32/cmd.exe 1 - /scripts/cart32.exe/cart32clientlist 1 - /download/ 1 - /..\\..\\autoexec.bat 1 - /cgi-bin/gbook/gbook.cgi 1 - /_mem_bin/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /scripts/cmdasp.asp 1 - /pbserver/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /exchange/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /cgi-bin/glimpse 1 - /nofile.pl 1 - /main.asp. 1 - /cgi-bin/websendmail 1 - /cgi-bin/.._../winnt/system32/cmd.exe 1 - /scripts/uploadn.asp 1 - /cgi-bin/csNews.cgi 1 - /msadc/popper.dll 1 - /girls/ 1 - /......../boot.ini 1 - /snmp/ 1 - /WEB-INF/ 1 - /cgi-bin/Search.pl 1 - /scripts/httpodbc2.dll 1 - /docs/ 1 - /msadc/sklp.exe 1 - /cgi-bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /cgi-bin/mailform.pl 1 - /cgi-bin/mdma.bat 1 - /msadc/fpexe.dll 1 - /msadc/msw3prt.dll 1 - /_mem_bin/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 - /scripts/root.exe 2 - /ideas/ 1 - /cgi-bin/get32.exe 1 - /technote/main.cgi/oops 1 - /scripts/pwdump2.exe 1 - /scripts/msw3prt.dll 1 - /main.asp%2e%41sp 1 - /webaccess.htm 1 - /scripts/pwsdata.dll 1 - /msadc/dllhosts.exe 1 - /ows-bin/perlidlc.bat 1 - /logger.html 1 - /misc/ 1 - /msadc/uploadx.asp 1 - /cgi-bin/shopper.cgi 1 - /iisadmin/ 2 - /backup/ 1 - /scripts/convert.bas 1 - /scripts/iisadmin/tools/mkilog.exe 1 - /cgi-bin/counterfiglet/nc/f 1 - /cgi-bin/day5datacopier.cgi 1 - /msadc 1 - /trace.axd 1 - /server-status 1 - /scripts/tools/dsnform.exe 1 - /cgi-bin/changepw.exe 1 - /WSFTP.LOG 1 - /cd-cgi/sscd_suncourier.pl 1 - /cfdocs/snippets/ 1 - /cgi-bin/rwwwshell.pl 1 - /scripts/iisadmpwd 1 - /scripts/3.exe 1 - /cgi-bin/cvsweb/cvsweb.cgi 1 - /stats/ 1 - /msadc/plist.exe 1 - /cgi-bin/day5datanotifier.cgi 1 - /msadc/cmd.exe 1 - /cgi-bin/getdoc.cgi 1 - /scripts/fpexedll.dll 1 - /scripts/CGImail.exe 1 - /isapi/tstisapi.dll 1 - /cgi-bin/snorkerz.bat 1 - /msadc/hk.exe 1 - /scripts/az.exe 1 - /setting/ 1 - /cgi-bin/dcboard.cgi 1 - /index.asp\\\\ 1 - /NessusTest10088.html 1 - /msadc/up.asp 1 - /file/ 1 - /scripts/shell.jsp 1 - /opendir.php 1 - /cfdocs/toxic.cfm 1 - /password.dat 1 - /html/snort2html.html 1 - /adsamples/config/site.csc 1 - /page.cfm 1 - /cgi-bin/empower 1 - /default.asp%2e 1 - /abczxv.htw 1 - /default.asp::$DATA 1 - /cgi-bin/imagemap.exe 1 - /AdvWorks/equipment/catalog_type.asp 1 - /iisadmpwd/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 - /cgi-bin/wguest.exe 1 - /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /cgi-bin/echo.bat 1 - /msadc/root.exe 1 - /scripts/tools/getdrvs.exe 1 - /exchange/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /stat.htm 1 - /cfdocs/expeval/sendmail.cfm 1 - /_vti_pvt%5clinkinfo.cnf 1 - /index.php3.%5c../..%5cconf/httpd.conf 1 - /iissamples/Default 1 - /cgi-bin/dbmlparser.exe 1 - /.jpilot/ 1 - /cfdocs/expelval/openfile.cfm 1 - /includes/global.inc 1 - /cgi-bin/bnbform.cgi 1 - /cgi-bin/webbbs/webbbs_settings.pl 1 - /scripts/cgimail.exe 1 - /acid/acid_main.php 1 - /default.asp%81 1 - /password.txt 1 - /scripts/exchange.exe 1 - /cgi-bin/faxsurvey 1 - /statistics/ 1 - /msadc/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /................