"1", "5", "2004-10-26 17:41:53", "24.165.163.71", "39288", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "6", "2004-10-26 17:41:53", "24.165.163.71", "39287", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "7", "2004-10-26 17:41:54", "24.165.163.71", "39287", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "9", "2004-10-26 17:41:54", "24.165.163.71", "39154", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "12", "2004-10-26 17:41:54", "24.165.163.71", "39154", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "14", "2004-10-26 17:43:15", "24.165.163.71", "39325", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "15", "2004-10-26 17:43:15", "24.165.163.71", "39328", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "16", "2004-10-26 17:43:16", "24.165.163.71", "39328", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "18", "2004-10-26 17:43:16", "24.165.163.71", "39329", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "32", "2004-10-26 18:19:07", "24.165.163.71", "40434", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "33", "2004-10-26 18:19:07", "24.165.163.71", "40435", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "34", "2004-10-26 18:19:08", "24.165.163.71", "40435", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "36", "2004-10-26 18:19:08", "24.165.163.71", "40363", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "38", "2004-10-26 18:19:08", "24.165.163.71", "40443", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "88", "2004-10-26 20:05:28", "24.165.163.71", "46699", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "89", "2004-10-26 20:05:28", "24.165.163.71", "46698", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "90", "2004-10-26 20:05:30", "24.165.163.71", "46707", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "92", "2004-10-26 20:05:30", "24.165.163.71", "46700", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "94", "2004-10-26 20:05:30", "24.165.163.71", "46709", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "95", "2004-10-26 20:05:33", "24.165.163.71", "46700", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "96", "2004-10-26 20:05:33", "24.165.163.71", "46709", "64.233.167.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "131", "2004-10-27 08:46:42", "24.165.163.71", "37734", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "132", "2004-10-27 08:46:42", "24.165.163.71", "37734", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "134", "2004-10-27 08:46:42", "24.165.163.71", "37735", "216.239.41.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "136", "2004-10-27 08:46:42", "24.165.163.71", "37739", "216.239.41.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "138", "2004-10-27 08:46:43", "24.165.163.71", "37735", "216.239.41.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "140", "2004-10-27 08:47:00", "24.165.163.71", "37738", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "141", "2004-10-27 08:47:00", "24.165.163.71", "37738", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "143", "2004-10-27 08:47:01", "24.165.163.71", "37735", "216.239.41.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "145", "2004-10-27 08:47:01", "24.165.163.71", "37739", "216.239.41.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "164", "2004-10-27 17:34:19", "24.165.163.71", "50623", "216.73.86.13", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "371", "2004-10-27 19:37:50", "24.165.163.71", "57411", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "372", "2004-10-27 19:37:50", "24.165.163.71", "57411", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "374", "2004-10-27 19:37:50", "24.165.163.71", "57413", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "376", "2004-10-27 19:37:51", "24.165.163.71", "57420", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "379", "2004-10-27 19:38:08", "24.165.163.71", "57428", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "380", "2004-10-27 19:38:08", "24.165.163.71", "57429", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "381", "2004-10-27 19:38:09", "24.165.163.71", "57430", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "383", "2004-10-27 19:38:09", "24.165.163.71", "57413", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "385", "2004-10-27 19:38:09", "24.165.163.71", "57420", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "387", "2004-10-27 19:38:09", "24.165.163.71", "57413", "216.239.39.104", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "401", "2004-10-27 23:58:43", "24.165.163.71", "36074", "216.74.133.200", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "463", "2004-10-28 20:56:53", "24.165.163.71", "38584", "216.73.86.13", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "484", "2004-10-28 23:38:44", "24.165.163.71", "42953", "216.239.41.99", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "499", "2004-10-29 11:59:22", "24.165.163.71", "32970", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "500", "2004-10-29 11:59:22", "24.165.163.71", "32968", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "502", "2004-10-29 11:59:23", "24.165.163.71", "32920", "216.239.39.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "505", "2004-10-29 11:59:23", "24.165.163.71", "32974", "216.239.41.99", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "507", "2004-10-29 12:01:34", "24.165.163.71", "33031", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "508", "2004-10-29 12:01:35", "24.165.163.71", "33031", "216.12.219.37", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "612", "2004-11-01 09:17:17", "24.165.163.71", "50006", "216.239.39.99", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "613", "2004-11-01 09:17:17", "24.165.163.71", "50006", "216.239.39.99", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "956", "2004-11-01 16:53:50", "24.165.163.71", "41748", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "957", "2004-11-01 16:53:50", "24.165.163.71", "41748", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "958", "2004-11-01 16:53:50", "24.165.163.71", "41748", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "959", "2004-11-01 16:53:50", "24.165.163.71", "41748", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "960", "2004-11-01 16:53:50", "24.165.163.71", "41748", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "961", "2004-11-01 16:53:50", "24.165.163.71", "41748", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1002", "2004-11-01 16:57:57", "24.165.163.71", "42601", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "1006", "2004-11-01 16:58:10", "24.165.163.71", "42601", "66.110.213.225", "80", "[nessus/11032] [cve/1999-1538] [icat/1999-1538] [bugtraq/189] [snort/993] WEB-IIS iisadmin access" "1", "1007", "2004-11-01 16:58:10", "24.165.163.71", "42601", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "1050", "2004-11-01 16:59:56", "24.165.163.71", "43153", "66.110.213.225", "80", "[nessus/10552] [cve/2000-1171] [icat/2000-1171] [bugtraq/1963] [snort/1573] WEB-CGI cgiforum.pl attempt" "1", "1053", "2004-11-01 16:59:56", "24.165.163.71", "43153", "66.110.213.225", "80", "[nessus/10552] [cve/2000-1171] [icat/2000-1171] [bugtraq/1963] [snort/1573] WEB-CGI cgiforum.pl attempt" "1", "1056", "2004-11-01 16:59:56", "24.165.163.71", "43153", "66.110.213.225", "80", "[nessus/10552] [cve/2000-1171] [icat/2000-1171] [bugtraq/1963] [snort/1573] WEB-CGI cgiforum.pl attempt" "1", "1063", "2004-11-01 16:59:58", "24.165.163.71", "43168", "66.110.213.225", "80", "[nessus/10639] [cve/2001-0305] [icat/2001-0305] [bugtraq/2385] [snort/1488] WEB-CGI store.cgi directory traversal attempt" "1", "1066", "2004-11-01 16:59:58", "24.165.163.71", "43168", "66.110.213.225", "80", "[nessus/10639] [cve/2001-0305] [icat/2001-0305] [bugtraq/2385] [snort/1488] WEB-CGI store.cgi directory traversal attempt" "1", "1069", "2004-11-01 16:59:58", "24.165.163.71", "43168", "66.110.213.225", "80", "[nessus/10639] [cve/2001-0305] [icat/2001-0305] [bugtraq/2385] [snort/1488] WEB-CGI store.cgi directory traversal attempt" "1", "1078", "2004-11-01 17:00:02", "24.165.163.71", "43204", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "1081", "2004-11-01 17:00:03", "24.165.163.71", "43204", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "1084", "2004-11-01 17:00:03", "24.165.163.71", "43204", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "1092", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1095", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1098", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1101", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1104", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1107", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1111", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1114", "2004-11-01 17:00:08", "24.165.163.71", "43250", "66.110.213.225", "80", "[nessus/10875] [cve/2002-0307] [icat/2002-0307] [cve/2002-0306] [icat/2002-0306] [bugtraq/4149] [bugtraq/4147] [snort/1522] WEB-MISC ans.pl attempt" "1", "1119", "2004-11-01 17:00:11", "24.165.163.71", "43290", "66.110.213.225", "80", "[bugtraq/9319] [snort/2441] WEB-MISC NetObserve authentication bypass attempt" "1", "1127", "2004-11-01 17:00:15", "24.165.163.71", "43345", "66.110.213.225", "80", "[nessus/10349] [cve/2000-0180] [icat/2000-0180] [bugtraq/1052] [snort/1194] WEB-CGI sojourn.cgi File attempt" "1", "1131", "2004-11-01 17:00:15", "24.165.163.71", "43345", "66.110.213.225", "80", "[nessus/10349] [cve/2000-0180] [icat/2000-0180] [bugtraq/1052] [snort/1194] WEB-CGI sojourn.cgi File attempt" "1", "1135", "2004-11-01 17:00:15", "24.165.163.71", "43345", "66.110.213.225", "80", "[nessus/10349] [cve/2000-0180] [icat/2000-0180] [bugtraq/1052] [snort/1194] WEB-CGI sojourn.cgi File attempt" "1", "1151", "2004-11-01 17:00:19", "24.165.163.71", "43406", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "1169", "2004-11-01 17:00:28", "24.165.163.71", "43492", "66.110.213.225", "80", "[nessus/10602] [cve/2001-0253] [icat/2001-0253] [bugtraq/2314] [snort/803] WEB-CGI HyperSeek hsx.cgi directory traversal attempt" "1", "1172", "2004-11-01 17:00:28", "24.165.163.71", "43492", "66.110.213.225", "80", "[nessus/10602] [cve/2001-0253] [icat/2001-0253] [bugtraq/2314] [snort/803] WEB-CGI HyperSeek hsx.cgi directory traversal attempt" "1", "1175", "2004-11-01 17:00:28", "24.165.163.71", "43492", "66.110.213.225", "80", "[nessus/10602] [cve/2001-0253] [icat/2001-0253] [bugtraq/2314] [snort/803] WEB-CGI HyperSeek hsx.cgi directory traversal attempt" "1", "1178", "2004-11-01 17:00:30", "24.165.163.71", "43518", "66.110.213.225", "80", "url[nessus/11213] [bugtraq/9561] [snort/2056] WEB-MISC TRACE attempt" "1", "1179", "2004-11-01 17:00:30", "24.165.163.71", "43522", "66.110.213.225", "80", "[nessus/10924] [cve/2002-0495] [icat/2002-0495] [bugtraq/4368] [snort/1547] WEB-CGI csSearch.cgi arbitrary command execution attempt" "1", "1181", "2004-11-01 17:00:31", "24.165.163.71", "43522", "66.110.213.225", "80", "[nessus/10924] [cve/2002-0495] [icat/2002-0495] [bugtraq/4368] [snort/1547] WEB-CGI csSearch.cgi arbitrary command execution attempt" "1", "1183", "2004-11-01 17:00:31", "24.165.163.71", "43522", "66.110.213.225", "80", "[nessus/10924] [cve/2002-0495] [icat/2002-0495] [bugtraq/4368] [snort/1547] WEB-CGI csSearch.cgi arbitrary command execution attempt" "1", "1217", "2004-11-01 17:00:39", "24.165.163.71", "43629", "66.110.213.225", "80", "[nessus/1007] [cve/1999-0736] [icat/1999-0736] [bugtraq/167] [snort/1401] WEB-IIS /msadc/samples/ access" "1", "1219", "2004-11-01 17:00:39", "24.165.163.71", "43629", "66.110.213.225", "80", "[nessus/10007] [cve/1999-0736] [icat/1999-0736] [bugtraq/167] [snort/1404] WEB-MISC showcode access" "1", "1237", "2004-11-01 17:00:43", "24.165.163.71", "43702", "66.110.213.225", "80", "[nessus/10584] [cve/2001-0075] [icat/2001-0075] [bugtraq/2156] [snort/1051] WEB-CGI technote main.cgi file directory traversal attempt" "1", "1244", "2004-11-01 17:00:43", "24.165.163.71", "43704", "66.110.213.225", "80", "[bugtraq/6841] [snort/2066] WEB-MISC Lotus Notes .pl script source download attempt" "1", "1256", "2004-11-01 17:00:44", "24.165.163.71", "43704", "66.110.213.225", "80", "[bugtraq/6841] [snort/2066] WEB-MISC Lotus Notes .pl script source download attempt" "1", "1262", "2004-11-01 17:00:46", "24.165.163.71", "43755", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1263", "2004-11-01 17:00:46", "24.165.163.71", "43755", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1264", "2004-11-01 