salve a tutti

dato che ho un database sql condiviso on line, mi sto preoccupando di vedere se qualcuno "non desiderato" entrasse nella mia intranet. a questo proposito mi sono messo a controllare il log dell'iis.

spesso vedo delle richieste del genere:

#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2002-03-17 00:49:45
#Fields: time c-ip cs-method cs-uri-stem sc-status
00:49:44 80.200.131.218 GET /scripts/root.exe 401
00:49:44 80.200.131.218 GET /MSADC/root.exe 401
00:49:46 80.200.131.218 GET /c/winnt/system32/cmd.exe 404
00:49:46 80.200.131.218 GET /d/winnt/system32/cmd.exe 404
00:49:46 80.200.131.218 GET /scripts/..%5c../winnt/system32/cmd.exe 401
00:49:47 80.200.131.218 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 500
00:49:47 80.200.131.218 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 404
00:49:47 80.200.131.218 GET /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe 401
00:49:47 80.200.131.218 GET /scripts/..Á../winnt/system32/cmd.exe 401
00:49:48 80.200.131.218 GET /scripts/winnt/system32/cmd.exe 401
00:49:48 80.200.131.218 GET /winnt/system32/cmd.exe 404
00:49:52 80.200.131.218 GET /winnt/system32/cmd.exe 404
00:49:52 80.200.131.218 GET /scripts/..%5c../winnt/system32/cmd.exe 401
00:49:52 80.200.131.218 GET /scripts/..%5c../winnt/system32/cmd.exe 401
00:49:53 80.200.131.218 GET /scripts/..%5c../winnt/system32/cmd.exe 401
00:49:53 80.200.131.218 GET /scripts/..%2f../winnt/system32/cmd.exe 401
04:59:08 80.11.22.152 GET /scripts/root.exe 401
04:59:08 80.11.22.152 GET /MSADC/root.exe 401
05:00:43 80.11.22.152 GET /d/winnt/system32/cmd.exe 404
05:00:43 80.11.22.152 GET /scripts/..%5c../winnt/system32/cmd.exe 401
05:00:49 80.11.22.152 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 500
05:00:52 80.11.22.152 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 404
05:00:52 80.11.22.152 GET /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe 401
05:00:54 80.11.22.152 GET /scripts/..Á../winnt/system32/cmd.exe 401
05:00:54 80.11.22.152 GET /scripts/winnt/system32/cmd.exe 401
08:53:51 209.198.193.98 GET /default.ida 200
08:56:09 80.142.185.162 GET /scripts/root.exe 401
08:56:15 80.142.185.162 GET /MSADC/root.exe 401
08:56:21 80.142.185.162 GET /c/winnt/system32/cmd.exe 404
08:56:27 80.142.185.162 GET /d/winnt/system32/cmd.exe 404
08:56:31 80.142.185.162 GET /scripts/..%5c../winnt/system32/cmd.exe 401
08:56:36 80.142.185.162 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 500
08:56:42 80.142.185.162 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 404
08:56:48 80.142.185.162 GET /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe 401
08:56:54 80.142.185.162 GET /scripts/..Á../winnt/system32/cmd.exe 401
08:57:00 80.142.185.162 GET /scripts/winnt/system32/cmd.exe 401
08:57:06 80.142.185.162 GET /winnt/system32/cmd.exe 404
08:57:11 80.142.185.162 GET /winnt/system32/cmd.exe 404
08:57:17 80.142.185.162 GET /scripts/..%5c../winnt/system32/cmd.exe 401
08:57:26 80.142.185.162 GET /scripts/..%5c../winnt/system32/cmd.exe 401
08:57:31 80.142.185.162 GET /scripts/..%5c../winnt/system32/cmd.exe 401
08:57:36 80.142.185.162 GET /scripts/..%2f../winnt/system32/cmd.exe 401
18:29:28 209.190.1.218 GET /default.ida 200

qualcuno mi sa dire che cosa sono?

inoltre esiste un log del sql server in cui posso vedere a che ora si connettono i vari utenti e che cosa fanno?

grazie a tutti