/boot.ini 1 - /wwwstats/ 1 - /msadc/compfilt.dll 1 - /scripts/inuse.exe 1 - /_mem_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 - /iissamples/ExAir 1 - /_vti_bin/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 - /msadc/lsaext.dll 1 - /scripts/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 - /_AuthChangeUrl 2 - /index.asp%2e%41sp 1 - /scripts/ft.exe 1 - /user.log 1 - /logfiles/ 1 - /................../boot.ini 1 - /cgi-bin/dnewsweb.cgi 1 - /msadc/http.dll 1 - /..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /msadc/4.exe 1 - /tool/ 1 - /rpc/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /log.htm 1 - /.............../boot.ini 1 - /logfile 1 - /rightfax/fuwww.dll/ 1 - /phorum/admin/actions/del.php 1 - /cache-stats/ 1 - /_vti_adm/admin.dll 1 - /index.html~ 1 - /scripts/srchadm/webhits.exe 1 - /msadc/pwsdata.dll 1 - /cgi-bin/CrazyWWWBoard.cgi 1 - /cgi-bin/AT-admin.cgi 1 - /cgi-bin/unlg1.2 1 - /msadc/iiscrack.dll 1 - /cgi-bin/bbs_forum.cgi 1 - /search.dll 1 - /cgi-bin/jj 1 - /servlet/com.livesoftware.jrun.plugins.jsp.JSP 1 - /data/ 1 - /scripts/iisadmin.dll 1 - /scripts/fx.asp 1 - /adpassword.txt 1 - /cgi-bin/responder.cgi 1 - /cgi-bin/info2www 1 - /cgi-bin/files.pl 1 - /msadc/stromake.exe 1 - /showfile.asp 1 - /scripts/pskill.exe 1 - /cgi-bin/bizdb1-search.cgi 1 - /weblogs/ 1 - /cgi-bin/netauth.cgi 1 - /image/ 1 - /bbs/ 1 - /..\\..\\..\\..\\..\\..\\autoexec.bat 1 - /cfdocs/exampleapp/publish/admin/addcontent.cfm 1 - /cfusion/cfapps/security/realm_.mdb 1 - /scripts/Carello/Carello.dll 1 - /.nsf/../winnt/win.ini 1 - /cgi-bin/hello.bat 1 - /pbserver/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63/winnt/system32/cmd.exe 1 - /scripts/wguest.exe 1 - /cgi-bin/visadmin.exe 2 - /scripts/mx.exe 1 - /_vti_bin/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 - /cgi-bin/commerce.cgi 1 - /tools/ 1 - /cgi-bin/webbbs/webbbs_post.pl 1 - /cgi-bin/post-query 1 - /lib/ 1 - /NULL.printer 3 - /bin/common/user_update_passwd.pl 1 - /secure/.htaccess 1 - /set/ 1 - /cgi-bin/mailto.cgi 1 - /index.asp+.htr 1 - /scripts/iisadmin 1 - /msadc/tkill.exe 1 - /rpc/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 - /way-board/way-board.cgi 1 - END_SIDER_404 # Host - Pages - Hits - Bandwidth - Last visit date - [Start of last visit date] - [Last page of last visit] # [Start of last visit date] and [Last page of last visit] are saved only if session is not finished # The 10 first Hits must be first (order not required for others) BEGIN_VISITOR 57 69.56.15.5 634 634 341092 20050114211405 66.98.186.9 145 145 78010 20050110124334 69.56.37.102 77 77 41426 20050110091327 69.158.104.44 22 22 5683 20050122114112 69.31.82.202 3 3 1614 20050114133651 68.8.87.231 2 2 538 20050105140813 68.51.107.150 2 2 4502 20050113155732 8.6.221.208 2 2 1250 20050107072447 64.25.7.218 2 2 2251 20050103112754 62.0.47.70 2 2 1076 20050112073352 66.194.6.84 1 1 538 20050101165516 61.178.149.160 1 1 538 20050105143812 63.116.151.124 1 1 538 20050109072321 