17:00:46", "24.165.163.71", "43755", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1265", "2004-11-01 17:00:47", "24.165.163.71", "43766", "66.110.213.225", "80", "[cve/2000-0208] [icat/2000-0208] [snort/1600] WEB-CGI htsearch arbitrary configuration file attempt" "1", "1267", "2004-11-01 17:00:47", "24.165.163.71", "43766", "66.110.213.225", "80", "[cve/2000-0208] [icat/2000-0208] [snort/1600] WEB-CGI htsearch arbitrary configuration file attempt" "1", "1269", "2004-11-01 17:00:47", "24.165.163.71", "43766", "66.110.213.225", "80", "[cve/2000-0208] [icat/2000-0208] [snort/1600] WEB-CGI htsearch arbitrary configuration file attempt" "1", "1276", "2004-11-01 17:00:47", "24.165.163.71", "43779", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1278", "2004-11-01 17:00:47", "24.165.163.71", "43779", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1281", "2004-11-01 17:00:47", "24.165.163.71", "43779", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1303", "2004-11-01 17:00:51", "24.165.163.71", "43860", "66.110.213.225", "80", "[nessus/10609] [cve/2001-0224] [icat/2001-0224] [bugtraq/2374] [snort/1589] WEB-MISC musicat empower attempt" "1", "1305", "2004-11-01 17:00:51", "24.165.163.71", "43860", "66.110.213.225", "80", "[nessus/10609] [cve/2001-0224] [icat/2001-0224] [bugtraq/2374] [snort/1589] WEB-MISC musicat empower attempt" "1", "1307", "2004-11-01 17:00:51", "24.165.163.71", "43860", "66.110.213.225", "80", "[nessus/10609] [cve/2001-0224] [icat/2001-0224] [bugtraq/2374] [snort/1589] WEB-MISC musicat empower attempt" "1", "1310", "2004-11-01 17:00:52", "24.165.163.71", "43876", "66.110.213.225", "80", "[nessus/11001] [cve/2002-0232] [icat/2002-0232] [bugtraq/4017] [snort/1862] WEB-CGI mrtg.cgi directory traversal attempt" "1", "1312", "2004-11-01 17:00:52", "24.165.163.71", "43876", "66.110.213.225", "80", "[nessus/11001] [cve/2002-0232] [icat/2002-0232] [bugtraq/4017] [snort/1862] WEB-CGI mrtg.cgi directory traversal attempt" "1", "1315", "2004-11-01 17:00:52", "24.165.163.71", "43876", "66.110.213.225", "80", "[nessus/11001] [cve/2002-0232] [icat/2002-0232] [bugtraq/4017] [snort/1862] WEB-CGI mrtg.cgi directory traversal attempt" "1", "1317", "2004-11-01 17:00:52", "24.165.163.71", "43876", "66.110.213.225", "80", "[nessus/11001] [cve/2002-0232] [icat/2002-0232] [bugtraq/4017] [snort/1862] WEB-CGI mrtg.cgi directory traversal attempt" "1", "1320", "2004-11-01 17:00:52", "24.165.163.71", "43876", "66.110.213.225", "80", "[nessus/11001] [cve/2002-0232] [icat/2002-0232] [bugtraq/4017] [snort/1862] WEB-CGI mrtg.cgi directory traversal attempt" "1", "1323", "2004-11-01 17:00:52", "24.165.163.71", "43876", "66.110.213.225", "80", "[nessus/11001] [cve/2002-0232] [icat/2002-0232] [bugtraq/4017] [snort/1862] WEB-CGI mrtg.cgi directory traversal attempt" "1", "1328", "2004-11-01 17:00:53", "24.165.163.71", "43902", "66.110.213.225", "80", "[nessus/10664] [cve/2001-0463] [icat/2001-0463] [bugtraq/2663] [snort/1704] WEB-CGI cal_make.pl directory traversal attempt" "1", "1331", "2004-11-01 17:00:53", "24.165.163.71", "43902", "66.110.213.225", "80", "[nessus/10664] [cve/2001-0463] [icat/2001-0463] [bugtraq/2663] [snort/1704] WEB-CGI cal_make.pl directory traversal attempt" "1", "1334", "2004-11-01 17:00:53", "24.165.163.71", "43902", "66.110.213.225", "80", "[nessus/10664] [cve/2001-0463] [icat/2001-0463] [bugtraq/2663] [snort/1704] WEB-CGI cal_make.pl directory traversal attempt" "1", "1348", "2004-11-01 17:00:55", "24.165.163.71", "43945", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "1362", "2004-11-01 17:00:59", "24.165.163.71", "44009", "66.110.213.225", "80", "[nessus/11760] [bugtraq/7933] [snort/2227] WEB-PHP forum_details.php access" "1", "1363", "2004-11-01 17:00:59", "24.165.163.71", "44009", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1364", "2004-11-01 17:00:59", "24.165.163.71", "44009", "66.110.213.225", "80", "[nessus/11760] [bugtraq/7933] [snort/2227] WEB-PHP forum_details.php access" "1", "1365", "2004-11-01 17:00:59", "24.165.163.71", "44009", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1366", "2004-11-01 17:00:59", "24.165.163.71", "44011", "66.110.213.225", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "1367", "2004-11-01 17:00:59", "24.165.163.71", "44009", "66.110.213.225", "80", "[nessus/11760] [bugtraq/7933] [snort/2227] WEB-PHP forum_details.php access" "1", "1368", "2004-11-01 17:00:59", "24.165.163.71", "44009", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1370", "2004-11-01 17:00:59", "24.165.163.71", "44011", "66.110.213.225", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "1371", "2004-11-01 17:00:59", "24.165.163.71", "44011", "66.110.213.225", "80", "[bugtraq/2527] [snort/1054] WEB-MISC weblogic/tomcat .jsp view source attempt" "1", "1387", "2004-11-01 17:01:02", "24.165.163.71", "44042", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "1409", "2004-11-01 17:01:07", "24.165.163.71", "44123", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "1410", "2004-11-01 17:01:07", "24.165.163.71", "44123", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "1411", "2004-11-01 17:01:07", "24.165.163.71", "44123", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "1412", "2004-11-01 17:01:07", "24.165.163.71", "44123", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "1413", "2004-11-01 17:01:08", "24.165.163.71", "44135", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1415", "2004-11-01 17:01:08", "24.165.163.71", "44136", "66.110.213.225", "80", "[cve/2000-0832] [icat/2000-0832] [snort/1615] WEB-MISC htgrep attempt" "1", "1417", "2004-11-01 17:01:08", "24.165.163.71", "44135", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1419", "2004-11-01 17:01:08", "24.165.163.71", "44136", "66.110.213.225", "80", "[cve/2000-0832] [icat/2000-0832] [snort/1615] WEB-MISC htgrep attempt" "1", "1421", "2004-11-01 17:01:08", "24.165.163.71", "44135", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1423", "2004-11-01 17:01:08", "24.165.163.71", "44136", "66.110.213.225", "80", "[cve/2000-0832] [icat/2000-0832] [snort/1615] WEB-MISC htgrep attempt" "1", "1439", "2004-11-01 17:01:12", "24.165.163.71", "44190", "66.110.213.225", "80", "[nessus/11761] [bugtraq/7965] [bugtraq/7962] [snort/2228] WEB-PHP phpMyAdmin db_details_importdocsql.php access" "1", "1441", "2004-11-01 17:01:12", "24.165.163.71", "44190", "66.110.213.225", "80", "[nessus/11761] [bugtraq/7965] [bugtraq/7962] [snort/2228] WEB-PHP phpMyAdmin db_details_importdocsql.php access" "1", "1444", "2004-11-01 17:01:12", "24.165.163.71", "44190", "66.110.213.225", "80", "[nessus/11761] [bugtraq/7965] [bugtraq/7962] [snort/2228] WEB-PHP phpMyAdmin db_details_importdocsql.php access" "1", "1447", "2004-11-01 17:01:12", "24.165.163.71", "44190", "66.110.213.225", "80", "[nessus/11761] [bugtraq/7965] [bugtraq/7962] [snort/2228] WEB-PHP phpMyAdmin db_details_importdocsql.php access" "1", "1461", "2004-11-01 17:01:18", "24.165.163.71", "44252", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1462", "2004-11-01 17:01:18", "24.165.163.71", "44252", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1463", "2004-11-01 17:01:23", "24.165.163.71", "44303", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1464", "2004-11-01 17:01:23", "24.165.163.71", "44303", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1465", "2004-11-01 17:01:23", "24.165.163.71", "44303", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1466", "2004-11-01 17:01:23", "24.165.163.71", "44305", "66.110.213.225", "80", "[cve/2000-0432] [icat/2000-0432] [snort/1536] WEB-CGI calendar_admin.pl arbitrary command execution attempt" "1", "1469", "2004-11-01 17:01:23", "24.165.163.71", "44305", "66.110.213.225", "80", "[cve/2000-0432] [icat/2000-0432] [snort/1536] WEB-CGI calendar_admin.pl arbitrary command execution attempt" "1", "1475", "2004-11-01 17:01:23", "24.165.163.71", "44305", "66.110.213.225", "80", "[cve/2000-0432] [icat/2000-0432] [snort/1536] WEB-CGI calendar_admin.pl arbitrary command execution attempt" "1", "1478", "2004-11-01 17:01:23", "24.165.163.71", "44305", "66.110.213.225", "80", "[cve/2000-0432] [icat/2000-0432] [snort/1536] WEB-CGI calendar_admin.pl arbitrary command execution attempt" "1", "1484", "2004-11-01 17:01:23", "24.165.163.71", "44305", "66.110.213.225", "80", "[cve/2000-0432] [icat/2000-0432] [snort/1536] WEB-CGI calendar_admin.pl arbitrary command execution attempt" "1", "1487", "2004-11-01 17:01:24", "24.165.163.71", "44305", "66.110.213.225", "80", "[cve/2000-0432] [icat/2000-0432] [snort/1536] WEB-CGI calendar_admin.pl arbitrary command execution attempt" "1", "1512", "2004-11-01 17:01:27", "24.165.163.71", "44363", "66.110.213.225", "80", "[nessus/12048] [nessus/10576] [cve/1999-0737] [icat/1999-0737] [snort/1403] WEB-MISC viewcode access" "1", "1514", "2004-11-01 17:01:29", "24.165.163.71", "44388", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1515", "2004-11-01 17:01:29", "24.165.163.71", "44388", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1516", "2004-11-01 17:01:29", "24.165.163.71", "44388", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1517", "2004-11-01 17:01:29", "24.165.163.71", "44388", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1522", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1523", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1525", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1526", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1527", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1529", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1530", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1531", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1533", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1534", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[nessus/11767] [cve/2003-0486] [icat/2003-0486] [bugtraq/7979] [snort/2229] WEB-PHP viewtopic.php access" "1", "1535", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1537", "2004-11-01 17:01:37", "24.165.163.71", "44484", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1542", "2004-11-01 17:01:41", "24.165.163.71", "44541", "66.110.213.225", "80", "[nessus/10680] [cve/2000-0630] [icat/2000-0630] [bugtraq/1488] [snort/1725] WEB-IIS +.htr code fragment attempt" "1", "1545", "2004-11-01 17:01:42", "24.165.163.71", "44559", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "1555", "2004-11-01 17:01:45", "24.165.163.71", "44603", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1576", "2004-11-01 17:01:51", "24.165.163.71", "44670", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1577", "2004-11-01 17:01:51", "24.165.163.71", "44670", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1578", "2004-11-01 17:01:51", "24.165.163.71", "44670", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1586", "2004-11-01 17:01:54", "24.165.163.71", "44704", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1590", "2004-11-01 17:01:56", "24.165.163.71", "44738", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1597", "2004-11-01 17:01:59", "24.165.163.71", "44777", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1611", "2004-11-01 17:02:02", "24.165.163.71", "44827", "66.110.213.225", "80", "[nessus/10105] [cve/2000-0208] [icat/2000-0208] [bugtraq/1026] [snort/1601] WEB-CGI htsearch arbitrary file read attempt" "1", "1614", "2004-11-01 17:02:02", "24.165.163.71", "44827", "66.110.213.225", "80", "[nessus/10105] [cve/2000-0208] [icat/2000-0208] [bugtraq/1026] [snort/1601] WEB-CGI htsearch arbitrary file read attempt" "1", "1617", "2004-11-01 17:02:02", "24.165.163.71", "44827", "66.110.213.225", "80", "[nessus/10105] [cve/2000-0208] [icat/2000-0208] [bugtraq/1026] [snort/1601] WEB-CGI htsearch arbitrary file read attempt" "1", "1701", "2004-11-01 17:02:33", "24.165.163.71", "45138", "66.110.213.225", "80", "[bugtraq/1997] [snort/1490] WEB-PHP Phorum /support/common.php attempt" "1", "1702", "2004-11-01 17:02:33", "24.165.163.71", "45138", "66.110.213.225", "80", "[bugtraq/9361] [bugtraq/1997] [snort/1491] WEB-PHP Phorum /support/common.php access" "1", "1706", "2004-11-01 17:02:33", "24.165.163.71", "45138", "66.110.213.225", "80", "[bugtraq/1997] [snort/1490] WEB-PHP Phorum /support/common.php attempt" "1", "1707", "2004-11-01 17:02:33", "24.165.163.71", "45138", "66.110.213.225", "80", "[bugtraq/9361] [bugtraq/1997] [snort/1491] WEB-PHP Phorum /support/common.php access" "1", "1711", "2004-11-01 17:02:33", "24.165.163.71", "45138", "66.110.213.225", "80", "[bugtraq/1997] [snort/1490] WEB-PHP Phorum /support/common.php attempt" "1", "1712", "2004-11-01 17:02:33", "24.165.163.71", "45138", "66.110.213.225", "80", "[bugtraq/9361] [bugtraq/1997] [snort/1491] WEB-PHP Phorum /support/common.php access" "1", "1724", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1725", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1726", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1727", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1728", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1729", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1730", "2004-11-01 17:02:38", "24.165.163.71", "45182", "66.110.213.225", "80", "[nessus/11041] [cve/2002-0682] [icat/2002-0682] [bugtraq/5193] [snort/1827] WEB-MISC Tomcat servlet mapping cross site scripting attempt" "1", "1733", "2004-11-01 17:02:40", "24.165.163.71", "45204", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "1734", "2004-11-01 17:02:41", "24.165.163.71", "45212", "66.110.213.225", "80", "[nessus/11032] [cve/1999-1538] [icat/1999-1538] [bugtraq/189] [snort/993] WEB-IIS iisadmin access" "1", "1749", "2004-11-01 17:02:46", "24.165.163.71", "45231", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1750", "2004-11-01 17:02:46", "24.165.163.71", "45231", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1751", "2004-11-01 17:02:46", "24.165.163.71", "45231", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1752", "2004-11-01 17:02:47", "24.165.163.71", "45237", "66.110.213.225", "80", "[nessus/10570] [cve/2000-1025] [icat/2000-1025] [cve/2000-1024] [icat/2000-1024] [bugtraq/1876] [bugtraq/1868] [snort/1080] WEB-MISC unify eWave ServletExec upload" "1", "1777", "2004-11-01 17:03:08", "24.165.163.71", "45281", "66.110.213.225", "80", "url[nessus/12271] [cve/2004-0204] [icat/2004-0204] [bugtraq/10260] [snort/2582] WEB-MISC Crystal Reports crystalImageHandler.aspx directory traversal attempt" "1", "1784", "2004-11-01 17:03:08", "24.165.163.71", "45281", "66.110.213.225", "80", "url[nessus/12271] [cve/2004-0204] [icat/2004-0204] [bugtraq/10260] [snort/2582] WEB-MISC Crystal Reports crystalImageHandler.aspx directory traversal attempt" "1", "1787", "2004-11-01 17:03:08", "24.165.163.71", "45281", "66.110.213.225", "80", "url[nessus/12271] [cve/2004-0204] [icat/2004-0204] [bugtraq/10260] [snort/2582] WEB-MISC Crystal Reports crystalImageHandler.aspx directory traversal attempt" "1", "1790", "2004-11-01 17:03:08", "24.165.163.71", "45281", "66.110.213.225", "80", "url[nessus/12271] [cve/2004-0204] [icat/2004-0204] [bugtraq/10260] [snort/2582] WEB-MISC Crystal Reports crystalImageHandler.aspx directory traversal attempt" "1", "1793", "2004-11-01 17:03:08", "24.165.163.71", "45281", "66.110.213.225", "80", "url[nessus/12271] [cve/2004-0204] [icat/2004-0204] [bugtraq/10260] [snort/2582] WEB-MISC Crystal Reports crystalImageHandler.aspx directory traversal attempt" "1", "1797", "2004-11-01 17:03:08", "24.165.163.71", "45281", "66.110.213.225", "80", "url[nessus/12271] [cve/2004-0204] [icat/2004-0204] [bugtraq/10260] [snort/2582] WEB-MISC Crystal Reports crystalImageHandler.aspx directory traversal attempt" "1", "1811", "2004-11-01 17:03:26", "24.165.163.71", "45324", "66.110.213.225", "80", "[nessus/10645] [cve/2001-0466] [icat/2001-0466] [snort/1730] WEB-CGI ustorekeeper.pl directory traversal attempt" "1", "1814", "2004-11-01 17:03:26", "24.165.163.71", "45324", "66.110.213.225", "80", "[nessus/10645] [cve/2001-0466] [icat/2001-0466] [snort/1730] WEB-CGI ustorekeeper.pl directory traversal attempt" "1", "1817", "2004-11-01 17:03:26", "24.165.163.71", "45324", "66.110.213.225", "80", "[nessus/10645] [cve/2001-0466] [icat/2001-0466] [snort/1730] WEB-CGI ustorekeeper.pl directory traversal attempt" "1", "1822", "2004-11-01 17:03:39", "24.165.163.71", "45357", "66.110.213.225", "80", "[nessus/10611] [cve/2001-0217] [icat/2001-0217] [bugtraq/2372] [snort/1222] WEB-CGI pals-cgi arbitrary file access attempt" "1", "1825", "2004-11-01 17:03:39", "24.165.163.71", "45357", "66.110.213.225", "80", "[nessus/10611] [cve/2001-0217] [icat/2001-0217] [bugtraq/2372] [snort/1222] WEB-CGI pals-cgi arbitrary file access attempt" "1", "1828", "2004-11-01 17:03:39", "24.165.163.71", "45357", "66.110.213.225", "80", "[nessus/10611] [cve/2001-0217] [icat/2001-0217] [bugtraq/2372] [snort/1222] WEB-CGI pals-cgi arbitrary file access attempt" "1", "1831", "2004-11-01 17:03:40", "24.165.163.71", "45357", "66.110.213.225", "80", "[nessus/10611] [cve/2001-0217] [icat/2001-0217] [bugtraq/2372] [snort/1222] WEB-CGI pals-cgi arbitrary file access attempt" "1", "1835", "2004-11-01 17:03:40", "24.165.163.71", "45364", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1857", "2004-11-01 17:03:53", "24.165.163.71", "45456", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1859", "2004-11-01 17:03:53", "24.165.163.71", "45456", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1861", "2004-11-01 17:03:53", "24.165.163.71", "45456", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1875", "2004-11-01 17:04:03", "24.165.163.71", "45522", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1877", "2004-11-01 17:04:03", "24.165.163.71", "45522", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1879", "2004-11-01 17:04:03", "24.165.163.71", "45522", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "1883", "2004-11-01 17:04:06", "24.165.163.71", "45543", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "1897", "2004-11-01 17:04:15", "24.165.163.71", "45610", "66.110.213.225", "80", "[nessus/10573] [snort/1009] WEB-IIS directory listing" "1", "1898", "2004-11-01 17:04:15", "24.165.163.71", "45610", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "1903", "2004-11-01 17:04:17", "24.165.163.71", "45625", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1906", "2004-11-01 17:04:17", "24.165.163.71", "45625", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1909", "2004-11-01 17:04:17", "24.165.163.71", "45628", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1911", "2004-11-01 17:04:17", "24.165.163.71", "45628", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1914", "2004-11-01 17:04:17", "24.165.163.71", "45629", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1917", "2004-11-01 17:04:18", "24.165.163.71", "45631", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1920", "2004-11-01 17:04:18", "24.165.163.71", "45631", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1923", "2004-11-01 17:04:18", "24.165.163.71", "45632", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1926", "2004-11-01 17:04:18", "24.165.163.71", "45633", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1928", "2004-11-01 17:04:18", "24.165.163.71", "45633", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1931", "2004-11-01 17:04:18", "24.165.163.71", "45633", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1933", "2004-11-01 17:04:18", "24.165.163.71", "45633", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1936", "2004-11-01 17:04:18", "24.165.163.71", "45634", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1938", "2004-11-01 17:04:18", "24.165.163.71", "45634", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1941", "2004-11-01 17:04:18", "24.165.163.71", "45635", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1944", "2004-11-01 17:04:19", "24.165.163.71", "45636", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1947", "2004-11-01 17:04:19", "24.165.163.71", "45636", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1950", "2004-11-01 17:04:19", "24.165.163.71", "45637", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1953", "2004-11-01 17:04:19", "24.165.163.71", "45638", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1955", "2004-11-01 17:04:19", "24.165.163.71", "45638", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1958", "2004-11-01 17:04:19", "24.165.163.71", "45638", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1960", "2004-11-01 17:04:19", "24.165.163.71", "45638", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1963", "2004-11-01 17:04:19", "24.165.163.71", "45639", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1965", "2004-11-01 17:04:19", "24.165.163.71", "45639", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1968", "2004-11-01 17:04:20", "24.165.163.71", "45641", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1971", "2004-11-01 17:04:20", "24.165.163.71", "45642", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1974", "2004-11-01 17:04:20", "24.165.163.71", "45642", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1977", "2004-11-01 17:04:20", "24.165.163.71", "45643", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1980", "2004-11-01 17:04:20", "24.165.163.71", "45644", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1982", "2004-11-01 17:04:20", "24.165.163.71", "45644", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1985", "2004-11-01 17:04:20", "24.165.163.71", "45644", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1988", "2004-11-01 17:04:20", "24.165.163.71", "45644", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1992", "2004-11-01 17:04:20", "24.165.163.71", "45645", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1995", "2004-11-01 17:04:21", "24.165.163.71", "45645", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "1999", "2004-11-01 17:04:21", "24.165.163.71", "45646", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2002", "2004-11-01 17:04:21", "24.165.163.71", "45647", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2006", "2004-11-01 17:04:21", "24.165.163.71", "45647", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2010", "2004-11-01 17:04:21", "24.165.163.71", "45648", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2014", "2004-11-01 17:04:21", "24.165.163.71", "45649", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2016", "2004-11-01 17:04:21", "24.165.163.71", "45649", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2019", "2004-11-01 17:04:21", "24.165.163.71", "45649", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2022", "2004-11-01 17:04:21", "24.165.163.71", "45649", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2026", "2004-11-01 17:04:22", "24.165.163.71", "45650", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2029", "2004-11-01 17:04:22", "24.165.163.71", "45650", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2033", "2004-11-01 17:04:22", "24.165.163.71", "45651", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2036", "2004-11-01 17:04:22", "24.165.163.71", "45652", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2040", "2004-11-01 17:04:22", "24.165.163.71", "45652", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2044", "2004-11-01 17:04:22", "24.165.163.71", "45653", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2048", "2004-11-01 17:04:22", "24.165.163.71", "45654", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2050", "2004-11-01 17:04:22", "24.165.163.71", "45654", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2053", "2004-11-01 17:04:22", "24.165.163.71", "45654", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2055", "2004-11-01 17:04:23", "24.165.163.71", "45654", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2058", "2004-11-01 17:04:23", "24.165.163.71", "45655", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2060", "2004-11-01 17:04:23", "24.165.163.71", "45655", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2063", "2004-11-01 17:04:23", "24.165.163.71", "45656", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2066", "2004-11-01 17:04:23", "24.165.163.71", "45657", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2069", "2004-11-01 17:04:23", "24.165.163.71", "45657", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2072", "2004-11-01 17:04:23", "24.165.163.71", "45658", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2075", "2004-11-01 17:04:23", "24.165.163.71", "45659", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2077", "2004-11-01 17:04:24", "24.165.163.71", "45659", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2080", "2004-11-01 17:04:24", "24.165.163.71", "45659", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2082", "2004-11-01 17:04:24", "24.165.163.71", "45659", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2085", "2004-11-01 