206.183.1.74 1 1 538 20050110105601 24.226.59.6 1 1 538 20050101164611 218.201.121.99 1 1 538 20050122151654 65.114.254.227 1 1 538 20050107141511 217.28.160.221 1 1 538 20050107032402 67.68.54.10 1 1 538 20050121165202 203.111.193.248 1 1 538 20050125212518 222.90.1.222 1 1 538 20050119204258 84.131.216.198 1 1 538 20050112205622 195.92.95.37 0 1 0 68.62.70.121 2 2 538 20050104203539 82.36.78.78 1 1 538 20050101163120 212.95.252.16 1 1 538 20050115135118 64.202.165.132 1 1 538 20050105033342 203.70.47.33 1 1 538 20050115112920 62.6.139.12 1 1 538 20050121100714 67.234.73.218 1 1 538 20050102095809 201.17.8.249 1 1 538 20050112201433 24.231.241.4 1 1 538 20050112174148 66.194.6.83 1 1 538 20050106015211 61.48.9.252 1 1 538 20050105233845 67.169.108.130 2 2 5776 20050105134205 63.218.101.14 1 1 538 20050108120432 218.201.142.61 1 1 538 20050124080324 208.183.225.11 1 1 538 20050112230352 218.89.17.241 1 1 538 20050117030258 69.142.140.18 1 1 538 20050124215331 24.195.1.92 1 1 538 20050108211604 68.147.152.62 1 1 538 20050108092020 203.95.5.219 1 1 538 20050113032855 67.234.73.107 1 1 538 20050114140834 220.170.88.36 1 1 538 20050104231139 15.252.0.76 1 1 538 20050118031554 137.65.215.34 1 1 538 20050123002947 218.22.249.90 1 1 538 20050123180442 204.49.32.16 1 1 538 20050107000124 68.54.13.128 1 1 538 20050112085132 12.8.192.60 1 1 538 20050125154603 141.89.52.181 1 1 0 20050126005520 20050126005520 / 218.108.24.238 1 1 538 20050124072514 67.154.159.171 2 2 1076 20050123022740 66.194.6.81 1 1 538 20050108200420 61.30.127.3 1 1 538 20050114092658 69.209.112.143 1 1 538 20050109151639 END_VISITOR # Date - Pages - Hits - Bandwidth - Visits BEGIN_DAY 23 20050101 81 81 43578 22 20050102 78 78 41964 17 20050103 80 80 44215 15 20050104 78 78 41426 19 20050105 84 85 49354 30 20050106 78 78 41964 15 20050107 79 79 42676 18 20050108 80 80 43040 23 20050109 76 76 40888 16 20050110 43 43 23134 13 20050112 20 20 10760 8 20050113 70 70 41086 5 20050114 54 54 29052 7 20050115 2 2 1076 2 20050117 1 1 538 1 20050118 1 1 538 1 20050119 1 1 538 1 20050121 2 2 1076 2 20050122 23 23 6221 2 20050123 3 3 1614 3 20050124 3 3 1614 3 20050125 2 2 1076 2 20050126 1 1 0 1 END_DAY # Worm ID - Hits - Last visit # The 10 first Hits must be first (order not required for others) BEGIN_WORMS 0 END_WORMS # Session range - Number of visits BEGIN_SESSION 5 1h+ 51 0s-30s 136 15mn-30mn 10 30s-2mn 1 30mn-1h 27 END_SESSION # URL - Pages - Bandwidth - Entry - Exit # The 10 first Pages must be first (order not required for others) BEGIN_SIDER 16 / 919 492270 219 218 /downloads/lockSites-0.9.7.tar.gz 4 6753 2 2 /downloads/ryansgoodies 2 1250 1 1 /_vti_bin/shtml.exe 2 96 0 1 /_vti_bin/shtml.dll/_vti_rpc 2 207 0 0 /_vti_bin/shtml.dll/nosuch.htm 1 0 0 0 /_vti_bin/fpcount.exe 1 0 0 0 /_vti_bin/shtml.dll 1 0 0 0 /manual/ 1 0 0 0 http://67.234.73.107:25/ 1 538 1 1 /ensim/dsitelookup 1 5238 1 0 /_vti_inf.html 1 0 0 0 /mrtg/ 1 0 0 0 /b2/b2-include/b2edit.showposts.php 1 0 0 0 http://www.yahoo.com/ 1 538 1 1 http://67.234.73.218:25/ 1 538 1 1 END_SIDER