17:04:24", "24.165.163.71", "45660", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2087", "2004-11-01 17:04:24", "24.165.163.71", "45660", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2090", "2004-11-01 17:04:24", "24.165.163.71", "45661", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2093", "2004-11-01 17:04:24", "24.165.163.71", "45662", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2096", "2004-11-01 17:04:24", "24.165.163.71", "45662", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2099", "2004-11-01 17:04:24", "24.165.163.71", "45663", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2102", "2004-11-01 17:04:25", "24.165.163.71", "45664", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2104", "2004-11-01 17:04:25", "24.165.163.71", "45664", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2107", "2004-11-01 17:04:25", "24.165.163.71", "45664", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2109", "2004-11-01 17:04:25", "24.165.163.71", "45664", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2112", "2004-11-01 17:04:25", "24.165.163.71", "45665", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2114", "2004-11-01 17:04:25", "24.165.163.71", "45665", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2117", "2004-11-01 17:04:25", "24.165.163.71", "45666", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2120", "2004-11-01 17:04:25", "24.165.163.71", "45667", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2123", "2004-11-01 17:04:25", "24.165.163.71", "45667", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2126", "2004-11-01 17:04:25", "24.165.163.71", "45668", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2129", "2004-11-01 17:04:26", "24.165.163.71", "45669", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2131", "2004-11-01 17:04:26", "24.165.163.71", "45669", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2134", "2004-11-01 17:04:26", "24.165.163.71", "45669", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2136", "2004-11-01 17:04:26", "24.165.163.71", "45669", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2139", "2004-11-01 17:04:26", "24.165.163.71", "45670", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2141", "2004-11-01 17:04:26", "24.165.163.71", "45670", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2144", "2004-11-01 17:04:26", "24.165.163.71", "45671", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2147", "2004-11-01 17:04:26", "24.165.163.71", "45672", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2150", "2004-11-01 17:04:26", "24.165.163.71", "45672", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2153", "2004-11-01 17:04:27", "24.165.163.71", "45673", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2156", "2004-11-01 17:04:27", "24.165.163.71", "45674", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2158", "2004-11-01 17:04:27", "24.165.163.71", "45674", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2161", "2004-11-01 17:04:27", "24.165.163.71", "45674", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2163", "2004-11-01 17:04:27", "24.165.163.71", "45674", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2166", "2004-11-01 17:04:27", "24.165.163.71", "45675", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2168", "2004-11-01 17:04:27", "24.165.163.71", "45675", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2171", "2004-11-01 17:04:27", "24.165.163.71", "45677", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2174", "2004-11-01 17:04:27", "24.165.163.71", "45678", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2177", "2004-11-01 17:04:28", "24.165.163.71", "45678", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2180", "2004-11-01 17:04:28", "24.165.163.71", "45681", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2183", "2004-11-01 17:04:28", "24.165.163.71", "45682", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2185", "2004-11-01 17:04:28", "24.165.163.71", "45682", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "2190", "2004-11-01 17:04:45", "24.165.163.71", "45802", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2193", "2004-11-01 17:04:45", "24.165.163.71", "45802", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2196", "2004-11-01 17:04:45", "24.165.163.71", "45802", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2226", "2004-11-01 17:05:11", "24.165.163.71", "45883", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "2227", "2004-11-01 17:05:11", "24.165.163.71", "45883", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "2228", "2004-11-01 17:05:11", "24.165.163.71", "45883", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "2267", "2004-11-01 17:05:40", "24.165.163.71", "45964", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2268", "2004-11-01 17:05:40", "24.165.163.71", "45964", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2269", "2004-11-01 17:05:40", "24.165.163.71", "45964", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2270", "2004-11-01 17:05:42", "24.165.163.71", "45974", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2271", "2004-11-01 17:05:42", "24.165.163.71", "45974", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2272", "2004-11-01 17:05:42", "24.165.163.71", "45974", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2274", "2004-11-01 17:05:46", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2275", "2004-11-01 17:05:46", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2276", "2004-11-01 17:05:46", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2277", "2004-11-01 17:05:47", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2279", "2004-11-01 17:05:47", "24.165.163.71", "46008", "66.110.213.225", "80", "[nessus/10782] [nessus/10076] [cve/2000-0411] [icat/2000-0411] [cve/1999-0172] [icat/1999-0172] [bugtraq/2079] [bugtraq/1187] [arachNIDS/226] [snort/1610] WEB-CGI formmail arbitrary command execution attempt" "1", "2281", "2004-11-01 17:05:47", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2283", "2004-11-01 17:05:47", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2285", "2004-11-01 17:05:47", "24.165.163.71", "46009", "66.110.213.225", "80", "[nessus/10782] [nessus/10076] [cve/2000-0411] [icat/2000-0411] [cve/1999-0172] [icat/1999-0172] [bugtraq/2079] [bugtraq/1187] [arachNIDS/226] [snort/1610] WEB-CGI formmail arbitrary command execution attempt" "1", "2287", "2004-11-01 17:05:47", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2289", "2004-11-01 17:05:47", "24.165.163.71", "46007", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2291", "2004-11-01 17:05:47", "24.165.163.71", "46010", "66.110.213.225", "80", "[nessus/10782] [nessus/10076] [cve/2000-0411] [icat/2000-0411] [cve/1999-0172] [icat/1999-0172] [bugtraq/2079] [bugtraq/1187] [arachNIDS/226] [snort/1610] WEB-CGI formmail arbitrary command execution attempt" "1", "2295", "2004-11-01 17:05:47", "24.165.163.71", "46012", "66.110.213.225", "80", "[nessus/10782] [nessus/10076] [cve/2000-0411] [icat/2000-0411] [cve/1999-0172] [icat/1999-0172] [bugtraq/2079] [bugtraq/1187] [arachNIDS/226] [snort/1610] WEB-CGI formmail arbitrary command execution attempt" "1", "2299", "2004-11-01 17:05:47", "24.165.163.71", "46014", "66.110.213.225", "80", "[nessus/10782] [nessus/10076] [cve/2000-0411] [icat/2000-0411] [cve/1999-0172] [icat/1999-0172] [bugtraq/2079] [bugtraq/1187] [arachNIDS/226] [snort/1610] WEB-CGI formmail arbitrary command execution attempt" "1", "2303", "2004-11-01 17:05:47", "24.165.163.71", "46016", "66.110.213.225", "80", "[nessus/10782] [nessus/10076] [cve/2000-0411] [icat/2000-0411] [cve/1999-0172] [icat/1999-0172] [bugtraq/2079] [bugtraq/1187] [arachNIDS/226] [snort/1610] WEB-CGI formmail arbitrary command execution attempt" "1", "2310", "2004-11-01 17:06:05", "24.165.163.71", "46041", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "2313", "2004-11-01 17:06:08", "24.165.163.71", "46062", "66.110.213.225", "80", "[nessus/11158] [cve/2002-1436] [icat/2002-1436] [bugtraq/5520] [snort/1979] WEB-MISC perl post attempt" "1", "2314", "2004-11-01 17:06:12", "24.165.163.71", "46097", "66.110.213.225", "80", "[nessus/11032] [cve/1999-1538] [icat/1999-1538] [bugtraq/189] [snort/993] WEB-IIS iisadmin access" "1", "2315", "2004-11-01 17:06:12", "24.165.163.71", "46101", "66.110.213.225", "80", "[nessus/10142] [cve/2000-0153] [icat/2000-0153] [cve/1999-0386] [icat/1999-0386] [bugtraq/989] [arachNIDS/248] [snort/966] WEB-FRONTPAGE .... request" "1", "2338", "2004-11-01 17:06:27", "24.165.163.71", "46134", "66.110.213.225", "80", "[cve/2000-0304] [icat/2000-0304] [bugtraq/2110] [bugtraq/1191] [snort/1018] WEB-IIS iisadmpwd attempt" "1", "2341", "2004-11-01 17:06:27", "24.165.163.71", "46134", "66.110.213.225", "80", "[cve/2000-0304] [icat/2000-0304] [bugtraq/2110] [bugtraq/1191] [snort/1018] WEB-IIS iisadmpwd attempt" "1", "2343", "2004-11-01 17:06:27", "24.165.163.71", "46134", "66.110.213.225", "80", "[cve/2000-0304] [icat/2000-0304] [bugtraq/2110] [bugtraq/1191] [snort/1018] WEB-IIS iisadmpwd attempt" "1", "2345", "2004-11-01 17:06:27", "24.165.163.71", "46134", "66.110.213.225", "80", "[cve/2000-0304] [icat/2000-0304] [bugtraq/2110] [bugtraq/1191] [snort/1018] WEB-IIS iisadmpwd attempt" "1", "2347", "2004-11-01 17:06:27", "24.165.163.71", "46134", "66.110.213.225", "80", "[cve/2000-0304] [icat/2000-0304] [bugtraq/2110] [bugtraq/1191] [snort/1018] WEB-IIS iisadmpwd attempt" "1", "2349", "2004-11-01 17:06:27", "24.165.163.71", "46134", "66.110.213.225", "80", "[cve/2000-0304] [icat/2000-0304] [bugtraq/2110] [bugtraq/1191] [snort/1018] WEB-IIS iisadmpwd attempt" "1", "2383", "2004-11-01 17:06:47", "24.165.163.71", "46221", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "2387", "2004-11-01 17:07:08", "24.165.163.71", "46246", "66.110.213.225", "80", "[nessus/10356] [cve/2000-0302] [icat/2000-0302] [bugtraq/1084] [snort/1019] WEB-IIS index server file source code attempt" "1", "2388", "2004-11-01 17:07:08", "24.165.163.71", "46246", "66.110.213.225", "80", "[nessus/10356] [cve/2000-0302] [icat/2000-0302] [bugtraq/1084] [snort/978] WEB-IIS ASP contents view" "1", "2389", "2004-11-01 17:07:08", "24.165.163.71", "46246", "66.110.213.225", "80", "[cve/2000-0942] [icat/2000-0942] [bugtraq/1861] [snort/979] WEB-IIS ASP contents view" "1", "2424", "2004-11-01 17:07:29", "24.165.163.71", "46348", "66.110.213.225", "80", "[cve/2001-0780] [icat/2001-0780] [bugtraq/2793] [snort/1574] WEB-CGI directorypro.cgi attempt" "1", "2427", "2004-11-01 17:07:29", "24.165.163.71", "46348", "66.110.213.225", "80", "[cve/2001-0780] [icat/2001-0780] [bugtraq/2793] [snort/1574] WEB-CGI directorypro.cgi attempt" "1", "2430", "2004-11-01 17:07:29", "24.165.163.71", "46348", "66.110.213.225", "80", "[cve/2001-0780] [icat/2001-0780] [bugtraq/2793] [snort/1574] WEB-CGI directorypro.cgi attempt" "1", "2433", "2004-11-01 17:07:30", "24.165.163.71", "46356", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2434", "2004-11-01 17:07:30", "24.165.163.71", "46356", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2435", "2004-11-01 17:07:30", "24.165.163.71", "46356", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2439", "2004-11-01 17:07:31", "24.165.163.71", "46366", "66.110.213.225", "80", "[nessus/10306] [cve/1999-1063] [icat/1999-1063] [bugtraq/304] [arachNIDS/466] [snort/809] WEB-CGI whois_raw.cgi arbitrary command execution attempt" "1", "2442", "2004-11-01 17:07:31", "24.165.163.71", "46366", "66.110.213.225", "80", "[nessus/10306] [cve/1999-1063] [icat/1999-1063] [bugtraq/304] [arachNIDS/466] [snort/809] WEB-CGI whois_raw.cgi arbitrary command execution attempt" "1", "2445", "2004-11-01 17:07:31", "24.165.163.71", "46366", "66.110.213.225", "80", "[nessus/10306] [cve/1999-1063] [icat/1999-1063] [bugtraq/304] [arachNIDS/466] [snort/809] WEB-CGI whois_raw.cgi arbitrary command execution attempt" "1", "2461", "2004-11-01 17:07:53", "24.165.163.71", "46425", "66.110.213.225", "80", "[cve/1999-0067] [icat/1999-0067] [bugtraq/629] [arachNIDS/128] [snort/1762] WEB-CGI phf arbitrary command execution attempt" "1", "2464", "2004-11-01 17:07:53", "24.165.163.71", "46425", "66.110.213.225", "80", "[cve/1999-0067] [icat/1999-0067] [bugtraq/629] [arachNIDS/128] [snort/1762] WEB-CGI phf arbitrary command execution attempt" "1", "2467", "2004-11-01 17:07:53", "24.165.163.71", "46425", "66.110.213.225", "80", "[cve/1999-0067] [icat/1999-0067] [bugtraq/629] [arachNIDS/128] [snort/1762] WEB-CGI phf arbitrary command execution attempt" "1", "2472", "2004-11-01 17:08:05", "24.165.163.71", "46451", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "2473", "2004-11-01 17:08:05", "24.165.163.71", "46451", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "2474", "2004-11-01 17:08:05", "24.165.163.71", "46451", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "2497", "2004-11-01 17:08:13", "24.165.163.71", "46498", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2499", "2004-11-01 17:08:13", "24.165.163.71", "46498", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2501", "2004-11-01 17:08:13", "24.165.163.71", "46498", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2513", "2004-11-01 17:08:50", "24.165.163.71", "46553", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "2516", "2004-11-01 17:08:50", "24.165.163.71", "46553", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "2519", "2004-11-01 17:08:50", "24.165.163.71", "46553", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "2552", "2004-11-01 17:08:59", "24.165.163.71", "46596", "66.110.213.225", "80", "[nessus/11018] [snort/1817] WEB-IIS MS Site Server default login attempt" "1", "2553", "2004-11-01 17:08:59", "24.165.163.71", "46596", "66.110.213.225", "80", "[nessus/11018] [snort/1817] WEB-IIS MS Site Server default login attempt" "1", "2554", "2004-11-01 17:08:59", "24.165.163.71", "46596", "66.110.213.225", "80", "[nessus/11018] [snort/1817] WEB-IIS MS Site Server default login attempt" "1", "2555", "2004-11-01 17:08:59", "24.165.163.71", "46596", "66.110.213.225", "80", "[nessus/11018] [snort/1817] WEB-IIS MS Site Server default login attempt" "1", "2603", "2004-11-01 17:09:31", "24.165.163.71", "46755", "66.110.213.225", "80", "[nessus/10616] [cve/2001-0211] [icat/2001-0211] [bugtraq/2362] [snort/900] WEB-CGI webspirs.cgi directory traversal attempt" "1", "2606", "2004-11-01 17:09:31", "24.165.163.71", "46755", "66.110.213.225", "80", "[nessus/10616] [cve/2001-0211] [icat/2001-0211] [bugtraq/2362] [snort/900] WEB-CGI webspirs.cgi directory traversal attempt" "1", "2609", "2004-11-01 17:09:31", "24.165.163.71", "46755", "66.110.213.225", "80", "[nessus/10616] [cve/2001-0211] [icat/2001-0211] [bugtraq/2362] [snort/900] WEB-CGI webspirs.cgi directory traversal attempt" "1", "2613", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2615", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2617", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2619", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2621", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2623", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2625", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2627", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2629", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2631", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2633", "2004-11-01 17:09:36", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2635", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2637", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2639", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2641", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2643", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2645", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2647", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2649", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2651", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2653", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2655", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2657", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2659", "2004-11-01 17:09:37", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2661", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2663", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2665", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2667", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2669", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2671", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2673", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2675", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2677", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2679", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2681", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2683", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2685", "2004-11-01 17:09:38", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2687", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2689", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2691", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2693", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2695", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2697", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2699", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2701", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2703", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2705", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2707", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2709", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2711", "2004-11-01 17:09:39", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2713", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2715", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2717", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2719", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2721", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2723", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2725", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2727", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2729", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2731", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2733", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2735", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2737", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2739", "2004-11-01 17:09:40", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2741", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2743", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2745", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2747", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2749", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2751", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2753", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2755", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2757", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2759", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2761", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2763", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2765", "2004-11-01 17:09:41", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2767", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2769", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2771", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2773", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2775", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2777", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2779", "2004-11-01 17:09:42", "24.165.163.71", "46774", "66.110.213.225", "80", "[cve/2001-0537] [icat/2001-0537] [bugtraq/2936] [snort/1250] WEB-MISC Cisco IOS HTTP configuration attempt" "1", "2795", "2004-11-01 17:10:23", "24.165.163.71", "46954", "66.110.213.225", "80", "[nessus/10467] [cve/2000-0674] [icat/2000-0674] [bugtraq/1471] [snort/1612] WEB-MISC ftp.pl attempt" "1", "2798", "2004-11-01 17:10:23", "24.165.163.71", "46954", "66.110.213.225", "80", "[nessus/10467] [cve/2000-0674] [icat/2000-0674] [bugtraq/1471] [snort/1612] WEB-MISC ftp.pl attempt" "1", "2801", "2004-11-01 17:10:23", "24.165.163.71", "46954", "66.110.213.225", "80", "[nessus/10467] [cve/2000-0674] [icat/2000-0674] [bugtraq/1471] [snort/1612] WEB-MISC ftp.pl attempt" "1", "2843", "2004-11-01 17:10:55", "24.165.163.71", "47038", "66.110.213.225", "80", "[nessus/11724] [cve/2000-0682] [icat/2000-0682] [bugtraq/1518] [snort/2238] WEB-MISC WebLogic ConsoleHelp view source attempt" "1", "2870", "2004-11-01 17:11:29", "24.165.163.71", "47124", "66.110.213.225", "80", "[cve/2002-0392] [icat/2002-0392] [cve/2002-0079] [icat/2002-0079] [cve/2002-0071] [icat/2002-0071] [bugtraq/5033] [bugtraq/4485] [bugtraq/4474] [snort/1807] WEB-MISC Chunked-Encoding transfer attempt" "1", "2873", "2004-11-01 17:11:29", "24.165.163.71", "47125", "66.110.213.225", "80", "[cve/2002-0392] [icat/2002-0392] [cve/2002-0079] [icat/2002-0079] [cve/2002-0071] [icat/2002-0071] [bugtraq/5033] [bugtraq/4485] [bugtraq/4474] [snort/1807] WEB-MISC Chunked-Encoding transfer attempt" "1", "2900", "2004-11-01 17:12:14", "24.165.163.71", "47216", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2906", "2004-11-01 17:12:18", "24.165.163.71", "47236", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "2908", "2004-11-01 17:12:18", "24.165.163.71", "47237", "66.110.213.225", "80", "[cve/2001-0437] [icat/2001-0437] [cve/2001-0436] [icat/2001-0436] [bugtraq/2611] [snort/1571] WEB-CGI dcforum.cgi directory traversal attempt" "1", "2911", "2004-11-01 17:12:18", "24.165.163.71", "47237", "66.110.213.225", "80", "[cve/2001-0437] [icat/2001-0437] [cve/2001-0436] [icat/2001-0436] [bugtraq/2611] [snort/1571] WEB-CGI dcforum.cgi directory traversal attempt" "1", "2914", "2004-11-01 17:12:18", "24.165.163.71", "47237", "66.110.213.225", "80", "[cve/2001-0437] [icat/2001-0437] [cve/2001-0436] [icat/2001-0436] [bugtraq/2611] [snort/1571] WEB-CGI dcforum.cgi directory traversal attempt" "1", "2917", "2004-11-01 17:12:18", "24.165.163.71", "47237", "66.110.213.225", "80", "[cve/2001-0437] [icat/2001-0437] [cve/2001-0436] [icat/2001-0436] [bugtraq/2611] [snort/1571] WEB-CGI dcforum.cgi directory traversal attempt" "1", "2926", "2004-11-01 17:12:25", "24.165.163.71", "47228", "66.110.213.225", "80", "[nessus/10532] [cve/2000-1005] [icat/2000-1005] [bugtraq/1774] [snort/1088] WEB-CGI eXtropia webstore directory traversal" "1", "2929", "2004-11-01 17:12:25", "24.165.163.71", "47228", "66.110.213.225", "80", "[nessus/10532] [cve/2000-1005] [icat/2000-1005] [bugtraq/1774] [snort/1088] WEB-CGI eXtropia webstore directory traversal" "1", "2932", "2004-11-01 17:12:25", "24.165.163.71", "47228", "66.110.213.225", "80", "[nessus/10532] [cve/2000-1005] [icat/2000-1005] [bugtraq/1774] [snort/1088] WEB-CGI eXtropia webstore directory traversal" "1", "2935", "2004-11-01 17:12:27", "24.165.163.71", "47261", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2936", "2004-11-01 17:12:27", "24.165.163.71", "47261", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2938", "2004-11-01 17:12:27", "24.165.163.71", "47261", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "2961", "2004-11-01 17:13:00", "24.165.163.71", "47305", "66.110.213.225", "80", "[nessus/11630] [snort/2153] WEB-PHP autohtml.php directory traversal attempt" "1", "2964", "2004-11-01 17:13:00", "24.165.163.71", "47305", "66.110.213.225", "80", "[nessus/11630] [snort/2153] WEB-PHP autohtml.php directory traversal attempt" "1", "2967", "2004-11-01 17:13:00", "24.165.163.71", "47305", "66.110.213.225", "80", "[nessus/11630] [snort/2153] WEB-PHP autohtml.php directory traversal attempt" "1", "3033", "2004-11-01 17:13:23", "24.165.163.71", "47397", "66.110.213.225", "80", "[nessus/10669] [cve/2001-0561] [icat/2001-0561] [bugtraq/2705] [snort/1501] WEB-CGI a1stats a1disp3.cgi directory traversal attempt" "1", "3036", "2004-11-01 17:13:23", "24.165.163.71", "47397", "66.110.213.225", "80", "[nessus/10669] [cve/2001-0561] [icat/2001-0561] [bugtraq/2705] [snort/1501] WEB-CGI a1stats a1disp3.cgi directory traversal attempt" "1", "3039", "2004-11-01 17:13:23", "24.165.163.71", "47397", "66.110.213.225", "80", "[nessus/10669] [cve/2001-0561] [icat/2001-0561] [bugtraq/2705] [snort/1501] WEB-CGI a1stats a1disp3.cgi directory traversal attempt" "1", "3042", "2004-11-01 17:13:23", "24.165.163.71", "47397", "66.110.213.225", "80", "[nessus/10669] [cve/2001-0561] [icat/2001-0561] [bugtraq/2705] [snort/1501] WEB-CGI a1stats a1disp3.cgi directory traversal attempt" "1", "3045", "2004-11-01 17:13:23", "24.165.163.71", "47397", "66.110.213.225", "80", "[nessus/10669] [cve/2001-0561] [icat/2001-0561] [bugtraq/2705] [snort/1501] WEB-CGI a1stats a1disp3.cgi directory traversal attempt" "1", "3048", "2004-11-01 17:13:23", "24.165.163.71", "47397", "66.110.213.225", "80", "[nessus/10669] [cve/2001-0561] [icat/2001-0561] [bugtraq/2705] [snort/1501] WEB-CGI a1stats a1disp3.cgi directory traversal attempt" "1", "3063", "2004-11-01 17:13:32", "24.165.163.71", "47443", "66.110.213.225", "80", "[nessus/10115] [cve/2000-0126] [icat/2000-0126] [cve/2000-0071] [icat/2000-0071] [bugtraq/968] [bugtraq/1065] [arachNIDS/553] [snort/1244] WEB-IIS ISAPI .idq attempt" "1", "3066", "2004-11-01 17:13:32", "24.165.163.71", "47444", "66.110.213.225", "80", "[nessus/10115] [cve/2000-0126] [icat/2000-0126] [cve/2000-0071] [icat/2000-0071] [bugtraq/968] [bugtraq/1065] [arachNIDS/553] [snort/1244] WEB-IIS ISAPI .idq attempt" "1", "3085", "2004-11-01 17:13:42", "24.165.163.71", "47498", "66.110.213.225", "80", "[nessus/10781] [nessus/10755] [cve/2001-0660] [icat/2001-0660] [bugtraq/3301] [snort/1567] WEB-IIS /exchange/root.asp attempt" "1", "3093", "2004-11-01 17:13:47", "24.165.163.71", "47523", "66.110.213.225", "80", "[bugtraq/6525] [snort/2342] WEB-PHP DCP-Portal remote file include attempt" "1", "3094", "2004-11-01 17:13:47", "24.165.163.71", "47523", "66.110.213.225", "80", "[bugtraq/6525] [snort/2342] WEB-PHP DCP-Portal remote file include attempt" "1", "3095", "2004-11-01 17:13:47", "24.165.163.71", "47523", "66.110.213.225", "80", "[bugtraq/6525] [snort/2342] WEB-PHP DCP-Portal remote file include attempt" "1", "3099", "2004-11-01 17:14:00", "24.165.163.71", "47549", "66.110.213.225", "80", "[nessus/10015] [cve/2000-0039] [icat/2000-0039] [bugtraq/896] [snort/1509] WEB-CGI AltaVista Intranet Search directory traversal attempt" "1", "3100", "2004-11-01 17:14:00", "24.165.163.71", "47549", "66.110.213.225", "80", "[nessus/10015] [cve/2000-0039] [icat/2000-0039] [bugtraq/896] [snort/1509] WEB-CGI AltaVista Intranet Search directory traversal attempt" "1", "3101", "2004-11-01 17:14:00", "24.165.163.71", "47549", "66.110.213.225", "80", "[nessus/10015] [cve/2000-0039] [icat/2000-0039] [bugtraq/896] [snort/1509] WEB-CGI AltaVista Intranet Search directory traversal attempt" "1", "3105", "2004-11-01 17:14:02", "24.165.163.71", "47561", "66.110.213.225", "80", "url[nessus/10362] [cve/1999-0278] [icat/1999-0278] [bugtraq/149] [snort/975] WEB-IIS Alternate Data streams ASP file access attempt" "1", "3106", "2004-11-01 17:14:04", "24.165.163.71", "47570", "66.110.213.225", "80", "[nessus/10106] [cve/1999-0264] [icat/1999-0264] [bugtraq/2001] [snort/1608] WEB-CGI htmlscript attempt" "1", "3109", "2004-11-01 17:14:04", "24.165.163.71", "47570", "66.110.213.225", "80", "[nessus/10106] [cve/1999-0264] [icat/1999-0264] [bugtraq/2001] [snort/1608] WEB-CGI htmlscript attempt" "1", "3112", "2004-11-01 17:14:04", "24.165.163.71", "47570", "66.110.213.225", "80", "[nessus/10106] [cve/1999-0264] [icat/1999-0264] [bugtraq/2001] [snort/1608] WEB-CGI htmlscript attempt" "1", "3116", "2004-11-01 17:14:05", "24.165.163.71", "47574", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3119", "2004-11-01 17:14:05", "24.165.163.71", "47574", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3122", "2004-11-01 17:14:05", "24.165.163.71", "47574", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3125", "2004-11-01 17:14:05", "24.165.163.71", "47574", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3128", "2004-11-01 17:14:05", "24.165.163.71", "47574", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3131", "2004-11-01 17:14:05", "24.165.163.71", "47574", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3133", "2004-11-01 17:14:12", "24.165.163.71", "47599", "66.110.213.225", "80", "[cve/2000-0922] [icat/2000-0922] [bugtraq/1776] [snort/1468] WEB-CGI Web Shopper shopper.cgi attempt" "1", "3136", "2004-11-01 17:14:12", "24.165.163.71", "47599", "66.110.213.225", "80", "[cve/2000-0922] [icat/2000-0922] [bugtraq/1776] [snort/1468] WEB-CGI Web Shopper shopper.cgi attempt" "1", "3139", "2004-11-01 17:14:12", "24.165.163.71", "47599", "66.110.213.225", "80", "[cve/2000-0922] [icat/2000-0922] [bugtraq/1776] [snort/1468] WEB-CGI Web Shopper shopper.cgi attempt" "1", "3142", "2004-11-01 17:14:16", "24.165.163.71", "47616", "66.110.213.225", "80", "[nessus/11636] [bugtraq/7625] [bugtraq/7543] [bugtraq/7542] [snort/2150] WEB-PHP ttCMS header.php remote file include attempt" "1", "3144", "2004-11-01 17:14:16", "24.165.163.71", "47616", "66.110.213.225", "80", "[nessus/11636] [bugtraq/7625] [bugtraq/7543] [bugtraq/7542] [snort/2150] WEB-PHP ttCMS header.php remote file include attempt" "1", "3146", "2004-11-01 17:14:16", "24.165.163.71", "47616", "66.110.213.225", "80", "[nessus/11636] [bugtraq/7625] [bugtraq/7543] [bugtraq/7542] [snort/2150] WEB-PHP ttCMS header.php remote file include attempt" "1", "3148", "2004-11-01 17:14:17", "24.165.163.71", "47620", "66.110.213.225", "80", "[nessus/10363] [bugtraq/1814] [snort/997] WEB-IIS asp-dot attempt" "1", "3150", "2004-11-01 17:14:23", "24.165.163.71", "47642", "66.110.213.225", "80", "[cve/2000-0282] [icat/2000-0282] [bugtraq/1102] [arachNIDS/471] [snort/813] WEB-CGI webplus directory traversal" "1", "3153", "2004-11-01 17:14:23", "24.165.163.71", "47642", "66.110.213.225", "80", "[cve/2000-0282] [icat/2000-0282] [bugtraq/1102] [arachNIDS/471] [snort/813] WEB-CGI webplus directory traversal" "1", "3156", "2004-11-01 17:14:23", "24.165.163.71", "47642", "66.110.213.225", "80", "[cve/2000-0282] [icat/2000-0282] [bugtraq/1102] [arachNIDS/471] [snort/813] WEB-CGI webplus directory traversal" "1", "3177", "2004-11-01 17:14:29", "24.165.163.71", "47681", "66.110.213.225", "80", "url[snort/1256] WEB-IIS CodeRed v2 root.exe access" "1", "3178", "2004-11-01 17:14:29", "24.165.163.71", "47682", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3182", "2004-11-01 17:14:47", "24.165.163.71", "47732", "66.110.213.225", "80", "[cve/2001-0308] [icat/2001-0308] [cve/2000-0975] [icat/2000-0975] [bugtraq/2388] [bugtraq/2338] [snort/820] WEB-CGI anaconda directory transversal attempt" "1", "3185", "2004-11-01 17:14:47", "24.165.163.71", "47732", "66.110.213.225", "80", "[cve/2001-0308] [icat/2001-0308] [cve/2000-0975] [icat/2000-0975] [bugtraq/2388] [bugtraq/2338] [snort/820] WEB-CGI anaconda directory transversal attempt" "1", "3188", "2004-11-01 17:14:47", "24.165.163.71", "47732", "66.110.213.225", "80", "[cve/2001-0308] [icat/2001-0308] [cve/2000-0975] [icat/2000-0975] [bugtraq/2388] [bugtraq/2338] [snort/820] WEB-CGI anaconda directory transversal attempt" "1", "3204", "2004-11-01 17:14:51", "24.165.163.71", "47755", "66.110.213.225", "80", "[nessus/10025] [cve/1999-1462] [icat/1999-1462] [bugtraq/142] [snort/1531] WEB-CGI bb-hist.sh attempt" "1", "3208", "2004-11-01 17:14:51", "24.165.163.71", "47755", "66.110.213.225", "80", "[nessus/10025] [cve/1999-1462] [icat/1999-1462] [bugtraq/142] [snort/1531] WEB-CGI bb-hist.sh attempt" "1", "3212", "2004-11-01 17:14:51", "24.165.163.71", "47755", "66.110.213.225", "80", "[nessus/10025] [cve/1999-1462] [icat/1999-1462] [bugtraq/142] [snort/1531] WEB-CGI bb-hist.sh attempt" "1", "3222", "2004-11-01 17:15:00", "24.165.163.71", "47792", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "3223", "2004-11-01 17:15:02", "24.165.163.71", "47800", "66.110.213.225", "80", "[nessus/10638] [cve/2001-0212] [icat/2001-0212] [bugtraq/2367] [snort/1703] WEB-CGI auktion.cgi directory traversal attempt" "1", "3226", "2004-11-01 17:15:03", "24.165.163.71", "47800", "66.110.213.225", "80", "[nessus/10638] [cve/2001-0212] [icat/2001-0212] [bugtraq/2367] [snort/1703] WEB-CGI auktion.cgi directory traversal attempt" "1", "3229", "2004-11-01 17:15:03", "24.165.163.71", "47800", "66.110.213.225", "80", "[nessus/10638] [cve/2001-0212] [icat/2001-0212] [bugtraq/2367] [snort/1703] WEB-CGI auktion.cgi directory traversal attempt" "1", "3234", "2004-11-01 17:15:22", "24.165.163.71", "47811", "66.110.213.225", "80", "[nessus/10783] [cve/2000-0707] [icat/2000-0707] [bugtraq/1557] [arachNIDS/300] [snort/509] WEB-MISC PCCS mysql database admin tool access" "1", "3242", "2004-11-01 17:15:27", "24.165.163.71", "47847", "66.110.213.225", "80", "[cve/2001-0272] [icat/2001-0272] [bugtraq/2504] [snort/899] WEB-CGI Amaya templates sendtemp.pl directory traversal attempt" "1", "3245", "2004-11-01 17:15:27", "24.165.163.71", "47847", "66.110.213.225", "80", "[cve/2001-0272] [icat/2001-0272] [bugtraq/2504] [snort/899] WEB-CGI Amaya templates sendtemp.pl directory traversal attempt" "1", "3248", "2004-11-01 17:15:27", "24.165.163.71", "47847", "66.110.213.225", "80", "[cve/2001-0272] [icat/2001-0272] [bugtraq/2504] [snort/899] WEB-CGI Amaya templates sendtemp.pl directory traversal attempt" "1", "3251", "2004-11-01 17:15:29", "24.165.163.71", "47866", "66.110.213.225", "80", "[cve/2000-0207] [icat/2000-0207] [bugtraq/1031] [arachNIDS/290] [snort/1196] WEB-CGI SGI InfoSearch fname attempt" "1", "3253", "2004-11-01 17:15:29", "24.165.163.71", "47866", "66.110.213.225", "80", "[cve/2000-0207] [icat/2000-0207] [bugtraq/1031] [arachNIDS/290] [snort/1196] WEB-CGI SGI InfoSearch fname attempt" "1", "3255", "2004-11-01 17:15:29", "24.165.163.71", "47866", "66.110.213.225", "80", "[cve/2000-0207] [icat/2000-0207] [bugtraq/1031] [arachNIDS/290] [snort/1196] WEB-CGI SGI InfoSearch fname attempt" "1", "3257", "2004-11-01 17:15:29", "24.165.163.71", "47866", "66.110.213.225", "80", "[cve/2000-0207] [icat/2000-0207] [bugtraq/1031] [arachNIDS/290] [snort/1196] WEB-CGI SGI InfoSearch fname attempt" "1", "3309", "2004-11-01 17:15:49", "24.165.163.71", "47916", "66.110.213.225", "80", "[nessus/12048] [nessus/10576] [cve/1999-0737] [icat/1999-0737] [snort/1403] WEB-MISC viewcode access" "1", "3321", "2004-11-01 17:16:08", "24.165.163.71", "47978", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3322", "2004-11-01 17:16:08", "24.165.163.71", "47978", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3323", "2004-11-01 17:16:08", "24.165.163.71", "47978", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3335", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3336", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3338", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3339", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3340", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3342", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3343", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3344", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3346", "2004-11-01 17:16:26", "24.165.163.71", "48029", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3348", "2004-11-01 17:16:31", "24.165.163.71", "48051", "66.110.213.225", "80", "[cve/2004-0030] [icat/2004-0030] [bugtraq/9368] [snort/2366] WEB-PHP PhpGedView PGV authentication_index.php base directory manipulation attempt" "1", "3350", "2004-11-01 17:16:31", "24.165.163.71", "48051", "66.110.213.225", "80", "[cve/2004-0030] [icat/2004-0030] [bugtraq/9368] [snort/2366] WEB-PHP PhpGedView PGV authentication_index.php base directory manipulation attempt" "1", "3352", "2004-11-01 17:16:31", "24.165.163.71", "48051", "66.110.213.225", "80", "[cve/2004-0030] [icat/2004-0030] [bugtraq/9368] [snort/2366] WEB-PHP PhpGedView PGV authentication_index.php base directory manipulation attempt" "1", "3354", "2004-11-01 17:16:39", "24.165.163.71", "48083", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3363", "2004-11-01 17:16:44", "24.165.163.71", "48123", "66.110.213.225", "80", "[nessus/10484] [snort/1489] WEB-MISC /~nobody access" "1", "3374", "2004-11-01 17:17:04", "24.165.163.71", "48238", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3377", "2004-11-01 17:17:04", "24.165.163.71", "48238", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3380", "2004-11-01 17:17:04", "24.165.163.71", "48240", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3384", "2004-11-01 17:17:04", "24.165.163.71", "48241", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3387", "2004-11-01 17:17:04", "24.165.163.71", "48241", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3388", "2004-11-01 17:17:05", "24.165.163.71", "48241", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3390", "2004-11-01 17:17:05", "24.165.163.71", "48241", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3393", "2004-11-01 17:17:05", "24.165.163.71", "48243", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3397", "2004-11-01 17:17:05", "24.165.163.71", "48244", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3403", "2004-11-01 17:17:05", "24.165.163.71", "48244", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3404", "2004-11-01 17:17:05", "24.165.163.71", "48244", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3409", "2004-11-01 17:17:05", "24.165.163.71", "48244", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3415", "2004-11-01 17:17:05", "24.165.163.71", "48246", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3419", "2004-11-01 17:17:05", "24.165.163.71", "48248", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3422", "2004-11-01 17:17:05", "24.165.163.71", "48248", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3423", "2004-11-01 17:17:06", "24.165.163.71", "48248", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3425", "2004-11-01 17:17:06", "24.165.163.71", "48248", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3428", "2004-11-01 17:17:06", "24.165.163.71", "48251", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3432", "2004-11-01 17:17:06", "24.165.163.71", "48253", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3435", "2004-11-01 17:17:06", "24.165.163.71", "48253", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3436", "2004-11-01 17:17:06", "24.165.163.71", "48253", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3438", "2004-11-01 17:17:06", "24.165.163.71", "48253", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3441", "2004-11-01 17:17:06", "24.165.163.71", "48255", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3445", "2004-11-01 17:17:06", "24.165.163.71", "48256", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3448", "2004-11-01 17:17:07", "24.165.163.71", "48256", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3449", "2004-11-01 17:17:07", "24.165.163.71", "48256", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3451", "2004-11-01 17:17:07", "24.165.163.71", "48256", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3454", "2004-11-01 17:17:07", "24.165.163.71", "48258", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3458", "2004-11-01 17:17:07", "24.165.163.71", "48259", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3461", "2004-11-01 17:17:07", "24.165.163.71", "48259", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3462", "2004-11-01 17:17:07", "24.165.163.71", "48259", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3464", "2004-11-01 17:17:07", "24.165.163.71", "48259", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3467", "2004-11-01 17:17:07", "24.165.163.71", "48261", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3471", "2004-11-01 17:17:08", "24.165.163.71", "48263", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3474", "2004-11-01 17:17:08", "24.165.163.71", "48263", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3475", "2004-11-01 17:17:08", "24.165.163.71", "48263", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3477", "2004-11-01 17:17:08", "24.165.163.71", "48263", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3480", "2004-11-01 17:17:08", "24.165.163.71", "48264", "66.110.213.225", "80", "[bugtraq/6984] [snort/2358] WEB-PHP Typo3 translations.php file include" "1", "3482", "2004-11-01 17:17:08", "24.165.163.71", "48265", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3485", "2004-11-01 17:17:08", "24.165.163.71", "48264", "66.110.213.225", "80", "[bugtraq/6984] [snort/2358] WEB-PHP Typo3 translations.php file include" "1", "3488", "2004-11-01 17:17:08", "24.165.163.71", "48264", "66.110.213.225", "80", "[bugtraq/6984] [snort/2358] WEB-PHP Typo3 translations.php file include" "1", "3490", "2004-11-01 17:17:08", "24.165.163.71", "48266", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3493", "2004-11-01 17:17:08", "24.165.163.71", "48266", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3494", "2004-11-01 17:17:08", "24.165.163.71", "48264", "66.110.213.225", "80", "[bugtraq/6984] [snort/2358] WEB-PHP Typo3 translations.php file include" "1", "3496", "2004-11-01 17:17:08", "24.165.163.71", "48266", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3498", "2004-11-01 17:17:08", "24.165.163.71", "48264", "66.110.213.225", "80", "[bugtraq/6984] [snort/2358] WEB-PHP Typo3 translations.php file include" "1", "3500", "2004-11-01 17:17:08", "24.165.163.71", "48266", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3503", "2004-11-01 17:17:08", "24.165.163.71", "48268", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3507", "2004-11-01 17:17:09", "24.165.163.71", "48269", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3510", "2004-11-01 17:17:09", "24.165.163.71", "48269", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3511", "2004-11-01 17:17:09", "24.165.163.71", "48269", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3513", "2004-11-01 17:17:09", "24.165.163.71", "48269", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3516", "2004-11-01 17:17:09", "24.165.163.71", "48273", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3520", "2004-11-01 17:17:09", "24.165.163.71", "48275", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3523", "2004-11-01 17:17:09", "24.165.163.71", "48275", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3524", "2004-11-01 17:17:09", "24.165.163.71", "48275", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3525", "2004-11-01 17:17:09", "24.165.163.71", "48275", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3527", "2004-11-01 17:17:09", "24.165.163.71", "48277", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3530", "2004-11-01 17:17:10", "24.165.163.71", "48279", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3532", "2004-11-01 17:17:10", "24.165.163.71", "48279", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3533", "2004-11-01 17:17:10", "24.165.163.71", "48279", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3534", "2004-11-01 17:17:10", "24.165.163.71", "48279", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3536", "2004-11-01 17:17:10", "24.165.163.71", "48281", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3539", "2004-11-01 17:17:10", "24.165.163.71", "48282", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3541", "2004-11-01 17:17:10", "24.165.163.71", "48282", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3542", "2004-11-01 17:17:10", "24.165.163.71", "48282", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3543", "2004-11-01 17:17:10", "24.165.163.71", "48282", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3545", "2004-11-01 17:17:11", "24.165.163.71", "48284", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3548", "2004-11-01 17:17:11", "24.165.163.71", "48285", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3551", "2004-11-01 17:17:11", "24.165.163.71", "48285", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3553", "2004-11-01 17:17:11", "24.165.163.71", "48285", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3555", "2004-11-01 17:17:11", "24.165.163.71", "48285", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3557", "2004-11-01 17:17:11", "24.165.163.71", "48288", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3560", "2004-11-01 17:17:11", "24.165.163.71", "48290", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3562", "2004-11-01 17:17:11", "24.165.163.71", "48290", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3563", "2004-11-01 17:17:11", "24.165.163.71", "48290", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3564", "2004-11-01 17:17:11", "24.165.163.71", "48290", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3566", "2004-11-01 17:17:12", "24.165.163.71", "48293", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3569", "2004-11-01 17:17:12", "24.165.163.71", "48294", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3571", "2004-11-01 17:17:12", "24.165.163.71", "48294", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3572", "2004-11-01 17:17:12", "24.165.163.71", "48294", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3573", "2004-11-01 17:17:12", "24.165.163.71", "48294", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3575", "2004-11-01 17:17:12", "24.165.163.71", "48296", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3578", "2004-11-01 17:17:12", "24.165.163.71", "48298", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3580", "2004-11-01 17:17:12", "24.165.163.71", "48298", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3581", "2004-11-01 17:17:12", "24.165.163.71", "48298", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3582", "2004-11-01 17:17:12", "24.165.163.71", "48298", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3584", "2004-11-01 17:17:13", "24.165.163.71", "48301", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3587", "2004-11-01 17:17:13", "24.165.163.71", "48302", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3589", "2004-11-01 17:17:13", "24.165.163.71", "48302", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3590", "2004-11-01 17:17:13", "24.165.163.71", "48302", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3591", "2004-11-01 17:17:13", "24.165.163.71", "48302", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3594", "2004-11-01 17:17:13", "24.165.163.71", "48303", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "3595", "2004-11-01 17:17:13", "24.165.163.71", "48304", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3598", "2004-11-01 17:17:13", "24.165.163.71", "48305", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3600", "2004-11-01 17:17:13", "24.165.163.71", "48305", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3601", "2004-11-01 17:17:13", "24.165.163.71", "48305", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3602", "2004-11-01 17:17:13", "24.165.163.71", "48305", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3604", "2004-11-01 17:17:14", "24.165.163.71", "48308", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3607", "2004-11-01 17:17:14", "24.165.163.71", "48310", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3609", "2004-11-01 17:17:14", "24.165.163.71", "48310", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3610", "2004-11-01 17:17:14", "24.165.163.71", "48310", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3611", "2004-11-01 17:17:14", "24.165.163.71", "48310", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3613", "2004-11-01 17:17:14", "24.165.163.71", "48314", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3616", "2004-11-01 17:17:14", "24.165.163.71", "48315", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3618", "2004-11-01 17:17:14", "24.165.163.71", "48315", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "3636", "2004-11-01 17:17:34", "24.165.163.71", "48469", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3637", "2004-11-01 17:17:35", "24.165.163.71", "48469", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3638", "2004-11-01 17:17:35", "24.165.163.71", "48469", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3639", "2004-11-01 17:17:37", "24.165.163.71", "48479", "66.110.213.225", "80", "[nessus/11615] [bugtraq/7543] [bugtraq/7542] [snort/2155] WEB-PHP ttforum remote file include attempt" "1", "3640", "2004-11-01 17:17:37", "24.165.163.71", "48479", "66.110.213.225", "80", "[nessus/11615] [bugtraq/7543] [bugtraq/7542] [snort/2155] WEB-PHP ttforum remote file include attempt" "1", "3641", "2004-11-01 17:17:40", "24.165.163.71", "48492", "66.110.213.225", "80", "[bugtraq/3592] [snort/1376] WEB-MISC jrun directory browse attempt" "1", "3696", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3698", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3701", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3704", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3706", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10356] [cve/2000-0302] [icat/2000-0302] [bugtraq/1084] [snort/1019] WEB-IIS index server file source code attempt" "1", "3707", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[cve/2000-0942] [icat/2000-0942] [bugtraq/1861] [snort/979] WEB-IIS ASP contents view" "1", "3708", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3709", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10356] [cve/2000-0302] [icat/2000-0302] [bugtraq/1084] [snort/1019] WEB-IIS index server file source code attempt" "1", "3710", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[cve/2000-0942] [icat/2000-0942] [bugtraq/1861] [snort/979] WEB-IIS ASP contents view" "1", "3711", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3712", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10370] [snort/1400] WEB-IIS /scripts/samples/ access" "1", "3714", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10370] [snort/1400] WEB-IIS /scripts/samples/ access" "1", "3716", "2004-11-01 17:18:40", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10370] [snort/1400] WEB-IIS /scripts/samples/ access" "1", "3718", "2004-11-01 17:18:41", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10370] [snort/1400] WEB-IIS /scripts/samples/ access" "1", "3720", "2004-11-01 17:18:41", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/10370] [snort/1400] WEB-IIS /scripts/samples/ access" "1", "3722", "2004-11-01 17:18:41", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3723", "2004-11-01 17:18:41", "24.165.163.71", "48670", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "3728", "2004-11-01 17:18:43", "24.165.163.71", "48677", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3741", "2004-11-01 17:18:47", "24.165.163.71", "48710", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3742", "2004-11-01 17:18:47", "24.165.163.71", "48710", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3743", "2004-11-01 17:18:48", "24.165.163.71", "48710", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3744", "2004-11-01 17:18:48", "24.165.163.71", "48710", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3750", "2004-11-01 17:18:51", "24.165.163.71", "48744", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3751", "2004-11-01 17:18:51", "24.165.163.71", "48744", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3752", "2004-11-01 17:18:51", "24.165.163.71", "48744", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3779", "2004-11-01 17:19:05", "24.165.163.71", "48847", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3801", "2004-11-01 17:19:18", "24.165.163.71", "48960", "66.110.213.225", "80", "[cve/1999-0229] [icat/1999-0229] [bugtraq/2218] [snort/974] WEB-IIS Directory transversal attempt" "1", "3803", "2004-11-01 17:19:18", "24.165.163.71", "48962", "66.110.213.225", "80", "[nessus/11043] [cve/2002-1042] [icat/2002-1042] [bugtraq/5191] [snort/1828] WEB-MISC iPlanet Search directory traversal attempt" "1", "3806", "2004-11-01 17:19:22", "24.165.163.71", "48997", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3807", "2004-11-01 17:19:22", "24.165.163.71", "48997", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3808", "2004-11-01 17:19:22", "24.165.163.71", "48997", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3815", "2004-11-01 17:19:31", "24.165.163.71", "49082", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3816", "2004-11-01 17:19:31", "24.165.163.71", "49082", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3817", "2004-11-01 17:19:31", "24.165.163.71", "49082", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3818", "2004-11-01 17:19:31", "24.165.163.71", "49098", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3819", "2004-11-01 17:19:31", "24.165.163.71", "49098", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3820", "2004-11-01 17:19:32", "24.165.163.71", "49098", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3821", "2004-11-01 17:19:32", "24.165.163.71", "49098", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3824", "2004-11-01 17:19:33", "24.165.163.71", "49120", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3825", "2004-11-01 17:19:33", "24.165.163.71", "49120", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3826", "2004-11-01 17:19:33", "24.165.163.71", "49123", "66.110.213.225", "80", "[nessus/10837] [bugtraq/3810] [snort/1590] WEB-CGI faqmanager.cgi arbitrary file access attempt" "1", "3829", "2004-11-01 17:19:33", "24.165.163.71", "49120", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3830", "2004-11-01 17:19:33", "24.165.163.71", "49120", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "3831", "2004-11-01 17:19:34", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3832", "2004-11-01 17:19:34", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3833", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3834", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3835", "2004-11-01 17:19:35", "24.165.163.71", "49155", "66.110.213.225", "80", "[nessus/11667] [snort/2143] WEB-PHP b2 cafelog gm-2-b2.php remote file include attempt" "1", "3837", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3838", "2004-11-01 17:19:35", "24.165.163.71", "49155", "66.110.213.225", "80", "[nessus/11667] [snort/2143] WEB-PHP b2 cafelog gm-2-b2.php remote file include attempt" "1", "3840", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3841", "2004-11-01 17:19:35", "24.165.163.71", "49155", "66.110.213.225", "80", "[nessus/11667] [snort/2143] WEB-PHP b2 cafelog gm-2-b2.php remote file include attempt" "1", "3843", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3844", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3848", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3851", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3854", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3855", "2004-11-01 17:19:35", "24.165.163.71", "49149", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3864", "2004-11-01 17:19:37", "24.165.163.71", "49204", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3865", "2004-11-01 17:19:37", "24.165.163.71", "49204", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3866", "2004-11-01 17:19:37", "24.165.163.71", "49204", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "3867", "2004-11-01 17:19:38", "24.165.163.71", "49219", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "3870", "2004-11-01 17:19:38", "24.165.163.71", "49219", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "3873", "2004-11-01 17:19:38", "24.165.163.71", "49219", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "3876", "2004-11-01 17:19:38", "24.165.163.71", "49219", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "3879", "2004-11-01 17:19:38", "24.165.163.71", "49219", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "3882", "2004-11-01 17:19:38", "24.165.163.71", "49219", "66.110.213.225", "80", "[nessus/11668] [snort/2141] WEB-PHP shoutbox.php directory traversal attempt" "1", "3892", "2004-11-01 17:19:53", "24.165.163.71", "49403", "66.110.213.225", "80", "[cve/2000-0071] [icat/2000-0071] [bugtraq/1065] [arachNIDS/552] [snort/1243] WEB-IIS ISAPI .ida attempt" "1", "3902", "2004-11-01 17:20:00", "24.165.163.71", "49476", "66.110.213.225", "80", "[nessus/10836] [cve/2002-0215] [icat/2002-0215] [cve/2001-1199] [icat/2001-1199] [bugtraq/3976] [bugtraq/3702] [snort/1534] WEB-CGI agora.cgi attempt" "1", "3904", "2004-11-01 17:20:00", "24.165.163.71", "49476", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4013", "2004-11-01 17:20:10", "24.165.163.71", "49584", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4015", "2004-11-01 17:20:10", "24.165.163.71", "49584", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4018", "2004-11-01 17:20:10", "24.165.163.71", "49584", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4020", "2004-11-01 17:20:10", "24.165.163.71", "49584", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4049", "2004-11-01 17:20:18", "24.165.163.71", "49682", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4051", "2004-11-01 17:20:18", "24.165.163.71", "49682", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4052", "2004-11-01 17:20:18", "24.165.163.71", "49682", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4053", "2004-11-01 17:20:18", "24.165.163.71", "49682", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4054", "2004-11-01 17:20:20", "24.165.163.71", "49700", "66.110.213.225", "80", "[nessus/11873] [bugtraq/8791] [snort/2307] WEB-PHP PayPal Storefront remote file include attempt" "1", "4055", "2004-11-01 17:20:20", "24.165.163.71", "49700", "66.110.213.225", "80", "[nessus/11873] [bugtraq/8791] [snort/2307] WEB-PHP PayPal Storefront remote file include attempt" "1", "4056", "2004-11-01 17:20:20", "24.165.163.71", "49701", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "4057", "2004-11-01 17:20:20", "24.165.163.71", "49700", "66.110.213.225", "80", "[nessus/11873] [bugtraq/8791] [snort/2307] WEB-PHP PayPal Storefront remote file include attempt" "1", "4058", "2004-11-01 17:20:20", "24.165.163.71", "49701", "66.110.213.225", "80", "url[snort/1256] WEB-IIS CodeRed v2 root.exe access" "1", "4059", "2004-11-01 17:20:22", "24.165.163.71", "49701", "66.110.213.225", "80", "[snort/1002] WEB-IIS cmd.exe access" "1", "4060", "2004-11-01 17:20:22", "24.165.163.71", "49701", "66.110.213.225", "80", "url[snort/1256] WEB-IIS CodeRed v2 root.exe access" "1", "4070", "2004-11-01 17:20:32", "24.165.163.71", "49789", "66.110.213.225", "80", "[nessus/10572] [cve/2000-1104] [icat/2000-1104] [cve/2000-0746] [icat/2000-0746] [bugtraq/1595] [bugtraq/1594] [bugtraq/119] [snort/1007] WEB-IIS cross-site scripting attempt" "1", "4071", "2004-11-01 17:20:32", "24.165.163.71", "49789", "66.110.213.225", "80", "[nessus/11032] [snort/1402] WEB-IIS iissamples access" "1", "4072", "2004-11-01 17:20:34", "24.165.163.71", "49701", "66.110.213.225", "80", "[nessus/11032] [cve/1999-1538] [icat/1999-1538] [bugtraq/189] [snort/993] WEB-IIS iisadmin access" "1", "4075", "2004-11-01 17:20:36", "24.165.163.71", "49701", "66.110.213.225", "80", "[nessus/11032] [cve/1999-1538] [icat/1999-1538] [bugtraq/189] [snort/993] WEB-IIS iisadmin access" "1", "4079", "2004-11-01 17:20:38", "24.165.163.71", "49829", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4080", "2004-11-01 17:20:38", "24.165.163.71", "49829", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4081", "2004-11-01 17:20:38", "24.165.163.71", "49829", "66.110.213.225", "80", "[snort/1497] WEB-MISC cross site scripting attempt" "1", "4083", "2004-11-01 17:20:39", "24.165.163.71", "49839", "66.110.213.225", "80", "[nessus/11876] [bugtraq/8814] [snort/2306] WEB-PHP gallery remote file include attempt" "1", "4084", "2004-11-01 17:20:39", "24.165.163.71", "49839", "66.110.213.225", "80", "[nessus/11876] [bugtraq/8814] [snort/2306] WEB-PHP gallery remote file include attempt" "1", "4085", "2004-11-01 17:20:39", "24.165.163.71", "49839", "66.110.213.225", "80", "[nessus/11876] [bugtraq/8814] [snort/2306] WEB-PHP gallery remote file include attempt" "1", "4086", "2004-11-01 17:20:39", "24.165.163.71", "49839", "66.110.213.225", "80", "[nessus/11876] [bugtraq/8814] [snort/2306] WEB-PHP gallery remote file include attempt" "1", "4093", "2004-11-01 17:20:43", "24.165.163.71", "49910", "66.110.213.225", "80", "[nessus/11739] [bugtraq/7919] [snort/2226] WEB-PHP pmachine remote file include attempt" "1", "4094", "2004-11-01 17:20:43", "24.165.163.71", "49910", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4095", "2004-11-01 17:20:43", "24.165.163.71", "49910", "66.110.213.225", "80", "[nessus/11739] [bugtraq/7919] [snort/2226] WEB-PHP pmachine remote file include attempt" "1", "4096", "2004-11-01 17:20:43", "24.165.163.71", "49910", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4097", "2004-11-01 17:20:43", "24.165.163.71", "49910", "66.110.213.225", "80", "[nessus/11739] [bugtraq/7919] [snort/2226] WEB-PHP pmachine remote file include attempt" "1", "4098", "2004-11-01 17:20:43", "24.165.163.71", "49910", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4100", "2004-11-01 17:20:45", "24.165.163.71", "49940", "66.110.213.225", "80", "[snort/1668] WEB-CGI /cgi-bin/ access" "1", "4102", "2004-11-01 17:20:48", "24.165.163.71", "49988", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4103", "2004-11-01 17:20:48", "24.165.163.71", "49988", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4104", "2004-11-01 17:20:48", "24.165.163.71", "49988", "66.110.213.225", "80", "[snort/2002] WEB-PHP remote include path" "1", "4105", "2004-11-01 17:20:48", "24.165.163.71", "49999", "66.110.213.225", "80", "url[nessus/10562] [cve/2000-0924] [icat/2000-0924] [bugtraq/1772] [snort/1092] WEB-CGI Armada Style Master Index directory traversal" "1", "4108", "2004-11-01 17:20:48", "24.165.163.71", "49999", "66.110.213.225", "80", "url[nessus/10562] [cve/2000-0924] [icat/2000-0924] [bugtraq/1772] [snort/1092] WEB-CGI Armada Style Master Index directory traversal" "1", "4111", "2004-11-01 17:20:48", "24.165.163.71", "49999", "66.110.213.225", "80", "url[nessus/10562] [cve/2000-0924] [icat/2000-0924] [bugtraq/1772] [snort/1092] WEB-CGI Armada Style Master Index directory traversal" "1", "4